
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: sbQrJJNrrx5hC5UNx9tOwKIeH3nNGn+qqa1RWz6j/Ss=
Subject key identifier: 82:C8:98:29:CA:21:D5:2A:88:CB:44:7F:FF:11:31:18:E5:65:2E:0C
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 01A06E707BBDC5439A2C2FC015B3B01F1E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 1A3D
Signing time: Fri 04 Sep 2026 22:01:00 +0000
Manifest this update: Fri 04 Sep 2026 22:01:00 +0000
Manifest next update: Sat 05 Sep 2026 22:01:00 +0000
Files and hashes: 1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: 790Fbfhs8XBDEEPu8+sfI1VU6hKdqa4ZvGUscEUcw9Y=)
2: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
3: h0uAOEUI-ibYSxCIsCByTHYtsZM.roa (hash: 73z7ExdVrQpDFxLXve4S4EigI54vXhrIVOhvporYAcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:7b:bd:c5:43:9a:2c:2f:c0:15:b3:b0:1f:1e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Sep 4 22:01:00 2026 GMT
Not After : Sep 5 22:01:00 2026 GMT
Subject: CN=82c89829ca21d52a88cb447fff113118e5652e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:b9:d2:21:0c:c0:85:2e:fe:14:48:f8:a0:
ef:d0:57:f7:a6:f7:5f:5f:db:83:11:1a:04:ff:af:
ac:7e:81:31:28:b0:5e:64:9b:16:18:20:08:5b:ae:
b6:8c:ca:27:64:5d:55:1d:f9:75:13:c7:5b:f1:f1:
d0:00:70:8f:fd:11:d8:4f:3d:33:62:8c:87:ac:99:
9b:ca:06:f6:91:6b:cc:a2:4b:b5:25:57:7e:77:46:
4f:7b:6d:c1:d5:0c:17:f3:65:c5:88:9f:4d:30:37:
cb:e8:7b:64:33:40:ba:8f:ac:6b:5d:5e:a4:89:4d:
ad:49:f3:f2:1e:56:75:54:98:a7:66:37:df:15:1a:
63:7f:54:43:a7:03:85:92:e0:cf:c5:ff:22:e3:58:
cc:e4:cc:f3:02:22:3e:13:8f:f6:9c:49:7f:14:83:
8e:8c:23:2b:ad:66:48:36:1a:3d:85:aa:40:60:cb:
bf:e5:0c:53:6e:d3:a3:1f:6b:5f:10:1e:5e:0e:a6:
2a:31:61:d9:bf:91:31:08:a3:a7:cf:70:17:4b:51:
dc:e5:2e:39:f3:4e:4b:d5:09:64:5d:79:c1:bd:85:
ab:36:dc:8d:22:c9:5d:87:b1:dd:3c:e9:ba:be:50:
15:cd:9f:c2:a0:d5:cf:52:b6:13:17:e0:cf:9d:eb:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:98:29:CA:21:D5:2A:88:CB:44:7F:FF:11:31:18:E5:65:2E:0C
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ad:cf:38:72:43:1c:9f:3e:a1:eb:da:37:c5:41:70:45:04:
f0:28:6b:fb:f5:87:f2:5b:5f:30:fb:d6:9b:2b:c9:09:4d:9b:
b0:04:3a:2b:3d:74:fb:f3:0b:53:f4:93:4d:59:61:bc:3b:6f:
44:b0:9a:90:30:5d:0c:09:4f:c7:a2:ad:1d:5d:92:b0:04:b9:
c4:2c:57:6d:ee:64:b8:b9:b7:f3:2c:a3:9b:2c:90:7e:2b:36:
f8:c7:80:86:7f:1e:d8:3a:1e:e2:29:d8:ca:1e:c5:db:c5:62:
57:8e:b7:5b:b5:af:8f:a3:ea:72:93:b5:26:d1:eb:38:4b:14:
8e:f0:17:93:78:a7:24:24:eb:2c:34:c3:61:17:11:3b:41:e1:
2b:f3:de:04:76:70:b1:65:0b:78:f4:fa:88:11:84:b2:4f:5f:
d0:02:21:13:09:15:9d:e2:12:a8:d9:3f:8e:0d:0f:0e:20:78:
02:a6:fb:96:e8:5f:e0:25:d7:49:2e:81:92:9b:ea:1b:89:1e:
86:18:c8:79:09:10:47:c3:4b:f4:4b:ca:a0:40:5a:40:70:cf:
54:7b:d1:fe:99:ec:48:c6:1d:4e:9e:27:9f:2b:b3:73:ac:be:
4a:1c:d7:7d:8d:0f:4b:13:a6:79:fd:2f:a9:da:35:f1:b0:69:
3d:a9:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:59:56 2026 by rpki-client