Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: dkkT2n65ndv4J480XSXTWIxacEG+uy/UgnR8yUAU3Ys=
Subject key identifier: 11:6C:BF:F3:DF:B3:37:8F:E2:3E:CD:28:DC:1B:AB:0C:63:DD:E9:C2
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019E9D0660FCB508F4F73219EDA0E38D6BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0997
Signing time: Sat 06 Jun 2026 13:01:41 +0000
Manifest this update: Sat 06 Jun 2026 13:01:41 +0000
Manifest next update: Sun 07 Jun 2026 13:01:41 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: 6rnvduYVetO49P/T4lO21z3D9aISm1qA4WwyMHLirSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:06:60:fc:b5:08:f4:f7:32:19:ed:a0:e3:8d:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jun 6 13:01:41 2026 GMT
Not After : Jun 7 13:01:41 2026 GMT
Subject: CN=116cbff3dfb3378fe23ecd28dc1bab0c63dde9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:95:9b:5a:0c:0d:b4:4d:ea:e1:ad:12:6f:
33:77:b4:91:d9:b3:46:4d:d6:77:d5:42:eb:38:9d:
3e:4b:7e:ca:b3:5c:6f:97:87:9d:49:87:cd:30:3b:
53:48:4f:25:fb:75:c2:dc:de:46:39:ee:b1:ff:f0:
2a:4a:d8:c6:02:55:c3:21:af:c5:88:81:7d:64:c4:
e9:b3:89:9b:e7:2a:37:95:e0:ff:ba:5e:60:b9:fc:
23:75:22:cc:3e:6c:cd:e0:88:d0:2f:bd:6b:f8:de:
44:93:9e:2c:bd:03:df:73:08:50:ab:e0:b6:f2:c0:
a0:38:72:54:27:cb:c2:aa:71:32:29:86:23:be:61:
ce:2f:ed:c7:09:c3:11:23:29:39:85:4b:88:7c:f5:
91:25:c4:c4:37:ac:6b:51:cb:16:08:30:d6:da:f9:
ab:04:17:be:88:97:fe:a2:00:9d:c2:68:bc:27:4e:
74:fb:b6:9c:58:45:cc:41:c3:ef:df:22:36:a1:37:
dc:be:e7:4b:46:41:63:40:e7:79:f3:df:1e:3e:77:
19:a7:db:d3:85:da:5e:b9:d8:75:18:61:eb:94:81:
07:b1:1c:b4:12:0e:a8:7d:33:64:96:f0:7b:05:80:
81:5d:59:10:44:c9:5d:2f:05:d9:43:a5:39:4f:5a:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:BF:F3:DF:B3:37:8F:E2:3E:CD:28:DC:1B:AB:0C:63:DD:E9:C2
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:d2:24:3d:1b:a2:85:22:af:15:96:ba:54:fd:8e:81:76:
f1:eb:e2:c8:17:c0:f7:dc:76:b2:c0:60:c1:8b:68:88:d5:97:
04:21:20:1d:be:68:28:cc:69:91:56:63:b5:ce:32:a3:ec:d7:
c6:ed:4a:e8:d1:36:cc:34:24:be:f1:29:34:2a:46:f6:7f:72:
b2:b2:1e:fc:12:33:14:21:81:3a:7b:b4:c5:13:63:aa:73:4f:
53:dd:66:8e:1a:4c:6c:26:5f:3d:f7:11:17:0b:c2:83:f1:9a:
1e:73:d7:9e:ca:5a:1c:8e:e5:2a:76:35:a4:89:eb:fa:b9:f3:
48:06:7f:7c:9b:d9:5e:49:bc:95:45:6f:49:9c:96:a5:63:39:
4d:a9:dd:04:10:a3:81:62:fd:9c:52:5e:de:4b:da:a7:9e:59:
cf:a5:d7:87:d0:83:2a:38:2b:2c:e3:e1:4d:86:6f:4b:bc:fe:
38:6f:97:b8:fd:48:2b:79:0d:4f:71:2a:71:1c:1d:cd:a2:06:
4a:29:7f:99:ac:bc:86:fe:db:1f:7f:41:f8:11:43:ba:68:a1:
7a:b1:80:d2:2e:7b:35:11:bf:be:66:4a:51:79:52:3d:92:6e:
47:e4:4a:82:ff:57:29:09:e9:c1:11:93:7c:2e:11:2d:f1:81:
dd:7e:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:55 2026 by rpki-client