Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
File: hbYRoLfUM0t6I5XozOew48m4OOg.mft (raw, json)
Hash identifier: 2uaJQBhLDCzWUvqbx9HQgEjiSmuBtDCrLauiw40P8Gw=
Subject key identifier: E3:92:B4:45:09:E0:7F:F8:FE:1D:81:1A:ED:C9:F2:8C:FB:2F:C0:74
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 01A0889F29FBA35C700AB9B1C860F5DC6AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
Manifest number: 1550
Signing time: Thu 10 Sep 2026 00:02:07 +0000
Manifest this update: Thu 10 Sep 2026 00:02:07 +0000
Manifest next update: Fri 11 Sep 2026 00:02:07 +0000
Files and hashes: 1: UVK-TwFECyBo493Ak51MrNfcaQE.roa (hash: /fbHkbD7KPDuOT91DBKV1keIzbve2wMN0Nea8980swA=)
2: cAfMugWdxXFLBCx7sw2-yd61uKY.roa (hash: orwX8b0RS0lYztkvgn66c9x9TZlFdD7WNVOTBejxj/Y=)
3: hbYRoLfUM0t6I5XozOew48m4OOg.crl (hash: 80azXx52Z4qSp8vF6hjnPdE64ASsH4wVvQJwslq2GGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:29:fb:a3:5c:70:0a:b9:b1:c8:60:f5:dc:6a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Sep 10 00:02:07 2026 GMT
Not After : Sep 11 00:02:07 2026 GMT
Subject: CN=e392b44509e07ff8fe1d811aedc9f28cfb2fc074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:50:72:e9:4e:27:d6:53:76:3f:29:3c:74:
86:cd:57:1e:1d:d2:4e:06:2b:b1:ff:1b:44:16:ec:
5c:84:df:e8:23:fc:06:c8:f6:c4:99:ce:86:44:49:
f2:cf:eb:18:35:01:44:f6:7b:ce:cc:49:62:bb:e3:
94:5b:62:d2:6e:a6:7b:ac:d5:dc:da:55:60:ca:7b:
1e:67:80:d4:e7:33:59:bb:09:d4:3a:c7:2c:d7:09:
f3:b7:88:e3:59:dc:52:8c:30:5f:fd:6d:17:69:44:
ca:e3:49:e0:0f:ee:b7:79:91:7a:42:7a:da:4e:01:
df:08:84:4b:f8:e5:b1:cd:64:bf:ea:da:d5:eb:27:
24:61:b4:3b:d2:fb:30:3a:37:9a:4a:1a:3d:e8:14:
ea:69:93:29:18:df:1f:36:18:13:7d:04:13:04:6e:
77:e4:d9:20:4f:b3:18:46:8a:64:d8:6f:0a:1e:c8:
f8:a4:82:b9:3f:e5:6d:85:96:ab:55:bb:33:09:3e:
e7:25:6f:4c:1f:be:09:fe:e9:96:0d:ba:0a:54:6a:
99:b7:8e:ed:82:f6:28:ab:aa:d8:d4:de:4e:4c:bc:
7f:6a:2b:7d:d8:0c:9a:19:4c:79:d6:ca:27:70:66:
71:98:85:17:f6:e1:04:fd:39:1e:ae:57:c6:b8:c1:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:92:B4:45:09:E0:7F:F8:FE:1D:81:1A:ED:C9:F2:8C:FB:2F:C0:74
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c2:d3:b9:0c:1c:10:67:c6:28:c1:88:c1:77:37:03:07:a0:
d7:52:32:fa:81:46:d4:e5:17:96:35:6f:f8:c9:bc:13:ee:ec:
15:f2:46:92:9a:08:cd:ff:f5:0b:61:4b:82:29:87:25:f7:7f:
96:93:d1:46:13:4e:f8:23:40:da:61:89:65:17:88:4d:60:f2:
87:51:2a:cb:6a:f0:7a:64:5e:7c:5f:5e:55:49:22:ee:28:8e:
f6:97:2e:49:af:b5:68:e4:41:92:b2:42:94:f2:5a:ce:dc:5f:
45:f7:27:85:ec:46:95:f2:95:f1:bb:4d:db:2d:0f:ce:3f:1c:
f4:be:c3:97:1a:d4:bd:fb:a0:84:bb:e9:0f:3c:7a:31:95:04:
87:7e:9b:42:0a:45:d1:4b:ee:ef:c7:da:e5:02:94:b1:ad:87:
5a:34:c3:cf:04:a3:0a:68:e0:56:99:c1:f1:64:52:97:b2:e1:
47:41:b5:39:5d:26:71:50:49:4c:0d:73:8e:f3:bb:e3:1f:ab:
0a:3b:0a:8c:68:1a:13:db:37:fa:ab:39:12:0e:62:e4:81:2b:
b4:16:73:20:c1:f3:cc:26:d5:2c:d9:ad:c7:db:b1:a4:29:7d:
2f:59:f1:4a:e0:63:71:69:ec:95:93:51:64:28:25:92:8f:eb:
d0:6d:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:20 2026 by rpki-client