Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: XPKIEke0TeJWiv891WU4kar0uS/DxwcaCYmfNCwOYX0=
Subject key identifier: C4:ED:61:B7:2D:CF:5D:80:9D:12:FD:79:33:E0:BA:9C:11:56:0C:4B
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 01A08F44DA08A0A2FA28E76C4117400A948D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 07:00:49 +0000
Manifest this update: Fri 11 Sep 2026 07:00:49 +0000
Manifest next update: Sat 12 Sep 2026 07:00:49 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: 07zaytRebHua6g8/x1XXGhptj1qUIW0KBltoHUHqeDs=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:44:da:08:a0:a2:fa:28:e7:6c:41:17:40:0a:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Sep 11 07:00:49 2026 GMT
Not After : Sep 12 07:00:49 2026 GMT
Subject: CN=c4ed61b72dcf5d809d12fd7933e0ba9c11560c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:63:bf:67:22:05:fa:59:30:5d:a9:3c:bf:
1c:6b:96:5a:9f:9b:1d:bb:c7:a7:cc:4b:6e:76:4f:
17:54:af:3d:93:a6:6b:7f:ce:1e:da:0b:5f:62:25:
4c:14:30:da:12:35:bd:6b:b7:38:a5:29:83:8a:8f:
15:22:90:22:9f:14:98:1c:9b:01:ca:bd:b8:2f:be:
01:4a:01:1e:1d:8c:18:a8:ec:1a:78:e2:5b:d3:f1:
3c:75:8a:6d:94:5b:f7:3c:f1:a9:74:b6:d3:29:e8:
2f:3f:71:6f:43:0d:9b:f4:8c:97:15:02:fc:9c:db:
13:e4:20:2d:8c:33:9f:6b:01:44:8a:35:10:9b:7d:
32:de:90:d9:f4:d1:ee:b7:f0:d0:d5:08:16:46:48:
95:f4:8a:41:ab:3f:02:22:65:71:7e:39:fe:c3:c1:
9b:a1:0b:fa:ff:67:a8:ce:b7:65:f5:2e:82:40:3c:
da:95:df:3d:44:d0:3b:46:34:4f:7e:4f:a1:c1:61:
08:87:de:52:65:fd:26:f6:c9:2f:f9:20:a0:b3:78:
d5:ca:d4:c8:fd:00:8c:09:37:98:c8:df:93:0b:1f:
2d:8d:22:51:00:8e:fb:15:60:c0:7b:ba:c0:1c:0e:
43:b2:79:a4:74:a7:bc:e0:54:dc:f5:20:69:34:8d:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:61:B7:2D:CF:5D:80:9D:12:FD:79:33:E0:BA:9C:11:56:0C:4B
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b8:d4:e1:bd:fa:48:ec:49:87:37:18:04:97:af:22:7a:11:
50:68:43:de:da:56:0f:c2:c7:4c:bf:9b:78:8d:9d:8c:ac:3a:
f9:0a:fc:fb:89:43:10:91:4e:e9:ef:7f:5d:d6:7a:42:41:cd:
4d:a7:04:20:57:18:2b:fb:fe:0e:4a:24:d0:29:97:f0:91:e6:
58:a0:ff:fd:c7:a9:40:9f:76:d9:10:11:17:38:78:7c:48:1d:
92:39:3e:23:3e:dc:9d:c4:35:06:b7:fd:cf:50:fd:9b:cb:d4:
af:87:f4:19:08:fc:0b:3a:66:4a:b0:af:71:81:76:b5:2d:a3:
f9:b8:c8:ae:2a:04:f4:b2:e7:83:6d:b4:3e:2d:dc:53:dc:d3:
ba:b6:22:d3:38:78:b5:98:bf:ff:7c:c6:18:bb:56:b0:7b:63:
e6:ab:e1:05:79:e5:1b:46:a8:5f:dc:24:35:3c:83:39:c6:49:
02:aa:3e:27:f5:64:7c:d3:d4:75:ee:33:47:8d:35:a0:08:73:
c4:eb:97:a0:04:07:35:fe:3d:df:32:5c:d0:2b:f7:eb:83:4a:
46:b2:df:77:1e:24:54:ac:b1:3e:25:1e:da:47:37:f9:d5:29:
d6:de:bb:b4:bd:30:b5:b5:69:f5:cd:19:19:56:5e:2a:e3:7c:
f4:86:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:49 2026 by rpki-client