Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: Ij19Xr/wss7zj0Gu0mPGkW/1QUZ5Rjw60w5hGUMd2V8=
Subject key identifier: 4A:BB:C8:2E:70:31:95:13:29:46:85:39:83:EB:4C:EB:A4:DF:F0:5C
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 01A08AF9EA1878DD7C54D693ACDF5E865442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 14E9
Signing time: Thu 10 Sep 2026 11:00:29 +0000
Manifest this update: Thu 10 Sep 2026 11:00:29 +0000
Manifest next update: Fri 11 Sep 2026 11:00:29 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: jfAqGPLBzohD3qKNOoHmiFEi7Ed9/7PBl4g0EJ/5WNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:ea:18:78:dd:7c:54:d6:93:ac:df:5e:86:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Sep 10 11:00:29 2026 GMT
Not After : Sep 11 11:00:29 2026 GMT
Subject: CN=4abbc82e703195132946853983eb4ceba4dff05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:c2:20:b7:bc:01:85:84:9f:07:62:5e:c5:
a6:72:2e:e2:94:16:10:9c:1f:83:b6:ac:cf:80:c6:
9e:68:0a:86:7c:48:2e:2e:df:e3:23:36:8d:79:72:
fc:fe:c1:e7:85:06:7a:77:f7:ad:d3:d5:1d:f0:5c:
86:39:ea:43:39:3c:72:32:38:14:ae:47:26:f8:13:
ea:6a:57:c5:8b:ac:67:d5:3a:ff:b6:97:50:32:0c:
1e:fa:3a:a4:c5:60:60:a2:e0:b1:10:b4:68:bb:57:
ed:1c:fb:5e:5e:04:0f:d2:eb:ed:f0:66:4b:10:b3:
bc:e1:46:d2:2e:ca:b1:f4:5a:98:fe:75:c2:5d:03:
fe:7b:57:90:59:6e:81:15:b7:fd:42:87:16:a5:a9:
48:31:74:4e:e1:fe:ba:82:da:a5:d2:3f:3d:a1:72:
12:c0:19:86:88:c4:fc:47:e1:cd:ec:55:fe:78:bb:
90:85:61:87:ea:4a:0e:fa:c3:74:31:09:23:e7:bf:
75:3f:2c:e2:29:95:0e:a8:e0:72:2e:8c:93:f9:bf:
9c:93:82:4a:72:cb:2a:3b:63:e0:f0:08:e2:6a:e5:
c2:ba:9c:96:1b:c2:da:01:1c:cc:0c:ac:60:bf:41:
09:51:ba:25:bd:ea:68:7b:ce:cb:e3:d1:ca:e7:dc:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BB:C8:2E:70:31:95:13:29:46:85:39:83:EB:4C:EB:A4:DF:F0:5C
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:76:44:88:3e:16:d3:a2:b6:ab:b0:0f:88:1f:49:b8:5b:73:
91:38:b7:5a:29:0f:cf:00:ed:86:3a:38:54:30:94:80:ac:94:
7c:12:ef:78:21:3d:7d:6d:aa:8b:4d:ee:20:82:c7:43:bc:8b:
26:b6:a8:74:eb:cf:d0:72:ca:02:12:cc:eb:f9:69:80:88:77:
06:b8:9f:dc:fd:31:74:ce:8b:a3:e3:af:25:dd:3d:bc:fc:fc:
d6:9e:07:3c:e9:bc:46:30:dc:91:59:d0:b9:14:d3:c6:1a:81:
17:db:09:fb:a0:b5:6f:a7:0b:62:09:53:ec:aa:5d:90:3b:2b:
d5:a4:e5:bd:8b:b5:54:c3:a8:c2:5a:0f:e3:49:84:4d:89:da:
fb:a5:5c:82:07:ac:34:a3:54:5d:62:51:b9:e0:cb:d7:28:99:
15:96:97:18:9a:64:f7:d0:e4:8a:d9:74:b4:66:59:09:a0:db:
8b:6f:20:bb:96:be:d7:9b:9a:57:5e:e5:62:75:81:e1:7a:42:
38:5c:70:61:5b:41:0c:73:4c:84:24:a0:77:3d:61:8f:86:5d:
70:45:a8:98:f5:35:27:d8:e7:37:5a:fa:be:f4:ff:22:56:d2:
70:8e:6e:4d:6e:f5:61:73:e5:56:64:0c:11:3d:59:7a:aa:16:
94:77:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:37 2026 by rpki-client