Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: HCEMd8rUoOs5nIhdFg06g6hZnifUzT9JBI5FIX9OLoU=
Subject key identifier: C6:3C:40:71:C1:6E:8E:DD:15:84:5F:CE:4A:9F:D9:54:DB:F0:95:0F
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01A08A8D7F0C4E385CA90CB4C67C5E65F9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 1354
Signing time: Thu 10 Sep 2026 09:02:03 +0000
Manifest this update: Thu 10 Sep 2026 09:02:03 +0000
Manifest next update: Fri 11 Sep 2026 09:02:03 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: yAw8fseMwbmHowVU6ttWVcfuZBt+jhIlNKlljMOMc98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:7f:0c:4e:38:5c:a9:0c:b4:c6:7c:5e:65:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Sep 10 09:02:03 2026 GMT
Not After : Sep 11 09:02:03 2026 GMT
Subject: CN=c63c4071c16e8edd15845fce4a9fd954dbf0950f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:ba:2a:38:b2:75:bc:35:10:9f:7b:4c:09:
3a:99:ce:e9:7f:57:32:7b:e1:d7:12:c0:55:eb:39:
10:ab:82:cb:35:49:3c:7f:da:6c:d1:98:62:b8:29:
d1:85:0f:c0:94:85:1f:46:c3:18:0c:80:d7:86:2a:
d0:63:ed:26:08:68:0f:f9:98:d6:a3:c1:56:5c:d4:
21:30:30:44:38:5a:74:49:a3:6b:aa:05:74:a0:8a:
f9:81:07:99:ce:db:99:ca:db:74:10:70:6d:ee:15:
4d:c3:90:31:27:30:b4:f9:cf:fa:39:03:48:68:de:
a0:42:6b:30:7b:b7:25:dd:5a:2f:2c:8f:6d:78:cc:
65:73:9b:0d:d1:3a:55:fc:01:db:88:97:3b:50:f2:
89:0c:4f:be:a0:45:26:f1:9e:19:08:dd:07:50:77:
ce:34:e5:28:70:ae:01:aa:61:5d:bf:76:fb:74:e6:
c3:2c:b6:ec:ac:c2:50:ce:f9:48:db:46:71:90:13:
df:8d:b4:1e:f2:3b:22:40:81:33:b5:54:95:93:03:
45:48:53:e5:90:f3:b5:53:a2:15:eb:b2:d2:e1:82:
14:cb:08:ea:84:c1:25:6f:67:4b:32:bb:47:b9:68:
94:37:a0:dc:81:2b:3f:1e:35:12:2a:15:f3:33:27:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:40:71:C1:6E:8E:DD:15:84:5F:CE:4A:9F:D9:54:DB:F0:95:0F
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:42:2c:e2:e3:66:1c:a2:c5:94:8e:5a:af:e6:79:61:23:a9:
39:35:9e:1d:f1:84:c2:45:52:97:b3:cf:31:5e:fe:d8:a7:b1:
c2:48:ed:e8:6b:01:ea:bd:b7:6f:3f:66:77:bb:13:ba:dd:b0:
85:df:fe:6d:58:80:ca:0b:86:63:da:a2:d2:2e:30:83:e1:ed:
e1:88:ae:d6:93:45:f5:36:b8:17:92:57:90:8b:b5:34:fa:74:
e8:6e:10:d4:27:bb:3d:9c:92:03:3c:ed:57:ce:fe:02:5c:3c:
47:35:a8:1f:e8:9c:56:5b:fc:7d:e5:54:df:7b:d3:06:c8:a4:
75:b2:0a:a3:a4:41:f3:5b:1f:2d:8b:5d:c0:cc:4c:27:59:34:
50:a9:76:b2:f8:59:0c:53:1b:ea:a4:d9:4c:34:5f:80:79:00:
0c:3d:ba:5c:45:e1:33:ec:fa:8c:68:4e:f3:e0:ce:3c:1d:d1:
24:04:cb:2c:55:bc:76:58:5f:6a:02:40:69:ef:44:71:e2:66:
66:98:c8:b6:e3:f2:f2:a9:21:2f:69:f0:72:41:91:48:09:78:
c2:e3:da:5c:02:10:96:de:50:3e:9f:25:d3:70:9b:2d:12:63:
73:37:d7:c4:d3:bc:60:43:de:39:60:7e:19:b7:e8:d1:c6:a6:
2e:84:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:28 2026 by rpki-client