Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: PDCZZMQ1clLI5TK1p4/CAoqXcKxvBgdc4F1mkUup8VY=
Subject key identifier: 3E:10:7F:A2:02:8C:2A:F2:41:6F:75:E3:DF:01:D5:53:D4:1A:AB:E0
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 01A0B4D1BCAEC725CBC29446FACE669BE327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1A5E
Signing time: Fri 18 Sep 2026 14:00:39 +0000
Manifest this update: Fri 18 Sep 2026 14:00:39 +0000
Manifest next update: Sat 19 Sep 2026 14:00:39 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: AfOBUybFgiiN19xNPBgOhJMJozjsiC6z6A1aZuqzWzQ=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:bc:ae:c7:25:cb:c2:94:46:fa:ce:66:9b:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Sep 18 14:00:39 2026 GMT
Not After : Sep 19 14:00:39 2026 GMT
Subject: CN=3e107fa2028c2af2416f75e3df01d553d41aabe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:72:b7:e9:bd:d9:ca:43:97:d1:d4:8b:3a:
3a:0e:e7:83:74:79:8f:8f:ac:2b:09:e1:86:d9:a2:
67:cd:d5:31:2b:16:e2:f2:a2:bd:b5:da:09:d2:8a:
68:69:db:e0:2e:c8:2b:9c:60:0e:99:d5:5d:5e:08:
64:bc:56:53:d7:00:03:80:4c:c0:06:5c:ca:d4:4e:
0f:f3:e4:77:23:47:6d:98:5f:f1:bf:40:b6:93:83:
b7:d3:e1:6e:7c:0b:0f:24:5a:20:0f:12:3f:77:e8:
ef:96:b4:c1:7f:30:0f:00:8a:a5:73:fe:c2:7b:d2:
d5:e5:21:04:59:e3:ae:a1:d9:41:ba:6f:27:bb:ce:
4e:5e:ca:c3:9e:7a:04:34:c4:5f:f1:7d:63:0a:14:
09:3b:2a:8e:43:c8:ff:f7:f3:48:d7:17:3f:cf:d1:
5f:a5:73:6f:49:e0:28:f1:1d:2f:87:d0:15:c1:17:
96:7a:1a:f1:01:e6:ea:41:6f:19:26:60:70:39:df:
ce:ed:b3:19:4a:92:73:87:bd:fb:20:f2:72:33:d3:
35:87:7b:d7:32:bf:6b:03:c3:39:9d:4b:d0:1c:5c:
66:28:d8:03:89:49:31:63:f9:b9:cf:33:ea:a5:14:
12:b3:80:4d:13:31:d7:6b:b6:11:1b:fb:90:e2:d5:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:7F:A2:02:8C:2A:F2:41:6F:75:E3:DF:01:D5:53:D4:1A:AB:E0
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:eb:fa:44:a5:19:bc:c7:cb:9a:4b:6f:1f:b1:73:66:2b:02:
6f:a3:e0:84:ad:d8:76:b6:30:0a:d4:f9:52:8d:76:6c:e1:d2:
a3:0d:0c:39:94:21:ba:74:ef:8c:c9:c4:f0:de:d5:39:95:2b:
7c:63:76:98:48:91:0a:75:ef:44:98:84:78:10:21:9d:3b:4c:
48:ee:61:0d:0b:50:ab:9c:17:f7:87:d8:22:6a:c8:0f:18:f8:
36:ab:48:b9:fe:7f:1f:3e:0a:3b:3d:ec:a5:a1:d3:44:d9:ef:
e6:4d:e9:c5:fe:33:47:30:12:95:93:f0:0f:5e:08:84:96:00:
aa:c6:81:a6:30:2a:7f:f9:a1:38:7a:aa:2a:12:90:85:72:68:
08:84:36:c8:be:3e:2b:a5:da:e9:54:b3:f9:1e:bb:07:5e:af:
2b:72:1c:bb:dc:b0:96:d4:b3:71:76:5b:00:9c:aa:a7:56:41:
2d:55:a4:46:ba:9a:af:b4:33:c5:98:78:e6:3e:d7:11:65:03:
96:2e:5d:55:26:b5:04:78:e5:65:1c:dd:9d:cb:20:61:df:ce:
f3:9c:69:a0:77:c8:95:84:4f:d1:97:40:1c:93:99:5b:14:22:
fd:c7:fd:10:df:90:c3:2e:eb:74:8f:2c:de:cc:8b:cc:c6:3a:
ca:d7:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:00:43 2026 by rpki-client