Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: ugxM84saHI/HmZcyl490mIg8ZU6XF6NuD3bxs02r7J0=
Subject key identifier: 25:2C:C8:F2:17:BF:78:44:57:DE:3A:FC:35:88:FB:D6:60:B0:3D:FE
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A06E70F80407A6DC3A167B220524496560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0A88
Signing time: Fri 04 Sep 2026 22:01:32 +0000
Manifest this update: Fri 04 Sep 2026 22:01:32 +0000
Manifest next update: Sat 05 Sep 2026 22:01:32 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: pouuEXNnXXFyCRqqEUWOZKYqM61pejMMJ8Xma4QTHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:f8:04:07:a6:dc:3a:16:7b:22:05:24:49:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Sep 4 22:01:32 2026 GMT
Not After : Sep 5 22:01:32 2026 GMT
Subject: CN=252cc8f217bf784457de3afc3588fbd660b03dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:d1:62:03:e7:c8:df:55:f0:aa:3d:b2:89:
77:8c:0b:49:2b:ac:ea:04:22:47:86:a0:b1:1d:f0:
18:52:47:5e:c4:56:93:b5:16:1c:be:f1:63:a9:97:
a1:ee:24:17:a0:45:cd:54:5e:1b:38:9d:50:ed:ef:
0b:7b:a9:85:41:f1:2f:09:32:35:e6:b4:2b:cb:d0:
66:8e:52:b2:60:f7:ac:28:32:f9:72:1f:f0:4d:46:
92:d6:52:f5:53:ff:c9:9d:de:3b:37:67:b0:4c:c7:
e0:b9:fe:16:1a:0f:4a:9c:73:c8:03:51:ac:6c:c1:
b8:de:89:e9:a1:42:94:a8:93:2c:53:42:71:22:36:
30:40:2f:57:b3:1a:3f:c5:41:f8:32:01:b4:20:cf:
53:e1:66:10:21:e8:01:1d:24:61:14:b9:a7:f7:0d:
cc:a1:5c:f5:6e:13:a5:c3:29:61:09:a1:1b:b4:80:
d5:54:ce:94:d9:fe:93:4f:e9:b9:d9:f3:19:b9:20:
eb:80:71:54:7f:b5:45:b7:a6:bf:df:1f:21:b1:0f:
dd:ad:d7:1b:10:d3:dc:6e:2a:d1:d7:0e:c8:87:c1:
8a:0e:d9:b1:3b:41:32:c2:a8:57:df:20:74:ed:07:
d8:de:e7:2b:ea:8f:9c:57:7f:fb:47:f8:1b:fb:71:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:C8:F2:17:BF:78:44:57:DE:3A:FC:35:88:FB:D6:60:B0:3D:FE
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:18:b9:c6:ee:f8:fe:76:b4:6e:4d:d5:73:dd:53:f8:7a:83:
c4:26:f4:78:97:5c:1b:4d:d6:3e:d1:9a:33:87:b6:65:b3:42:
37:00:41:ff:3f:e1:04:06:41:9a:93:84:e3:0b:a7:e8:a4:37:
ae:97:b4:b4:a6:4c:37:ca:d6:ad:ba:21:f8:bd:58:90:28:80:
71:6b:78:12:ae:cf:18:b9:b9:76:92:2e:50:55:a5:f9:2d:9b:
1c:8c:54:0c:9e:e0:2d:b5:a3:4d:61:ec:c6:5c:b6:67:b4:a4:
cf:43:ea:93:a3:b1:26:c3:73:9c:e8:74:e0:11:3b:20:f9:05:
9f:d6:d4:97:00:ca:07:5c:7a:80:04:4b:b2:d6:1f:95:84:7d:
19:52:9d:13:7e:b6:33:ba:e2:e8:6f:7c:b6:3c:d5:c9:94:ad:
fa:b8:f7:04:76:e2:01:73:29:c3:41:bd:19:d1:b0:1e:c0:74:
06:f7:88:62:e9:98:de:ac:9d:02:a3:94:83:ac:0e:66:15:1d:
2a:bc:f3:71:f1:1e:f2:9b:a4:76:b8:08:58:52:a2:d1:39:41:
ba:06:9d:21:3b:55:91:f2:9d:16:7a:05:3f:59:79:d8:1a:09:
85:ee:12:99:3b:8d:a6:87:7d:ed:9a:42:18:73:fc:75:58:d6:
88:e7:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:30 2026 by rpki-client