Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: Ab69SozS1ljpBAsglSmwT/pgv0OH4vFqk9731LL9LWs=
Subject key identifier: B1:70:A4:A1:DC:EB:BE:0B:75:9A:57:A9:99:B7:09:D9:A8:14:A9:2E
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 01A06EA74C7845B21DD96D92F670DDB1D065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 23:00:52 +0000
Manifest this update: Fri 04 Sep 2026 23:00:52 +0000
Manifest next update: Sat 05 Sep 2026 23:00:52 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: B8qOu+2SyiNDGxBpaTGela7Tc9J6XiA0MtZ/ey2yUS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:4c:78:45:b2:1d:d9:6d:92:f6:70:dd:b1:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Sep 4 23:00:52 2026 GMT
Not After : Sep 5 23:00:52 2026 GMT
Subject: CN=b170a4a1dcebbe0b759a57a999b709d9a814a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:e6:0a:0f:bc:a7:0b:a4:c7:1c:0f:21:21:
bf:32:ea:ae:f2:b0:27:89:a3:5c:6b:1b:6b:01:12:
a3:4f:2a:3c:2e:2c:d7:a5:99:10:25:dc:26:47:75:
b2:53:49:55:9d:af:14:28:d2:58:05:9f:af:6b:5b:
ef:8b:c2:a0:44:84:c5:5e:ee:3a:c6:85:0b:7c:c8:
2b:5c:53:77:4a:c9:5d:37:f8:07:be:25:a0:e1:b3:
29:bf:0b:1b:b8:b6:03:41:d7:af:e7:9d:43:fe:98:
a8:95:c1:33:5c:09:a7:46:3e:1b:63:b1:ea:de:ee:
6d:92:b3:7c:06:af:38:fb:82:12:43:a2:e5:4d:dc:
62:e1:ae:b0:7d:e0:01:6b:e4:61:f8:e3:c7:46:5e:
4a:89:73:fc:a1:fc:c0:2e:1b:c6:fa:80:93:0e:ea:
6f:2d:9f:be:d4:95:3c:78:bc:c7:f8:3f:68:82:9f:
48:f9:20:02:3c:1f:b1:62:c3:dd:ee:2c:bc:ee:8b:
fe:8d:9a:ca:a7:33:1d:cb:28:a6:81:18:36:24:9e:
6b:ba:d7:3b:34:fb:3e:b1:9c:eb:5a:0a:c2:44:19:
a0:2a:e6:b2:7d:70:4a:a7:e5:09:23:ec:5d:4e:22:
70:6c:2e:79:8b:e4:d6:fb:82:b7:71:80:88:3e:bb:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:A4:A1:DC:EB:BE:0B:75:9A:57:A9:99:B7:09:D9:A8:14:A9:2E
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e8:1e:c3:fb:77:36:2b:e8:57:57:83:e8:08:be:69:2f:83:
b8:7e:f9:29:92:75:6d:d6:1e:10:48:91:c5:f8:e9:a8:4b:a5:
68:3c:88:55:d7:8a:74:da:39:f2:81:fe:5b:f2:b0:1b:16:1e:
ae:43:c4:b5:b3:d3:2d:0c:c9:50:1c:02:0c:ae:fb:15:65:50:
74:a5:ba:a5:fe:f3:f8:b0:56:db:c6:89:8f:a4:77:95:03:97:
a4:ae:d3:99:5b:bc:52:e7:6e:64:d1:0f:1d:93:c8:c9:bd:41:
af:8e:ae:6b:a8:e9:4a:dc:11:35:f8:13:b3:27:e6:4a:04:57:
08:cd:a5:5b:01:6b:71:8f:4d:16:c0:2a:5a:b1:f9:61:c1:9c:
da:61:6a:37:d1:77:1b:b6:a9:9f:5b:84:62:29:6b:7f:60:d9:
5c:74:a0:05:13:1b:28:af:ec:f5:f7:ba:24:f8:3a:80:a4:28:
90:61:be:84:3e:33:cb:a4:60:26:25:49:80:c4:f3:11:c2:ae:
a3:bb:bf:30:6f:a7:5c:92:7c:31:3b:16:c5:40:16:40:1d:5e:
0b:f2:32:34:09:fa:b3:ed:e0:42:96:ed:39:7f:45:ee:20:a7:
5b:d9:c2:04:ba:f4:f9:a1:64:2e:6d:43:b1:ca:15:dd:86:63:
c0:8c:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:20 2026 by rpki-client