Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: 9KiebFDmj2p3Lia+nbyvw6gtd911E+Rf0Igu8xw8bHg=
Subject key identifier: D4:FC:78:57:8E:1C:B0:09:5F:9B:48:75:26:19:1B:1D:70:9E:E5:D1
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 01A18C0A5A64F4435306F01773A26B3B38D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 1501
Signing time: Fri 30 Oct 2026 09:00:51 +0000
Manifest this update: Fri 30 Oct 2026 09:00:51 +0000
Manifest next update: Sat 31 Oct 2026 09:00:51 +0000
Files and hashes: 1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: uLs1pGk4yb2GRmiPvHskodD+aACJyC+ESDHVUOfhG9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:5a:64:f4:43:53:06:f0:17:73:a2:6b:3b:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Oct 30 09:00:51 2026 GMT
Not After : Oct 31 09:00:51 2026 GMT
Subject: CN=d4fc78578e1cb0095f9b487526191b1d709ee5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:e9:31:a8:25:92:0c:be:d2:2c:86:4f:2b:
bc:94:1a:32:d9:7d:1a:fb:99:35:0a:d8:74:f3:47:
66:bc:e6:37:f1:8e:fa:a0:a7:b2:74:e4:33:62:b6:
67:69:2f:32:45:3a:10:3f:84:94:07:6a:4a:1a:96:
f0:19:35:7c:82:58:e7:0b:62:db:43:11:5d:42:22:
29:3a:ba:24:09:9e:5b:38:33:46:f4:75:2c:d8:d2:
5c:8d:98:ce:a5:1e:fe:d3:2c:46:3e:07:10:44:29:
5a:6e:db:cd:ff:bf:80:cd:04:be:6a:79:79:92:ec:
5a:94:bd:fa:4e:0d:d4:08:99:99:72:ac:ef:41:27:
e3:54:5a:c5:1c:07:a8:aa:c5:0d:18:b1:da:60:f2:
87:54:1b:43:7c:43:77:8d:cb:ba:7f:e6:37:dc:b1:
d3:e9:de:e4:a0:db:05:12:3f:63:c2:49:58:76:a3:
eb:c0:b6:5c:bd:66:39:5a:37:43:e6:d8:df:18:64:
91:bf:59:c9:92:fd:bb:a0:60:88:f8:0c:e9:15:2b:
aa:8e:6f:fd:22:3d:bc:f4:b5:97:ad:f5:47:c6:bc:
1e:0d:31:d5:c6:80:d4:c6:c9:af:22:31:bb:0d:7c:
dc:10:44:52:33:c0:4d:aa:08:36:d3:97:c8:ac:2d:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FC:78:57:8E:1C:B0:09:5F:9B:48:75:26:19:1B:1D:70:9E:E5:D1
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:91:5e:c0:a8:6f:0f:78:c6:32:c8:a7:c8:bb:06:45:2b:
81:bb:21:24:32:15:a3:ec:73:f8:2f:39:c9:71:96:d3:60:46:
9a:e6:07:19:ee:c0:d6:6d:22:3b:f2:cf:6a:e8:12:fb:66:db:
9d:be:70:e8:ac:0f:9d:2e:a8:bc:16:1b:14:f7:f3:6e:80:00:
cd:2d:93:60:05:b0:b7:b5:92:f5:65:40:50:0f:75:b2:56:64:
28:22:67:d1:4f:0f:e7:bc:7b:53:96:7d:58:8c:95:db:68:3c:
cd:9a:5b:dd:8c:4a:1e:4c:6f:1f:ac:3e:17:b9:53:0b:32:a5:
ac:29:ae:54:75:e3:c5:58:44:58:8c:68:d7:bf:29:a9:b6:4a:
06:b0:05:ec:e5:d8:4e:2b:17:b0:b4:aa:f5:1d:9d:09:5a:ac:
d7:0a:e6:8c:da:b0:71:46:85:65:46:f1:e8:22:0f:23:44:6c:
49:17:af:46:b6:0a:5b:13:53:a5:89:74:a9:01:22:33:cb:ad:
55:7c:c0:d7:53:1b:68:fe:12:b6:40:30:98:af:e8:de:ba:02:
da:f1:1e:4a:d5:9e:47:35:f3:6b:65:23:41:a6:e7:1a:07:8d:
b5:af:8f:31:03:3d:87:10:97:45:79:34:fd:ae:2a:07:25:12:
73:99:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:29:19 2026 by rpki-client