Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: m3Gez+Xv6cxTew/p3VnF8ZDtE1gUANsfUEVDBMShaUU=
Subject key identifier: CD:3F:EA:0D:4B:F4:C0:12:67:5F:C8:A8:6A:64:8E:F6:37:BE:F0:4D
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 01A08D1FB5FC6D29D4FFB57EA5A6B5EBD380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 147D
Signing time: Thu 10 Sep 2026 21:01:00 +0000
Manifest this update: Thu 10 Sep 2026 21:01:00 +0000
Manifest next update: Fri 11 Sep 2026 21:01:00 +0000
Files and hashes: 1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: ziPTaphRWd9DLMmu7FkpzYf62pWShwlLzwK+Y0zp/A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:b5:fc:6d:29:d4:ff:b5:7e:a5:a6:b5:eb:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Sep 10 21:01:00 2026 GMT
Not After : Sep 11 21:01:00 2026 GMT
Subject: CN=cd3fea0d4bf4c012675fc8a86a648ef637bef04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:22:1f:72:90:2a:ed:71:9d:4e:91:ad:ca:
16:ec:11:0b:40:dc:11:4e:fe:56:19:90:72:6e:ce:
89:fa:99:f8:fc:c2:01:56:6e:d2:e6:35:ed:c6:ef:
c3:f9:ee:3c:dc:42:f0:f4:cf:f6:f5:5f:9a:15:59:
07:b4:74:aa:e8:74:03:9e:41:b3:4c:ae:3c:70:c7:
cf:01:06:fa:e0:ec:ce:90:8a:34:1a:85:02:36:59:
5f:d2:61:46:31:de:4d:5b:be:1f:f3:7b:d8:df:8b:
f4:50:bf:c7:9e:37:d8:12:4a:1d:07:22:b2:67:fe:
c5:64:b3:fb:d6:d2:1d:2e:80:14:e5:f8:85:3c:82:
2c:ce:30:b5:f9:65:93:c6:19:83:66:6b:b4:0a:2f:
ab:c0:b7:ba:66:10:2c:c4:19:5c:8f:01:23:1e:dd:
33:19:15:0e:80:58:07:10:69:80:10:c9:16:43:ac:
d4:03:85:56:16:f9:24:1f:13:12:2e:51:9d:59:7f:
6b:d4:35:da:8b:1c:2a:da:bd:96:c5:12:f8:cb:69:
b6:00:31:7d:ea:c4:c2:99:87:f6:e1:aa:1d:94:1c:
b6:47:82:73:e8:d1:97:91:bc:28:46:e8:26:28:8c:
86:68:65:0a:ed:28:3b:d5:72:22:23:40:a7:dd:80:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:EA:0D:4B:F4:C0:12:67:5F:C8:A8:6A:64:8E:F6:37:BE:F0:4D
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:63:8a:f9:68:1d:72:df:05:e9:19:90:54:32:71:a4:8f:
97:4e:03:c3:f4:3f:fb:0f:19:f0:76:e3:0b:56:65:a6:25:68:
34:e3:60:eb:4e:10:93:79:bb:e5:ad:49:f9:70:59:7b:09:17:
38:b6:08:8a:6b:1f:86:74:46:fc:ab:5c:a6:02:df:4f:6a:8a:
7c:77:10:be:66:b1:da:bc:5e:89:d2:29:c8:31:72:6b:b8:f2:
ad:f4:c7:d9:b1:3b:f4:d9:a1:ef:a0:1f:99:2d:31:c1:4b:1e:
5a:0c:ec:6f:1c:df:c3:dd:a2:ce:6e:81:4d:2e:ca:c3:9a:2c:
54:18:65:19:94:ca:1b:46:3d:70:c8:76:c8:f1:8c:ee:e1:6c:
e4:73:8e:ac:83:c6:b3:61:3a:84:0b:26:24:bc:d3:f9:2c:a0:
3c:83:8c:89:28:0a:04:6c:8c:cc:d0:77:2a:95:80:ee:76:1b:
d4:73:91:c3:84:10:9b:45:86:3c:d1:10:39:d5:94:0a:54:ef:
36:4e:bc:84:ec:bf:31:0a:9a:46:b0:4d:9d:6e:6b:90:ae:4d:
05:84:cb:85:70:25:8d:92:ba:5b:99:8a:92:b0:56:35:ba:c5:
ac:a6:b1:15:73:47:b3:7d:7c:9d:97:b0:5c:67:d3:62:40:49:
c4:fd:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:29:40 2026 by rpki-client