Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: KOnlLrpOWH4lF937YyFXn4kN4lgg4NGoIzgysqOzC+0=
Subject key identifier: 95:DE:14:6D:F5:D0:9F:EA:9A:4C:50:E6:0F:D7:62:DF:AC:4E:44:23
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 01A08B681FE42F09FB9E21258F4E919217A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 13:00:51 +0000
Manifest this update: Thu 10 Sep 2026 13:00:51 +0000
Manifest next update: Fri 11 Sep 2026 13:00:51 +0000
Files and hashes: 1: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (hash: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY=)
2: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (hash: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: RtqQVYgD0VUKfp9hJYWjL4hzsyxJEe9LJ4fGg7mqL0U=)
4: hPluaz2ce72z5Cezy2XMePaJEmA.roa (hash: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:1f:e4:2f:09:fb:9e:21:25:8f:4e:91:92:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Sep 10 13:00:51 2026 GMT
Not After : Sep 11 13:00:51 2026 GMT
Subject: CN=95de146df5d09fea9a4c50e60fd762dfac4e4423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:eb:65:1e:1e:63:bb:b9:d9:e3:68:0c:c3:
44:2a:20:02:c6:b5:c6:64:0e:64:78:ae:f4:36:f0:
ab:e5:bd:31:23:44:ae:17:ca:a9:ae:76:b3:b0:39:
98:39:46:f2:95:8d:b1:59:25:e7:ec:93:11:bc:68:
00:85:66:d4:35:84:43:70:cb:85:ed:a0:cd:ba:cf:
3f:c4:5d:a8:f4:ed:b7:61:80:cf:05:e5:44:01:6d:
00:43:cf:45:29:b7:ea:57:dc:2b:92:ed:49:d8:cf:
24:76:2f:49:25:e1:f7:92:49:af:61:39:3c:4f:62:
6d:d2:78:99:5f:c9:91:3a:cf:de:b1:53:c4:12:48:
fa:3f:2d:c0:79:6e:6a:c0:88:c8:d7:b1:21:eb:ae:
e4:b0:07:75:32:76:c6:71:d2:7e:f4:0b:46:42:1b:
c3:3c:f4:24:b6:5f:e7:f3:10:f3:6d:a7:d7:93:9d:
a3:b6:ce:fb:40:21:6c:2f:68:6c:70:c5:06:1e:18:
14:ac:66:7a:63:59:65:e1:33:6f:dc:42:9a:52:a4:
c6:72:70:e7:d5:ac:98:71:84:be:42:4e:af:98:2c:
f3:30:08:1e:58:dd:1c:bd:66:71:2b:c8:6d:3c:31:
9c:c8:ec:94:1b:b5:05:9d:7f:63:18:34:8e:71:28:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:14:6D:F5:D0:9F:EA:9A:4C:50:E6:0F:D7:62:DF:AC:4E:44:23
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:35:3a:43:36:56:4b:6a:07:96:3c:73:66:68:2a:9c:a5:d0:
90:fe:23:e2:3e:fb:ab:80:6f:2a:45:1f:a1:83:c6:8f:9a:20:
56:f3:5e:e9:c0:b4:50:65:de:3f:50:40:8c:65:7e:45:70:8d:
15:0d:ee:57:d9:cb:dc:96:ae:b9:76:40:db:27:e7:96:ed:04:
b8:3f:6d:3f:3d:7c:33:5c:20:9b:d5:9c:35:3f:28:63:db:17:
52:d2:56:39:65:e8:e7:47:5d:96:36:2d:5a:52:aa:f9:41:96:
8f:84:ef:95:d3:75:2c:72:79:74:27:1b:0c:e2:b2:83:e0:3d:
18:ad:2b:76:40:96:7a:2d:01:9b:30:25:fb:27:9a:56:87:b4:
8b:1c:47:fe:58:f4:24:25:f9:1f:02:59:36:88:c9:10:07:20:
fa:c2:45:44:da:7a:06:c3:23:a4:2d:99:39:44:d3:5d:06:0a:
26:f6:47:d0:3f:83:2f:9c:30:5e:88:73:29:06:1f:ce:08:7c:
74:5d:fc:2e:ea:2c:35:6a:ea:3c:3f:e9:88:a1:fb:41:98:0f:
5d:d9:1f:ba:d3:86:9f:f0:1b:f8:17:c1:6b:2c:4e:c7:28:bd:
c6:0d:57:1e:a5:7b:b7:68:2e:96:0f:e9:38:18:ff:12:1d:91:
37:0d:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:47 2026 by rpki-client