Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: 3LxZ/pqS5v7Gem2UheXIGOsqTlfwSa8J/kS0eN+VW7Q=
Subject key identifier: CE:58:19:96:8A:35:FE:76:E2:77:9F:01:AE:23:26:16:DC:89:7C:0A
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01A058FB3C6D9CE745452916BFD5E2C5B858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 1A33
Signing time: Mon 31 Aug 2026 18:00:55 +0000
Manifest this update: Mon 31 Aug 2026 18:00:55 +0000
Manifest next update: Tue 01 Sep 2026 18:00:55 +0000
Files and hashes: 1: 1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa (hash: z6hiEkQzG0sD38AUOglWiXkVXLhBbifg/B/a3MzT8UE=)
2: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (hash: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=)
3: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
4: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (hash: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=)
5: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (hash: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=)
6: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
7: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: 7+bidLw7EewxuCafsAD+yUFeoJOqMz00R3bZ9+PLfa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:fb:3c:6d:9c:e7:45:45:29:16:bf:d5:e2:c5:b8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Aug 31 18:00:55 2026 GMT
Not After : Sep 1 18:00:55 2026 GMT
Subject: CN=ce5819968a35fe76e2779f01ae232616dc897c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:ac:50:3a:05:ce:9d:e7:54:88:1d:fb:d7:
71:63:be:b3:36:06:c0:27:07:7a:d9:73:6c:b6:ca:
04:cf:e6:df:70:66:37:d1:55:a0:6f:03:1c:11:1e:
45:00:fa:3f:38:f2:84:a9:02:61:44:b2:fc:c4:a6:
7d:29:53:9e:20:e3:da:ce:2c:e5:f3:14:f6:3e:ff:
e4:90:84:eb:c3:dd:05:af:ec:0c:1f:ab:5e:99:a5:
ac:b9:d9:1d:52:3c:b7:e8:6b:33:00:c4:98:cc:ea:
9a:6a:84:d3:29:53:83:47:d9:6e:d6:67:24:20:07:
02:cd:7e:0d:84:c7:55:17:07:0d:7a:a9:a7:90:c8:
db:93:ff:dc:03:72:b8:bf:f6:5a:c0:15:5f:6c:4f:
ba:69:3c:87:c8:f7:62:d6:fa:c2:7c:e4:97:fc:c7:
33:b6:36:0d:8e:1d:d4:79:4c:f3:3d:79:94:8b:5c:
8e:e4:a2:d1:d6:39:cb:95:99:4b:c1:59:51:3a:7d:
ec:61:c5:b3:4d:0d:f2:f4:5a:c6:b9:be:28:5b:5a:
16:1c:5b:4f:f2:89:b6:b8:fa:f1:2e:84:e4:cc:c8:
9d:63:30:9c:81:68:c3:d6:f9:c0:dd:97:ac:1e:e6:
69:7e:d1:b1:d1:75:36:bc:4d:9b:70:95:47:1e:c8:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:19:96:8A:35:FE:76:E2:77:9F:01:AE:23:26:16:DC:89:7C:0A
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f6:01:0f:c9:88:cc:cb:c6:c5:f1:98:42:25:b7:f4:2c:b7:
95:28:4b:25:49:94:3c:36:68:ef:50:dc:95:23:67:77:7d:4e:
92:2a:d6:69:e5:ad:3f:46:cc:ae:24:e2:29:0c:92:83:3a:44:
2c:f5:50:c7:40:04:50:85:1e:73:ff:9d:36:c2:71:18:11:65:
5a:0d:1e:a2:1d:0a:dd:3b:bc:32:ef:dc:38:44:f9:06:94:74:
09:bb:96:b7:83:99:dd:05:93:5f:fc:3d:b3:ca:45:58:5b:17:
ec:6f:75:06:1c:0d:2c:c9:f7:d3:e1:75:72:04:70:ce:c9:53:
2e:9b:7c:50:8a:85:3c:6b:c5:a6:c5:42:6d:3d:cb:75:29:7a:
74:39:af:ba:0a:2b:4d:dc:eb:e2:98:c5:c1:7c:f9:db:02:c0:
b7:56:cf:ee:5f:e2:37:e8:f6:82:c7:94:90:6f:76:da:4d:18:
04:f5:69:da:05:a0:59:df:de:d5:2e:44:e9:05:13:5d:cf:88:
0a:8b:7d:b1:bf:df:8c:05:28:90:2c:14:30:3b:5e:0d:b0:7d:
06:db:b5:e5:c0:2b:24:20:4b:25:dc:ab:55:9a:92:51:c9:98:
59:3e:64:b8:a6:1a:8d:a6:5f:27:44:ac:18:d2:a7:bc:af:53:
1b:d9:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:22:43 2026 by rpki-client