
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: FOwpJ7u8N/9JQW0cMTd8X4Z4NlsRgYdEy+aNjnt9cMo=
Subject key identifier: 2E:E0:20:0E:06:D3:F4:49:96:FD:B7:00:E7:6F:80:9B:8E:A9:8F:90
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 01A08A55BC6B9E09FC671A89B8B29BEABE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 08:01:09 +0000
Manifest this update: Thu 10 Sep 2026 08:01:09 +0000
Manifest next update: Fri 11 Sep 2026 08:01:09 +0000
Files and hashes: 1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: snuE+N1APQTC+6kZxdq9h1HqT1d1/eA86Lbj+WQEWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:bc:6b:9e:09:fc:67:1a:89:b8:b2:9b:ea:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Sep 10 08:01:09 2026 GMT
Not After : Sep 11 08:01:09 2026 GMT
Subject: CN=2ee0200e06d3f44996fdb700e76f809b8ea98f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:f3:27:70:f3:00:71:dd:0c:d0:6a:e9:fc:
97:ef:10:1b:dc:de:c4:78:5e:66:41:1a:7f:96:1d:
7e:75:c0:c9:1b:79:a0:b4:79:f3:f9:4c:40:b8:3f:
9c:28:4d:38:07:f1:01:2a:25:33:e3:d0:fd:ce:fc:
a6:ce:5b:85:1b:32:aa:22:50:ad:b6:17:da:c9:e1:
87:be:c8:66:12:e3:63:b2:8c:08:93:1d:18:73:2b:
5f:bc:a1:31:df:be:5c:60:76:e4:65:b7:2f:fe:10:
5b:2e:55:0b:09:82:f3:a2:20:da:ab:ff:f7:ea:00:
6d:c3:00:d0:9f:92:93:fb:2d:5f:dd:f6:a8:9b:61:
7a:a3:08:11:cd:7a:a5:81:9e:23:53:49:30:0d:f1:
2d:c0:e0:5a:a0:ad:d0:1b:be:a5:95:d7:f9:be:26:
91:70:91:ea:d8:bd:67:19:49:23:9c:ba:03:48:8c:
6c:71:e8:0b:71:b7:39:56:de:ba:ef:b7:cd:02:b4:
92:3c:14:dd:4e:86:89:ef:e6:ba:ab:eb:c5:92:e4:
d5:e3:b6:c6:c8:ad:66:19:4d:aa:fd:ab:5b:8a:55:
4d:a5:ea:7a:7b:24:ed:82:60:13:fa:34:37:dc:b4:
28:1c:09:75:69:72:c6:6b:b3:1a:f8:af:a6:ca:06:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:20:0E:06:D3:F4:49:96:FD:B7:00:E7:6F:80:9B:8E:A9:8F:90
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:bc:2d:a5:b7:f8:95:44:c2:d3:7d:e9:4b:b7:d9:a5:57:
1a:5d:a6:c7:af:c2:da:a9:07:7d:86:44:f9:23:bf:03:8f:97:
64:ca:6c:7d:cb:73:2c:17:d4:a7:87:f1:f7:bf:30:e2:05:a4:
45:d3:6c:53:f6:b8:c8:f1:2f:fc:85:48:0f:30:ce:51:f8:6e:
ca:59:e7:91:c9:0d:ab:dd:9c:ca:d6:22:1e:7d:df:2c:61:dc:
83:f1:ce:26:8e:d1:c0:df:23:25:9a:53:ce:54:9e:eb:88:68:
d3:e5:2b:fe:e4:4a:10:9b:2b:b2:97:48:8d:a3:64:a6:34:4a:
63:45:35:1c:b8:19:91:d6:5e:72:20:b1:45:8d:86:87:11:3f:
24:c4:c1:c3:e1:71:2d:de:e1:a5:d8:78:50:99:a4:01:a5:f4:
20:50:46:ee:5f:df:1b:67:02:23:50:5e:6b:8b:dd:d8:81:cc:
9c:99:c5:db:02:54:bd:75:3e:c3:c8:fe:6c:e2:0a:44:7c:bf:
60:d0:03:96:f2:30:9c:23:db:c4:ad:d1:4c:52:79:50:bf:b1:
74:49:12:d8:10:0b:16:76:b6:98:dc:fd:73:e1:4b:e8:9d:48:
fe:61:f6:d6:03:fa:1f:8a:f9:02:f1:01:a7:01:0a:a5:10:29:
cf:40:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:53:22 2026 by rpki-client