Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: BDL5ePBsuMju3mgI67TyD12VuxbP5/Bj0SUrUaGSidw=
Subject key identifier: 52:24:D8:6F:C3:2E:09:0E:43:F8:8D:BD:69:22:F5:C6:C2:BF:5D:BB
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 01A08C0C9AF99C1D439FA935E027B0747B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 0EA9
Signing time: Thu 10 Sep 2026 16:00:31 +0000
Manifest this update: Thu 10 Sep 2026 16:00:31 +0000
Manifest next update: Fri 11 Sep 2026 16:00:31 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: B2FDFRlKwH940jcrlLhk15z12QUA94G3EOFwZJEjEeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:9a:f9:9c:1d:43:9f:a9:35:e0:27:b0:74:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Sep 10 16:00:31 2026 GMT
Not After : Sep 11 16:00:31 2026 GMT
Subject: CN=5224d86fc32e090e43f88dbd6922f5c6c2bf5dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:a6:f7:a5:9b:74:82:69:f9:5e:1d:58:f0:
10:22:6e:24:bf:c5:c8:6f:5d:1d:2a:80:aa:25:77:
2d:23:05:f0:74:bb:fd:cb:aa:0d:40:b2:e2:ca:f6:
53:8a:3e:9a:bf:b7:9c:32:06:ab:42:30:1b:a3:65:
3c:28:24:7b:7e:82:d8:5c:3b:d4:79:c5:76:44:e3:
89:37:91:1b:f9:d3:ed:fc:f8:a2:75:c3:f9:47:96:
98:23:39:91:f3:f1:a1:4c:e7:f8:27:7c:68:a2:49:
e1:d1:cb:67:ad:0b:25:48:f7:96:ba:b8:4e:64:cb:
a7:00:15:b8:3d:7e:f3:e1:16:a2:9f:04:a0:d8:15:
8e:e8:b0:0d:7f:c2:48:b5:40:53:47:cd:37:16:31:
7d:ef:4b:01:dd:56:5e:29:a4:3c:be:b7:70:e9:a8:
01:82:8b:c2:6e:6d:c3:c1:59:ba:2a:ac:f0:a6:14:
6d:a2:5e:d1:2e:ef:a3:61:4a:fc:27:15:0e:f7:a8:
95:bd:32:00:cc:41:97:14:3a:0f:40:ce:ca:9a:fc:
e2:83:9a:67:f2:c0:65:55:a2:7a:b0:5e:81:22:bc:
de:1e:53:ac:69:89:a7:d8:31:f9:30:a4:b9:f0:2c:
50:5d:40:66:19:a5:89:70:e1:ab:6b:92:83:c4:86:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:D8:6F:C3:2E:09:0E:43:F8:8D:BD:69:22:F5:C6:C2:BF:5D:BB
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:80:fd:3d:69:26:aa:38:b5:3b:dc:0c:84:99:6e:c9:c4:7d:
f1:8d:9d:28:6f:4f:80:03:78:65:e0:32:75:72:b4:c1:48:50:
76:73:2c:b7:80:d3:11:0f:2f:a9:98:d1:41:7e:27:e3:c0:8f:
4d:15:0e:4c:35:81:42:3e:8c:7f:cd:e7:99:a0:a9:8b:4d:dd:
3a:c7:89:cf:46:2e:a9:7c:d5:88:56:6c:8d:30:12:4c:2e:d0:
ed:00:0a:e8:d7:b4:d9:83:05:91:47:38:8f:18:52:27:da:31:
c0:81:f6:1e:67:2f:a8:65:6f:40:27:b4:9b:af:a1:b4:a2:1a:
c9:c2:10:d6:d9:2e:1f:b4:70:54:c3:53:7c:91:36:e9:bc:db:
b9:0b:8b:21:84:de:e4:5b:67:c1:31:db:97:bd:6f:0c:8e:79:
5e:a9:7d:7e:07:5d:11:39:0d:33:71:d9:f1:10:eb:d3:6a:33:
b0:fe:77:6a:29:44:86:85:3b:9a:f3:80:e7:0a:0a:05:95:77:
c6:dc:b7:0c:c2:07:c7:a9:a3:fd:95:aa:5d:cc:8a:c8:59:85:
e0:91:4d:21:3f:ea:0a:ab:b8:e7:97:ba:f6:3b:6d:af:24:d6:
2f:40:51:7f:26:82:8f:db:86:ac:60:39:78:2b:1f:ea:76:c6:
14:f6:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:51 2026 by rpki-client