Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: 34pHiWhDl8LoMSfoThg4b80ULT/A7855aLPHeXde2CY=
Subject key identifier: 29:BF:29:73:D6:7F:1B:AE:78:CF:5E:D9:C9:A6:E6:2D:02:D3:58:E6
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01A112CDFC3D5BF1F284945C40937CBCD688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1722
Signing time: Tue 06 Oct 2026 20:00:51 +0000
Manifest this update: Tue 06 Oct 2026 20:00:51 +0000
Manifest next update: Wed 07 Oct 2026 20:00:51 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: OO1sDyoMh1TIW9+rBaFtdbzyQjB/z+7+ayWwiPDvunU=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:cd:fc:3d:5b:f1:f2:84:94:5c:40:93:7c:bc:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Oct 6 20:00:51 2026 GMT
Not After : Oct 7 20:00:51 2026 GMT
Subject: CN=29bf2973d67f1bae78cf5ed9c9a6e62d02d358e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:3f:5c:29:a7:1d:0f:1e:94:58:ee:c5:78:
4e:7d:c3:ab:09:d1:73:25:1b:6c:86:27:fa:4f:2b:
33:32:08:a6:2d:65:a3:1b:bc:76:56:97:25:37:c8:
b0:ac:0f:2b:e9:c2:e4:3e:8d:a6:a3:8c:85:45:06:
01:1b:ae:03:dd:f5:d5:1d:e7:54:4d:ae:45:08:0d:
51:de:3e:54:77:69:b4:bb:8c:bc:6a:2f:77:92:64:
17:7f:07:55:fa:01:38:db:75:66:ff:a5:88:3c:8d:
67:99:64:1e:b0:62:ca:e5:b2:b8:1c:0a:5e:ec:4a:
03:aa:73:18:a6:13:92:db:d8:d8:66:8e:22:98:96:
df:44:04:52:e5:9d:13:35:6d:99:b0:4f:ce:55:9c:
f0:ab:1f:c7:cb:91:ca:a0:27:80:09:5f:8b:73:36:
8b:02:d2:e4:0b:4b:27:6d:be:f8:b9:f2:2a:cb:ae:
8c:78:68:a8:a5:07:87:c4:68:28:7b:d3:bd:fd:4a:
c2:c9:9b:76:c0:49:07:96:5b:c6:e9:99:8c:1f:00:
e3:c2:85:18:6f:96:2e:5c:8b:ef:96:82:3b:bb:df:
11:11:2b:a4:af:85:b9:7a:70:e1:d9:95:4c:d8:1d:
c2:2f:aa:da:44:43:67:3e:1a:06:20:39:61:39:18:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:29:73:D6:7F:1B:AE:78:CF:5E:D9:C9:A6:E6:2D:02:D3:58:E6
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:3d:68:94:68:a3:7e:fe:b9:23:23:5e:42:0b:42:2c:a4:
1e:e5:3f:69:83:f4:be:e9:1f:af:eb:ce:5f:4a:4c:fa:f6:1c:
d9:97:e5:a9:ec:c3:3a:0b:0a:ee:e8:37:68:50:d5:69:49:e2:
cf:d4:8b:87:62:c7:9f:6e:64:24:c3:87:9a:d7:93:fe:b4:3f:
e2:c8:51:1e:13:da:2e:d8:34:81:08:87:1c:7c:73:37:f6:8c:
d4:53:06:99:b8:8b:0b:48:9d:ed:be:17:5d:9f:9b:3c:32:cd:
44:ad:19:33:02:31:b0:35:8b:88:69:bd:52:ea:2a:e4:a0:43:
79:3f:28:76:25:d0:96:02:d9:fb:a1:49:c2:a7:b6:67:38:6c:
46:f9:6d:4c:5a:ee:4c:f4:0d:06:ae:ea:6b:d0:3f:d4:3b:6e:
e2:e6:11:51:c6:5f:e3:fd:ab:7c:14:2b:52:6b:16:09:5d:a4:
a2:1d:5a:d7:43:96:25:20:ec:fa:1f:dc:91:13:ce:54:b4:90:
e4:ad:51:f5:4b:91:46:61:42:3d:31:ce:77:35:d0:28:82:d0:
79:25:eb:e5:2e:51:c9:1c:0d:5c:4a:5f:60:bd:1b:6f:bc:6a:
aa:84:57:0b:0a:43:19:5e:d9:81:45:28:9c:1a:30:3e:cf:ac:
1b:19:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:04:29 2026 by rpki-client