Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: gPtdsXS4Qw8z8DTaqyWENTGHEgZPd+kb/dAAyAeMP5c=
Subject key identifier: E3:5C:36:82:A3:F1:EA:37:DC:5E:B4:6D:EB:FD:15:7C:FB:F8:FC:86
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01A0CBC83E3E0BDEC1FCFE73748048D2DE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1616
Signing time: Wed 23 Sep 2026 01:01:32 +0000
Manifest this update: Wed 23 Sep 2026 01:01:32 +0000
Manifest next update: Thu 24 Sep 2026 01:01:32 +0000
Files and hashes: 1: R833NOdXTD2aQWG3JavzKd06mys.roa (hash: fWZj94n90bNsji3CFK3WkNid37wFqWD8C1Qx/wwtaQQ=)
2: ZmLewUIWz9_zdShetR7Jdzl8lfo.roa (hash: fPaCPLobKeVWk/RzinoeDdlx4MxMtKzniHguRoc5v/k=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: OwvEkEs1HcGzH/cE41UG/Do2JjeVwJz27r9bfY68AIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:3e:3e:0b:de:c1:fc:fe:73:74:80:48:d2:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Sep 23 01:01:32 2026 GMT
Not After : Sep 24 01:01:32 2026 GMT
Subject: CN=e35c3682a3f1ea37dc5eb46debfd157cfbf8fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:68:fa:de:27:3b:6c:60:f7:12:fe:89:97:
44:36:d6:d0:4e:40:5d:03:e9:f6:10:25:48:da:f0:
70:25:3d:b0:bc:55:03:23:ff:99:e7:ad:c5:97:24:
31:de:f4:67:ea:5a:8f:72:fa:c2:e1:0f:2d:2c:31:
20:5b:61:f4:3b:5a:cc:fd:eb:13:7d:cc:40:b2:88:
30:7a:54:02:65:d9:d6:fc:0f:21:ef:0f:71:65:d7:
f2:4b:bf:7d:55:52:bc:e1:a5:eb:a8:88:e6:14:5b:
5b:95:83:ed:04:d6:65:1f:6e:ed:6d:e2:85:22:5a:
5a:57:24:e4:3a:b2:18:e4:e2:4f:f6:9c:0e:aa:88:
14:fd:5f:1d:a3:ab:5e:d2:54:58:35:2e:49:7a:a9:
71:8b:fb:97:27:85:cf:78:20:89:4f:82:64:d2:94:
86:3f:bb:89:c0:f9:27:cd:ba:cb:88:7f:eb:c4:0b:
80:89:0b:16:d0:b7:54:69:ba:48:78:13:eb:24:16:
74:5f:02:93:6f:33:5e:e1:35:b6:64:fb:7b:98:58:
c3:c8:2c:8d:43:b7:71:eb:d7:15:82:2a:85:04:2d:
58:26:ad:66:b3:39:89:3c:cc:66:37:1d:ac:a6:e4:
55:12:f1:f2:f4:5a:7d:73:99:2c:f6:52:dd:a6:ce:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:36:82:A3:F1:EA:37:DC:5E:B4:6D:EB:FD:15:7C:FB:F8:FC:86
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:90:af:d8:66:31:ba:fd:dc:a0:c1:a4:9e:a4:16:9e:f0:29:
35:5c:fb:45:5e:fc:21:86:32:eb:43:1d:47:05:5c:36:dd:80:
5b:89:55:96:b2:2e:5f:cf:0e:30:18:c0:99:ef:47:93:ec:63:
93:b6:b9:06:d9:dd:f7:e9:34:f3:56:d9:68:76:76:9f:0b:2f:
ae:fe:af:d8:8c:e3:e1:ef:cf:30:72:bb:d4:20:29:d0:b9:b7:
b1:7a:40:82:7d:06:30:62:7a:df:74:ca:39:e1:73:3e:d8:96:
50:3c:7c:f0:e8:c1:0a:f2:ed:95:cf:0c:fb:86:1a:ec:70:94:
64:02:9b:1d:27:3b:06:f8:b9:3b:93:1d:95:a3:36:31:61:fc:
b4:9e:21:75:aa:b8:6d:88:95:a0:f0:51:91:a9:be:15:19:86:
b1:4e:21:34:ed:18:c5:80:00:0e:35:3e:5d:c6:57:58:14:28:
7b:43:8f:83:4e:e1:8a:4c:86:a8:cf:af:ef:a1:c2:f2:41:6a:
be:47:37:b6:d4:1d:a3:3f:99:94:ce:6a:43:86:d2:13:f8:82:
63:f3:b5:a6:b7:ba:c5:80:9c:f7:fb:de:90:b3:cf:ab:b6:f6:
6c:34:6e:4c:e0:b4:19:5b:53:e4:df:d2:08:9d:c1:0f:cb:30:
ba:76:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:01:43 2026 by rpki-client