Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: qINcoqokrtbeDnX1ppNJZk3QeXEAdUld83JOWldFVsQ=
Subject key identifier: 64:E7:EF:4B:88:B6:A7:19:51:B5:13:56:38:B9:EB:45:F9:42:39:56
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A17514834E254DCC89C96879BF1DD4E28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0B10
Signing time: Sun 25 Oct 2026 22:00:40 +0000
Manifest this update: Sun 25 Oct 2026 22:00:40 +0000
Manifest next update: Mon 26 Oct 2026 22:00:40 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: fTmUxOZFuMTWS9JnEo4lEZQZFJB8oNsjBRazKuGDcKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:83:4e:25:4d:cc:89:c9:68:79:bf:1d:d4:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Oct 25 22:00:40 2026 GMT
Not After : Oct 26 22:00:40 2026 GMT
Subject: CN=64e7ef4b88b6a71951b5135638b9eb45f9423956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:e2:4b:30:a5:6d:24:e1:9b:3c:b3:4f:ec:
49:db:dd:dd:33:67:71:62:09:97:ca:37:99:63:c5:
ea:4f:d5:c8:43:67:09:f8:fe:66:7b:b4:5e:3a:24:
1d:27:10:26:14:cc:3d:09:43:45:05:1f:52:fe:bf:
35:61:4c:f1:c6:e2:f4:8f:87:9c:6b:66:a2:e0:3e:
eb:5b:10:f6:2c:27:6e:18:8d:99:34:9b:38:f9:3e:
70:47:7c:ed:6a:59:08:c1:9f:e9:cb:1d:ec:73:84:
52:cd:56:9e:d6:44:40:e1:b1:27:47:fe:75:fe:f8:
3e:c9:fe:40:7c:15:81:95:61:2b:7c:15:3c:a4:17:
4b:2e:31:09:c7:d1:b9:44:9c:db:2c:96:7b:d1:02:
7a:22:a0:71:6f:a7:60:42:06:b0:21:9c:07:be:36:
b7:02:b0:b4:bc:9c:75:53:30:5d:21:d9:63:03:59:
3f:4d:44:72:49:68:ce:89:94:aa:20:14:d3:1a:64:
08:b1:25:8a:da:59:c4:1f:27:22:41:aa:b1:80:d2:
0f:f6:b4:58:b1:24:49:11:65:1d:1a:88:10:2b:b8:
dc:17:b7:a0:59:9d:23:0a:18:7f:2d:97:3a:b1:b3:
d5:b8:14:f2:ad:70:ce:54:4b:3a:c6:8e:b5:22:80:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:EF:4B:88:B6:A7:19:51:B5:13:56:38:B9:EB:45:F9:42:39:56
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bd:7a:d0:58:d8:40:fe:31:1a:5d:df:27:28:f1:25:3c:2e:
0b:df:18:33:52:7a:b6:3d:be:24:5a:e0:8b:70:e6:1b:61:aa:
7f:d0:02:4d:08:17:39:8e:78:9b:15:cd:32:c2:d7:02:4a:de:
fe:a6:a7:1d:2b:86:ea:d2:ac:14:28:bc:88:24:ee:48:48:7a:
6e:98:c0:27:7e:e5:77:b5:95:ff:fb:f3:8e:b9:03:22:c1:34:
d1:8d:d2:77:df:ac:74:5c:23:49:c0:89:c5:5d:2d:25:38:ad:
a3:11:e4:04:32:36:13:21:01:d7:16:df:4e:c0:10:c5:9f:21:
1c:46:aa:18:19:f6:1d:66:84:c4:d0:65:63:eb:2e:50:f4:f8:
da:c2:6d:9d:27:27:45:33:ce:01:18:2f:34:52:0f:e4:2b:2c:
e0:45:c0:70:44:dc:6a:2e:b4:47:43:1b:1f:cd:ec:8d:b1:ae:
3a:94:d8:47:49:7a:29:b7:29:89:c0:ec:70:d4:c6:52:6e:f8:
cb:9d:f6:09:23:d9:b2:b8:3a:27:74:67:13:7a:f5:24:a4:4d:
74:24:cf:5b:87:b0:17:55:60:16:58:91:47:04:e9:29:33:52:
a0:6b:c0:7f:7c:c4:3d:2b:c3:eb:1e:ea:c6:f9:e4:ef:3f:52:
67:44:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:38:17 2026 by rpki-client