
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: Mf3NnaBOBcAeAV2fi5gkRddXjNpHyWPb3D5EHbJ9Wlw=
Subject key identifier: 98:F5:1C:B0:85:32:7D:28:6A:DE:21:98:6F:6A:81:65:B7:39:56:85
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 01A08C43B60CB5F26D0754913F685AB8EC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1A50
Signing time: Thu 10 Sep 2026 17:00:42 +0000
Manifest this update: Thu 10 Sep 2026 17:00:42 +0000
Manifest next update: Fri 11 Sep 2026 17:00:42 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: 2x1p3Koaxoj9zo6O3TNWr98sSHBjB4JIWyoMkxloQUw=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:b6:0c:b5:f2:6d:07:54:91:3f:68:5a:b8:ec:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Sep 10 17:00:42 2026 GMT
Not After : Sep 11 17:00:42 2026 GMT
Subject: CN=98f51cb085327d286ade21986f6a8165b7395685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:05:0e:a0:b6:7a:e7:80:32:3e:19:d0:17:
e2:4c:17:e7:a8:88:71:1a:c5:43:47:df:7b:06:e9:
02:23:90:4c:79:1e:fc:5b:2b:06:8f:73:80:1e:b1:
ff:60:cf:5d:c9:79:16:17:fd:f8:dd:ff:11:49:a1:
34:e3:28:53:97:60:72:49:37:89:f3:7d:34:b4:4a:
85:86:1b:1e:cb:88:66:35:b5:e3:3c:89:13:36:dd:
27:e4:a3:07:6b:e7:25:92:4a:e4:71:96:0b:bb:36:
6a:33:e9:53:2e:7b:9e:28:39:1b:6e:ce:83:cf:75:
75:3a:8c:3c:62:99:ed:76:ed:51:b3:f2:e0:aa:67:
34:01:26:03:58:ce:25:2c:2d:e5:a9:d4:3a:a4:49:
b7:84:39:b2:2d:50:20:a9:4d:41:04:fc:b9:08:1d:
d2:47:28:b6:ca:bd:8d:41:29:fe:f0:ca:7d:d7:45:
94:b5:9d:7f:06:6a:4b:0e:10:64:08:43:13:b2:8d:
ec:6d:22:11:dc:6f:69:30:0a:6d:ba:39:98:18:98:
b8:51:38:17:b6:95:b2:d7:91:59:51:d5:d8:53:0e:
a7:6a:3c:b1:e6:71:81:47:8d:81:12:c5:d9:2f:c5:
66:ef:ef:0f:bf:20:b4:cb:e6:a2:bc:6d:b0:73:eb:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:1C:B0:85:32:7D:28:6A:DE:21:98:6F:6A:81:65:B7:39:56:85
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:07:05:04:b9:de:3d:cd:9c:10:9e:ed:18:07:ae:04:ed:
6c:62:ae:4f:da:bc:1d:aa:c9:ac:89:81:58:dc:5d:26:9e:be:
31:f4:6f:6c:a7:25:42:7d:bb:ac:b4:11:9d:06:c6:d6:41:a3:
86:d7:e5:1b:47:da:3f:38:be:8f:7c:b4:0c:26:37:1a:26:8b:
c7:84:c6:8f:d0:a1:8b:ea:59:14:a7:21:40:6f:53:c5:0f:63:
32:07:3c:d1:df:ea:d3:47:cb:cd:04:63:4a:61:29:d2:f6:19:
83:6a:57:bd:da:63:f4:24:4e:e2:8c:0d:0e:32:8d:74:14:e9:
de:f6:5f:8d:6d:7b:19:2d:6b:f1:0f:b8:e7:a8:3b:54:39:6a:
d3:82:b4:25:19:41:c0:97:6a:56:65:83:07:93:85:42:91:45:
7c:2b:72:11:8a:e4:e2:c2:f6:44:1c:bd:7a:98:f8:c7:78:df:
13:9d:0f:6f:23:7a:dd:ad:00:a5:34:17:87:b0:2e:1b:1b:d8:
86:70:9a:59:f3:3f:9d:8d:d6:52:89:bb:70:ad:cf:12:5c:f9:
e2:7a:d4:5a:c1:6d:4b:1b:22:de:e5:4e:1f:00:02:12:38:89:
c8:51:92:8a:90:db:75:a2:4c:ea:73:ea:f4:88:c9:5e:26:07:
67:0e:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:58 2026 by rpki-client