Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: 351/uiP1OcxhVdmJjUSYcwdOCwCR6tUDEd82hJO4lRw=
Subject key identifier: B5:5D:64:A6:0E:5F:90:0F:74:7C:FD:A6:D9:77:78:D5:FA:7F:FE:C3
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01A0CEC8A7FF484A6C2AF5361CA4FDC5AF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 058E
Signing time: Wed 23 Sep 2026 15:00:51 +0000
Manifest this update: Wed 23 Sep 2026 15:00:51 +0000
Manifest next update: Thu 24 Sep 2026 15:00:51 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: 7JZNoLhslJ92VApMqbguBhI8kMJkv9eO7+9FpzZIkf8=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a7:ff:48:4a:6c:2a:f5:36:1c:a4:fd:c5:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Sep 23 15:00:51 2026 GMT
Not After : Sep 24 15:00:51 2026 GMT
Subject: CN=b55d64a60e5f900f747cfda6d97778d5fa7ffec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:df:64:13:29:69:a1:7a:67:c2:d5:41:04:
56:e4:f7:d6:17:45:ac:76:69:06:e3:c1:bc:d3:fe:
8c:2d:5c:b8:32:4f:ac:9b:74:ed:97:5d:dc:aa:4c:
44:8f:73:dc:2f:7b:b0:7e:67:25:18:8a:d9:1e:73:
1d:f6:b2:48:a3:80:3b:ad:7e:96:b7:8e:63:be:30:
1f:08:4c:df:7d:32:51:93:09:31:f3:66:be:bb:c9:
15:0e:c7:01:2a:7b:76:a7:8f:ae:0b:48:b9:58:95:
91:f2:e6:54:fd:1e:e3:14:ea:4f:76:8f:a1:87:61:
64:39:38:c1:81:06:20:8c:d8:d2:68:b5:ff:a2:66:
75:e6:2d:f4:c8:b2:0c:dc:95:98:25:86:69:4d:c6:
de:07:69:79:79:fe:30:90:8f:a1:2f:f4:16:99:2d:
ce:db:62:da:e3:bd:e6:ec:d1:fe:ae:b3:99:40:ff:
ff:7f:f8:6b:e1:14:4a:7c:df:c3:b4:df:3e:2f:9f:
bb:c2:da:85:35:47:ff:4d:c0:58:a0:f4:f4:d9:ad:
46:89:c4:49:86:1a:8c:dc:2a:32:f2:51:36:58:b3:
7b:88:79:b8:18:3e:64:75:f9:8b:82:0c:b7:4c:3f:
9a:3c:10:d0:df:02:eb:a8:81:89:db:dc:a4:f7:d2:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:64:A6:0E:5F:90:0F:74:7C:FD:A6:D9:77:78:D5:FA:7F:FE:C3
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0f:ef:12:9d:b5:8b:d4:32:c8:01:cb:d6:ef:39:5b:e4:31:
8b:6c:92:53:55:9f:88:cc:ba:ad:95:d1:3e:54:8f:18:5e:ea:
3c:04:99:00:11:7c:c4:e1:e6:0e:55:31:67:2f:cc:83:3e:39:
ea:40:13:14:de:22:a7:7d:b8:dc:1d:3e:fa:7c:fb:69:3c:1b:
2c:1f:b0:11:2d:7e:be:a1:0e:f2:9d:d8:cb:1a:4a:28:70:e1:
ee:dd:22:7e:6e:7f:8b:5e:5e:d4:b0:4a:eb:87:f4:fd:21:99:
be:e4:26:8b:25:a4:8a:e8:0b:30:56:e7:6e:e9:4d:96:d9:8d:
4a:ff:8b:c3:71:55:14:08:17:55:8e:1a:f7:00:e7:3f:8d:f0:
72:82:fc:3b:82:c2:63:5d:05:a8:ca:02:00:82:d5:7b:c8:07:
f8:06:0c:9d:e7:97:96:d9:37:b4:b7:fd:eb:bd:91:88:0b:06:
c8:14:59:e7:70:5a:6f:83:52:50:b8:c3:8b:63:cd:6e:69:bf:
6a:87:77:61:13:61:9b:89:a2:97:f1:24:a1:95:c5:fd:9b:2e:
9a:a5:ff:fd:72:9a:17:26:06:13:ec:fe:92:92:5b:df:9f:ee:
53:78:43:38:cd:4c:e3:49:42:ea:b9:45:7f:bb:a0:73:8b:f9:
39:c1:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:54:15 2026 by rpki-client