Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: LwjiUqmCf5da3tQFe7MNg799mVWWbQGiO7zY/fi7SCc=
Subject key identifier: C7:3E:DA:AA:48:F5:F2:39:86:60:C1:E7:F4:09:42:F8:22:3E:89:E5
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 01A08F4583A503C6245DE211FE719C4BD33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 0812
Signing time: Fri 11 Sep 2026 07:01:32 +0000
Manifest this update: Fri 11 Sep 2026 07:01:32 +0000
Manifest next update: Sat 12 Sep 2026 07:01:32 +0000
Files and hashes: 1: A_-FW985zbY15HsoQHY3jzaLsqE.roa (hash: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: QfZa3dpTO/VeaP763g8mURz4xnaeDYEcNcxMBo6IT34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:83:a5:03:c6:24:5d:e2:11:fe:71:9c:4b:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Sep 11 07:01:32 2026 GMT
Not After : Sep 12 07:01:32 2026 GMT
Subject: CN=c73edaaa48f5f2398660c1e7f40942f8223e89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:d6:d6:44:88:da:7e:fd:f1:d3:de:67:ed:
69:85:f3:4c:33:9d:93:59:1a:cb:a1:55:30:5e:db:
4a:e7:a7:8b:bc:a7:ff:27:1c:21:b1:6f:f3:19:35:
31:ce:38:07:70:47:b2:b8:99:31:c5:b3:27:23:ca:
a9:1d:d1:f2:7b:66:fb:b9:03:94:f4:82:c1:76:b5:
d2:8b:13:f4:2a:6a:e6:1a:47:02:14:dc:1c:53:35:
ec:3e:66:91:f5:20:0a:9c:77:73:a6:cd:16:72:91:
08:5d:53:99:7b:d2:fb:4b:e5:33:95:fc:9f:c0:77:
c2:6f:42:ee:09:96:0a:10:a2:d5:48:0e:bb:2a:a4:
95:e8:a4:6a:e8:fa:e5:c8:51:97:da:f0:54:59:8b:
c0:40:81:49:46:32:77:0b:dc:9e:2b:05:a4:4c:0a:
cb:a8:cf:17:32:f9:22:c1:a6:5d:65:8d:7d:07:2d:
95:68:10:9c:a9:7f:5c:b3:4b:a2:00:f0:21:da:e4:
eb:f1:b4:74:3a:f6:34:d7:f5:76:f6:f6:ce:f6:69:
e3:5b:b2:80:4f:72:e9:71:ca:3b:03:bc:2b:82:40:
02:2f:3b:3e:09:07:2e:fc:4b:c7:9c:ac:b9:bd:29:
70:28:68:7d:6e:3c:7c:7a:cd:43:7d:58:9a:8d:f9:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:DA:AA:48:F5:F2:39:86:60:C1:E7:F4:09:42:F8:22:3E:89:E5
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d8:37:e7:59:54:34:47:3c:0d:bc:99:f1:b8:12:4f:5f:ff:
79:a6:08:08:d0:0e:e6:2d:ee:73:35:b3:48:38:3c:d6:ad:59:
ec:11:f5:57:81:e5:ab:b2:15:37:17:59:c5:13:7a:75:d8:82:
00:c9:34:d4:a8:2d:fa:69:74:61:4f:d3:eb:d0:67:ef:c4:5f:
37:a7:84:25:06:a3:b5:16:20:61:4c:6b:be:b9:f9:65:58:86:
a8:e2:04:d9:34:e0:4a:a4:43:93:02:ad:c4:62:f9:7c:1d:08:
bb:59:c4:e5:db:a9:ca:ea:28:c5:58:06:6a:2f:d9:4c:a9:f1:
35:60:70:b4:c4:e1:a6:65:94:e2:cd:65:8c:92:6c:3e:3e:e5:
7e:1a:13:5e:0c:44:cd:0f:78:e2:ec:b3:5e:2f:96:5a:0e:29:
72:b3:e1:4e:cb:dc:a5:1a:c3:7a:8f:31:ac:16:b6:cb:2e:2b:
8c:1a:01:56:b3:73:56:e8:50:f5:65:27:10:66:b7:59:b3:61:
3f:27:39:1c:ec:69:f6:fa:37:e4:85:91:8d:0d:52:6f:af:df:
67:95:fd:9d:79:b6:35:b3:8e:0f:de:ba:eb:e8:33:01:b1:d4:
aa:1f:40:dc:c2:ac:ac:e0:fa:1c:56:23:eb:8d:f5:3e:e4:41:
78:82:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:01 2026 by rpki-client