Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: oZr+QoZVKzbcSJ+MjGC8J5WWQ6NtJssBd0CTCuC1n/g=
Subject key identifier: 59:A9:17:5D:73:B9:BF:40:9C:A2:F2:A0:E5:65:BA:66:BB:70:16:7E
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 01A0713AA4A3554BFE0B4CA7EB5DA51A688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 0375
Signing time: Sat 05 Sep 2026 11:01:03 +0000
Manifest this update: Sat 05 Sep 2026 11:01:03 +0000
Manifest next update: Sun 06 Sep 2026 11:01:03 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: P3O+PcyhVcqnUKizlSoXgfkoRWz8fiq3nMa5qWWoUQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:3a:a4:a3:55:4b:fe:0b:4c:a7:eb:5d:a5:1a:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Sep 5 11:01:03 2026 GMT
Not After : Sep 6 11:01:03 2026 GMT
Subject: CN=59a9175d73b9bf409ca2f2a0e565ba66bb70167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:8b:cd:06:a6:94:2e:a1:9b:d6:63:ae:ef:
2c:7a:18:9f:99:a3:59:5f:39:d3:88:79:24:2d:78:
54:3d:2c:1f:98:8a:b3:65:45:7a:7f:c8:24:e9:87:
d6:a9:fa:c2:85:2b:27:f3:4b:10:7f:94:34:44:4e:
70:f1:6d:d3:83:72:ed:4e:c8:7a:11:54:77:f7:ba:
c3:0b:7e:06:62:64:39:e9:2d:28:11:ef:0a:19:aa:
2a:91:27:d9:ed:a1:02:a7:f3:77:4e:5f:ad:02:2f:
47:93:18:ab:b4:67:44:1d:b5:98:68:d3:5f:26:10:
7b:23:3a:82:27:46:e0:9a:c7:93:d2:58:e4:4b:8c:
1d:fd:77:b9:fe:99:ff:fe:88:b6:13:10:11:b7:0d:
94:df:ff:69:b7:12:38:27:73:c9:d3:84:e9:a1:6c:
17:b2:96:74:a4:e0:eb:7a:f9:de:19:b2:26:ec:6b:
c0:96:13:f7:fa:32:ae:1e:38:c9:fc:34:65:5b:d1:
6d:2c:86:81:92:30:80:69:92:2d:08:90:18:da:30:
33:73:e7:e2:1a:39:ec:6c:96:16:f2:2d:a7:a2:ef:
81:50:3c:6d:11:83:44:6f:7c:f1:a5:b3:73:01:79:
4e:16:d2:3b:32:a9:ac:a0:50:2c:e1:f3:0a:c8:62:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:17:5D:73:B9:BF:40:9C:A2:F2:A0:E5:65:BA:66:BB:70:16:7E
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f4:c7:da:ce:e5:c5:3e:25:be:e2:11:a1:1f:61:4d:15:cd:
08:3a:f9:f1:bd:10:25:ea:6f:53:04:55:e3:9b:27:1a:0f:64:
23:8b:37:47:17:4e:36:5c:57:c1:b4:e2:58:c2:28:55:57:c4:
88:9f:bb:43:c1:df:80:b5:ee:15:bb:ad:94:28:38:99:4d:dd:
a6:e2:4e:cc:de:de:5b:4b:58:0b:e3:ac:39:40:e2:25:09:57:
01:af:ff:46:e7:ea:15:b2:f3:9f:82:78:0b:79:35:49:bd:b2:
4a:43:d9:7c:de:1b:22:49:e9:af:b7:4c:34:a9:73:d1:af:44:
7f:c8:0d:d4:9b:73:db:44:db:01:89:1f:f0:a4:a2:07:fc:b2:
35:d2:83:46:be:a5:55:1d:bd:70:7e:eb:d0:4f:93:67:0a:5d:
92:3b:ce:2f:45:73:00:00:7b:16:76:fc:41:dd:ce:9f:03:20:
81:4a:14:f7:c6:8f:d3:a6:15:36:02:8a:00:b8:59:a4:2a:ad:
e0:76:b1:95:e3:a6:d5:5f:02:25:c2:f0:28:4c:21:64:ac:47:
76:6c:5f:55:a2:a7:84:cf:69:96:dd:ad:84:02:43:b8:a6:e1:
59:76:65:5e:cc:2f:b4:c0:9d:ee:ec:c3:f9:fd:89:7c:b4:3d:
94:80:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 18:35:41 2026 by rpki-client