Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: Ph8xzcGgsLXFKbPuvEtqnIb49V3ZZMeBqAsbKj9GhEg=
Subject key identifier: A9:C4:07:38:53:CD:12:94:60:81:77:02:62:94:CC:BB:F3:BC:E7:48
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 01A001700BD9C18C1828D396DFE29E6B4DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0D42
Signing time: Fri 14 Aug 2026 18:01:55 +0000
Manifest this update: Fri 14 Aug 2026 18:01:55 +0000
Manifest next update: Sat 15 Aug 2026 18:01:55 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: X7Z1u1HvHJqjXkCAjpGAsFIzCxnvI2VjZawltE41x5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:0b:d9:c1:8c:18:28:d3:96:df:e2:9e:6b:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Aug 14 18:01:55 2026 GMT
Not After : Aug 15 18:01:55 2026 GMT
Subject: CN=a9c4073853cd1294608177026294ccbbf3bce748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:61:35:cc:d7:bc:94:49:c0:66:92:a5:2e:
9d:09:61:6a:35:f3:f1:70:fc:c6:d5:45:a4:34:77:
77:5e:ab:b2:4e:0b:13:df:36:88:f2:1d:dd:94:59:
4c:7f:66:08:15:24:2b:8b:5d:de:f9:38:04:13:24:
0a:89:65:6f:9c:9a:82:23:93:de:7f:e6:03:71:0b:
a1:39:e6:27:52:e8:f2:1d:b6:81:30:a3:33:95:3f:
e7:a2:80:85:59:97:fe:7b:3a:04:87:58:f6:06:dd:
70:e7:66:3d:13:c2:f1:3c:9a:cb:08:e4:f5:c0:08:
10:40:27:ca:18:a4:8a:09:3f:e5:21:22:3f:78:41:
82:c3:39:cb:2b:a3:35:e8:79:2b:61:ce:f4:6e:d1:
d8:3d:d3:f5:0b:24:d6:13:47:6c:d2:74:f7:2d:33:
a5:ba:e2:fa:1c:13:f7:dd:bf:54:8e:b5:21:63:f9:
96:3a:38:2b:5d:36:09:45:d0:38:1e:17:ba:da:d5:
26:39:24:09:82:f5:63:a5:bc:96:20:5b:8a:d7:d5:
8a:a8:4c:68:96:1b:8f:0a:91:29:cb:a7:f0:d0:86:
67:c7:9d:93:5e:af:7a:25:84:3a:25:8e:da:f3:4a:
b4:7f:ca:91:39:0e:16:cf:28:57:0b:d8:c6:dc:67:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:07:38:53:CD:12:94:60:81:77:02:62:94:CC:BB:F3:BC:E7:48
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:38:f3:da:9c:05:26:b3:02:be:2c:68:a9:26:11:1a:d0:41:
13:6a:1f:86:a9:c5:49:8d:bd:69:b6:61:74:d0:70:66:86:01:
5d:72:bc:74:54:d6:2d:f4:5d:e5:8a:21:85:5e:d3:a3:25:fc:
4c:6f:3b:22:65:a6:e8:01:cf:22:07:86:1b:ed:40:70:7f:cd:
7c:24:b5:b6:4f:7f:96:0c:ba:4d:a8:e0:02:d6:4c:79:80:ee:
7b:db:92:bd:df:f6:31:64:5b:b9:68:9a:22:ad:e8:d5:03:9e:
5e:91:0d:20:17:6a:f2:18:71:7a:66:3c:d9:64:60:ad:a6:37:
58:71:d7:bf:6f:75:a9:cb:89:82:e6:15:a9:be:41:21:18:7d:
1f:04:51:81:f8:8f:c9:94:cc:a9:f0:de:40:67:99:34:49:8a:
72:95:0c:ca:60:de:e3:ed:da:04:8f:e6:a7:a6:4a:96:cf:9a:
ca:ea:f4:e4:7f:3b:f4:a5:38:47:f5:81:ed:ad:6c:31:24:57:
ea:44:01:bf:52:64:f2:99:18:97:03:14:8c:93:d9:7a:88:80:
67:df:1b:5a:a9:5b:54:67:67:79:d6:0e:52:a2:2d:e3:99:4d:
24:5f:e7:fe:aa:47:0c:58:c9:12:37:06:9c:4d:f0:ff:05:e1:
47:94:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:42 2026 by rpki-client