Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
File: hHyRt2JrFwQf6KdfOVgdo6L_5do.mft (raw, json)
Hash identifier: 7Qa+P4pycgL2Y50LsbGmiYEDUh2Bwg7xqYiTI03Tdbg=
Subject key identifier: 53:FC:2E:1E:B0:F2:19:34:84:3D:92:C9:37:33:7D:10:03:5C:16:AE
Authority key identifier: 84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
Certificate issuer: /CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Certificate serial: 01A155C183FA0EB16FD8B62B23EA1CF2F7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
Manifest number: DB
Signing time: Mon 19 Oct 2026 20:01:47 +0000
Manifest this update: Mon 19 Oct 2026 20:01:47 +0000
Manifest next update: Tue 20 Oct 2026 20:01:47 +0000
Files and hashes: 1: cB7PC28F3bY-m09DAAeWUi3RUiA.roa (hash: 3lEL6EkP5eBl9884xVL0N/vy5L6Tqe95mpKiy8EOZ7s=)
2: hHyRt2JrFwQf6KdfOVgdo6L_5do.crl (hash: aAxev0l2mgWI+cPOQudoB0hmMDaHY1nWW/CFdunD80c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:83:fa:0e:b1:6f:d8:b6:2b:23:ea:1c:f2:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Validity
Not Before: Oct 19 20:01:47 2026 GMT
Not After : Oct 20 20:01:47 2026 GMT
Subject: CN=53fc2e1eb0f21934843d92c937337d10035c16ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:2a:8f:c0:58:bb:f9:ca:66:30:ec:6d:1a:
d3:b8:16:be:cc:26:d7:5d:07:05:79:7d:8b:e6:83:
06:6e:02:e7:ae:84:13:e7:ca:34:9b:eb:14:29:12:
68:4d:db:86:14:c8:54:41:40:b3:3f:fd:05:8d:53:
53:9c:f8:3e:84:c6:9c:41:ae:4c:ba:cc:0f:90:d9:
67:fc:ce:37:7c:d3:45:15:f1:f1:e0:a4:85:82:7b:
66:fd:79:e0:db:fb:4b:c7:61:ce:12:a9:68:db:53:
16:e1:ca:98:d2:3e:3e:c5:97:62:a9:b2:7a:47:13:
02:4c:02:73:1d:03:8d:45:3b:48:2e:9a:44:ae:d7:
61:f9:90:0c:52:63:db:80:fb:a2:89:11:cc:43:56:
aa:ab:be:a8:12:1e:40:1e:72:a0:0c:25:f8:c1:b6:
76:c9:ac:75:49:55:97:67:22:80:d6:ea:21:73:af:
bd:a2:4f:ca:04:34:46:20:90:87:f0:63:11:d7:24:
4a:77:62:c7:9d:78:2b:20:6c:9a:6b:fa:6b:58:19:
38:59:d3:b2:a6:61:08:75:dd:bd:37:cf:4f:bb:e2:
f2:b8:d6:2e:9b:55:f5:7c:1e:e9:ff:d0:82:5e:a1:
a7:fb:92:13:f1:be:7a:70:1c:7a:88:ba:69:b2:02:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:2E:1E:B0:F2:19:34:84:3D:92:C9:37:33:7D:10:03:5C:16:AE
X509v3 Authority Key Identifier:
keyid:84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:d0:cb:bf:f4:54:a1:23:f6:a2:7b:55:92:9e:6e:92:95:
a8:0e:7c:c7:ec:a3:36:87:f4:bb:07:c2:8f:3f:9c:d2:33:3a:
7d:64:f9:58:6e:66:96:24:7a:cd:35:cc:d2:55:78:81:4d:18:
64:ef:98:ca:ca:27:59:53:61:8d:4f:eb:4e:6d:3a:ce:ce:ca:
6a:77:9e:24:2d:63:da:99:a1:da:ae:92:b8:f6:84:cf:db:40:
84:ce:0a:ac:9c:80:66:91:fb:9f:3e:59:f6:b0:4e:91:52:7c:
cc:c0:87:b2:96:ff:9d:0d:1a:a1:91:08:6f:d4:61:62:db:b5:
ca:83:6c:0c:0a:57:40:a9:e7:c4:18:da:da:37:1c:01:1b:4e:
20:e4:bc:3f:a6:3d:85:29:50:e0:0c:78:e1:18:fe:ef:6d:4b:
34:1a:53:12:ba:7e:68:7f:96:f0:41:82:18:4b:c4:b0:2a:30:
e2:e4:71:06:9b:93:4c:9e:c8:31:36:ba:d6:31:31:13:a0:ce:
aa:1c:b8:8d:ad:c5:f2:4a:2b:d0:f6:51:1e:5a:23:c1:e7:4f:
0c:0c:da:57:4b:f5:ed:aa:e9:5e:b3:6b:e5:58:50:10:16:4f:
86:d3:c2:43:31:4e:b8:1d:4d:de:20:4e:78:51:fa:cb:c7:7f:
63:08:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:53 2026 by rpki-client