Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: Uf7N2llDyGBtoeJiEjLoXvMSg4c9aVfVA5vYIABMesM=
Subject key identifier: 26:82:8D:3C:69:AE:FC:5D:12:7C:5F:8E:FA:18:EB:2E:D5:DA:09:71
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 01A17BBB17D118A4E0D805EA4402A6C9F10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 03FF
Signing time: Tue 27 Oct 2026 05:00:21 +0000
Manifest this update: Tue 27 Oct 2026 05:00:21 +0000
Manifest next update: Wed 28 Oct 2026 05:00:21 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: Ff58qm1R3vdc5hq4qeQ9Xs4frlI7/bPm6YkE/gPjQpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:17:d1:18:a4:e0:d8:05:ea:44:02:a6:c9:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Oct 27 05:00:21 2026 GMT
Not After : Oct 28 05:00:21 2026 GMT
Subject: CN=26828d3c69aefc5d127c5f8efa18eb2ed5da0971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:67:2d:ca:00:c4:ef:ec:a9:55:1d:d8:98:
6a:c3:8f:50:93:0e:39:43:b4:bc:8f:1e:08:1c:7d:
84:89:70:65:52:07:3e:2f:f1:19:ee:d5:46:49:e3:
87:c2:b3:f9:d9:94:19:14:03:3c:2e:0c:ca:87:bc:
4e:b6:6e:98:b8:fc:59:ab:83:63:c5:fb:c6:87:e3:
ba:be:1f:00:35:3d:dc:5a:78:b8:ba:c0:2f:24:24:
84:62:db:f1:f2:9f:a5:b6:2b:5e:d7:58:bb:6a:74:
53:e9:90:9c:f6:99:88:1d:6a:d2:c4:ad:19:f5:66:
1c:5f:ee:65:c5:73:19:88:9a:f0:d3:34:54:2f:9b:
5f:00:94:fa:48:ea:0d:c7:de:0e:4e:20:3a:d5:44:
93:a1:eb:7d:87:32:68:08:83:43:6a:3f:db:55:fe:
cd:2e:f3:fb:ea:8a:fc:9e:88:14:7b:c0:1d:24:55:
cd:47:cf:26:56:e6:96:8f:26:65:70:a6:4d:09:0b:
72:a0:61:b2:5a:75:2b:89:ef:a6:7e:ee:e1:db:46:
91:55:4b:f4:14:a2:fa:7e:a1:ae:9a:eb:47:2a:68:
1c:39:3a:7b:a4:c8:6b:ca:34:ef:36:93:1c:76:6a:
06:a6:2c:30:12:da:46:d0:29:85:5f:9c:fb:87:e8:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:8D:3C:69:AE:FC:5D:12:7C:5F:8E:FA:18:EB:2E:D5:DA:09:71
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:0b:04:7d:d0:53:09:61:0f:7e:de:a9:59:be:42:ff:b7:
ba:79:eb:8a:b3:1a:cc:6a:51:31:bd:20:47:4d:0d:14:41:75:
bf:3c:13:d5:ba:e8:3b:af:e5:86:18:1a:e3:de:4a:e9:41:51:
f2:59:cc:44:7a:7f:fe:fc:63:ef:62:54:5c:35:74:cf:0c:cd:
bd:bd:59:6f:b9:bd:59:86:eb:58:4f:9c:e3:81:33:bf:56:18:
c2:9d:ab:1f:a3:1a:63:e2:03:15:e0:5d:ca:19:fe:32:b0:9d:
17:bd:2f:2b:b9:19:17:6d:1f:f8:a3:f6:6d:f2:9c:31:36:bd:
71:fb:d8:c3:8b:62:25:23:37:f7:f8:00:9d:01:f3:14:b6:82:
d6:58:f7:f3:14:dd:c0:7e:3f:2f:fe:d2:00:59:e8:f7:fd:e4:
1f:a6:b6:4e:c1:39:77:8d:07:d2:f8:4b:0f:06:67:20:8b:c6:
0f:56:14:9d:7b:d4:d2:77:6e:17:1f:60:e8:0d:f1:f8:65:fe:
68:8a:9d:5b:c9:51:ce:d7:30:46:36:76:7a:4e:e5:99:03:41:
63:12:e6:ac:41:8f:a2:d0:f5:a9:11:c8:09:a0:02:f2:5a:dc:
a9:76:f7:21:2e:ea:c0:35:b0:87:0f:71:10:f5:83:ba:d3:c2:
1a:34:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:31:16 2026 by rpki-client