Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: mvVPKK3/68jP/Ba96WsS8PzZBxZLdnN/qS6G/Bu45cA=
Subject key identifier: 81:B2:81:61:97:D4:9B:99:92:73:3C:3E:7A:49:96:67:AF:32:ED:B6
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 01A0D539474C90CEC21DFF592352D12A4D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0E67
Signing time: Thu 24 Sep 2026 21:01:35 +0000
Manifest this update: Thu 24 Sep 2026 21:01:35 +0000
Manifest next update: Fri 25 Sep 2026 21:01:35 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: 8Aj/mPzwsdoxMZUCZGQmG2OgpDcI/QR3ZEGixsojNoA=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:47:4c:90:ce:c2:1d:ff:59:23:52:d1:2a:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Sep 24 21:01:35 2026 GMT
Not After : Sep 25 21:01:35 2026 GMT
Subject: CN=81b2816197d49b9992733c3e7a499667af32edb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:26:f0:0f:a9:67:01:b4:b1:c5:f9:d5:c5:
ba:24:4e:64:7a:35:75:46:79:8b:b4:05:1b:5a:f6:
11:68:61:26:43:8e:0f:26:2a:dc:f2:95:48:17:98:
a2:68:bf:3e:e7:24:81:59:d8:a7:48:ee:dc:7d:1c:
9f:5a:c1:7c:95:80:68:2a:64:ac:d2:bf:36:dd:26:
a7:18:d5:12:98:1b:bd:3c:a2:9e:84:0a:cf:8f:f4:
88:80:fc:23:46:df:92:39:05:c1:09:d0:75:90:c0:
4e:f6:e2:f1:7f:e0:b0:76:4f:69:0b:74:fd:cb:52:
86:63:45:15:ca:0a:67:8b:21:39:3c:c1:92:ef:61:
df:eb:a5:93:2d:91:a1:83:03:d2:07:31:1a:2a:84:
b3:1f:12:ef:6e:9b:22:35:6b:28:2d:c4:d6:f6:87:
e4:76:af:0c:5a:96:90:b4:ed:ed:19:bd:b3:64:82:
d9:bd:64:32:d5:db:42:d4:56:44:c8:ee:f1:3c:5d:
4c:ba:5e:cc:f4:83:77:71:7e:0d:32:2f:9f:6f:d5:
a9:23:44:c6:a8:e0:70:40:e0:dc:94:3e:bb:b8:a9:
6f:d5:ec:c3:fc:5b:39:25:88:1a:ed:8e:99:63:33:
2a:cf:8e:5d:13:d0:39:2c:71:42:0a:6c:0d:b7:ea:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:81:61:97:D4:9B:99:92:73:3C:3E:7A:49:96:67:AF:32:ED:B6
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:62:5f:6c:1f:26:60:14:c2:83:b9:2e:dd:62:3a:d6:a2:
fa:70:6f:4c:01:c6:4f:be:5b:66:a6:35:9a:d3:f6:22:3e:ae:
95:d0:d8:df:2d:d5:b7:cf:5b:c9:62:1d:db:13:14:b6:c6:b4:
b9:c3:67:0b:fc:6a:8a:e2:bf:08:bb:4c:42:b1:ae:a8:70:89:
01:d9:08:9e:be:31:2d:86:db:e5:95:51:06:2c:da:4b:e1:b0:
ae:30:15:a5:e8:0b:90:09:3a:34:9d:0d:fb:41:cb:08:8c:21:
a3:85:d8:92:51:67:ea:2b:36:2f:12:8c:d0:33:65:d5:b4:d9:
45:0f:bc:56:4a:42:08:4a:8e:e7:d9:6a:bf:00:8c:93:1e:79:
ca:ac:b3:71:31:10:ae:8c:d4:d1:64:8d:78:a1:1b:84:15:fb:
72:85:55:b7:26:35:46:97:c3:0c:e2:bf:9e:91:70:9d:f0:08:
b7:79:81:c0:b6:ad:2d:cf:ca:a6:6e:00:63:01:0c:35:75:30:
db:49:94:91:da:f4:ed:f5:e5:c2:4e:0a:65:cf:8f:23:92:be:
a0:2b:54:7e:05:b4:54:ed:bd:38:48:e2:7e:16:69:10:dc:12:
da:ed:8c:4e:4f:4a:06:26:8a:ff:3c:a3:44:89:9f:fa:7e:cc:
be:43:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:44 2026 by rpki-client