Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: yDH9Z+2zgh1pVwqHsLkflsbfALteetfShCgLxekddh0=
Subject key identifier: F9:D0:E4:BD:36:3F:23:D4:FE:57:E5:06:06:9F:D7:3B:A1:01:40:D1
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 01A03894BEDB617AD91FEB99B9684EC7AA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 0829
Signing time: Tue 25 Aug 2026 11:01:07 +0000
Manifest this update: Tue 25 Aug 2026 11:01:07 +0000
Manifest next update: Wed 26 Aug 2026 11:01:07 +0000
Files and hashes: 1: 7ObucnjBknjOc9VGyDvq-rah57Q.asa (hash: AfmsB5ElxTW0o9bXlvelsvJ0CpTckZTI7iwTHE4nG1E=)
2: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: atVAH+KZZwJlrRhHF6gnS+sK31XTHxf8sCiXBCznenQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:94:be:db:61:7a:d9:1f:eb:99:b9:68:4e:c7:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Aug 25 11:01:07 2026 GMT
Not After : Aug 26 11:01:07 2026 GMT
Subject: CN=f9d0e4bd363f23d4fe57e506069fd73ba10140d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:85:83:3d:a1:b3:84:84:aa:f8:3d:b4:5b:
68:9f:82:ce:a1:15:37:d0:d8:6e:dc:fa:73:07:b7:
d7:79:0a:a8:f4:8d:4e:36:9b:87:b3:a9:98:df:66:
05:8d:f8:89:6f:42:51:87:ee:a0:af:6a:44:f7:94:
ea:00:57:48:cb:d3:41:f7:bb:2b:b5:11:25:b5:8d:
41:2b:5a:0d:c7:84:22:d8:ca:d9:18:d6:68:c3:d8:
f3:8c:ed:f9:36:7a:95:3b:8a:6c:46:54:11:41:d9:
7c:03:c5:6f:f4:66:15:cf:5f:9d:69:6d:67:30:af:
1b:e5:91:a2:33:86:50:a4:e0:b6:4d:73:c2:d5:15:
f9:fa:0a:0b:40:4e:a3:ec:1d:4d:2f:1f:78:96:aa:
38:f7:75:cc:0f:d1:1c:eb:1b:3c:c4:81:49:7d:41:
07:db:e3:a0:a4:9b:02:28:f9:61:7d:ee:50:d5:37:
0d:7c:08:1b:f6:f2:0a:a3:70:4a:e7:a7:61:dd:96:
f4:2b:ba:1b:23:8e:79:e3:34:8d:e3:da:40:db:77:
75:85:da:8d:7f:00:8a:6d:7c:ff:cb:7f:d7:e3:5a:
39:dc:5c:db:4d:d7:c5:4a:54:68:b7:7d:c3:6a:eb:
37:48:61:47:6b:aa:75:c7:1c:ee:fe:04:43:6f:a2:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:E4:BD:36:3F:23:D4:FE:57:E5:06:06:9F:D7:3B:A1:01:40:D1
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b9:50:00:e4:8e:8c:7d:73:1c:b8:ca:17:33:0d:ce:d3:e6:
3a:04:7a:32:f5:8a:e9:4f:6b:54:16:fc:e7:c0:7f:6d:8f:16:
b5:77:81:7e:87:f9:55:c3:f4:84:9d:9d:f5:72:f0:c3:fb:bc:
74:2f:96:29:85:8a:55:4e:d0:64:24:01:db:d7:f4:13:8f:d3:
f2:d7:c5:f8:67:4f:ba:72:67:35:c1:d5:51:5a:56:c1:27:74:
fb:6a:46:a9:d7:a2:75:b0:17:d0:5e:a9:05:da:df:00:6b:5a:
76:ae:1a:38:01:54:d8:94:8b:5a:b0:63:fa:a3:95:5b:41:d0:
fb:45:de:ad:55:07:02:b8:99:c9:64:ce:a9:df:66:52:45:16:
7b:eb:9f:63:20:f7:8a:91:c3:8f:53:a2:d0:69:fd:47:85:d9:
a5:81:af:73:bc:33:53:ed:4e:b6:26:7a:88:e9:28:0d:fe:d9:
aa:e5:e7:3b:b9:ed:75:d4:43:95:8d:61:ae:6e:40:a5:ac:18:
89:53:f9:e8:15:ed:5b:8b:5a:f9:50:39:42:d1:f4:2f:41:41:
95:c9:0d:79:43:16:92:d0:f0:82:dd:3d:01:af:2f:4e:91:7b:
d7:1e:93:1a:98:75:0f:97:4c:dc:0e:b9:80:28:4b:db:7c:6a:
fd:dd:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:06:50 2026 by rpki-client