Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: A3PsVT3rcHHkAoHfWF2ABHxj61RfmL42nNKsgIMFvwo=
Subject key identifier: 57:E9:DF:A1:91:BC:7F:00:0A:C5:B9:21:1D:9C:88:96:5F:C0:D3:3C
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 01A0D49408621278DCD66417C09AB9F1CC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 18:01:06 +0000
Manifest this update: Thu 24 Sep 2026 18:01:06 +0000
Manifest next update: Fri 25 Sep 2026 18:01:06 +0000
Files and hashes: 1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: NBT+kVm18a1mhjAGfHBTRzRflI3tYL9Cz1SG1Xo9LrY=)
3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:08:62:12:78:dc:d6:64:17:c0:9a:b9:f1:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Sep 24 18:01:06 2026 GMT
Not After : Sep 25 18:01:06 2026 GMT
Subject: CN=57e9dfa191bc7f000ac5b9211d9c88965fc0d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:c9:5e:12:af:27:6f:0e:23:38:89:e5:20:
1b:5a:92:a2:c7:36:16:5e:19:f7:96:7a:07:94:cf:
e1:60:f1:98:c4:41:56:cc:a0:8c:f1:09:88:21:88:
11:c0:4f:9f:5a:48:33:d7:40:31:00:ed:02:bf:7b:
28:24:95:2a:83:02:e5:28:23:f7:f1:c3:39:74:38:
69:e7:ed:0c:a7:d9:d6:39:c8:52:af:56:be:c6:cc:
90:c5:6a:1d:eb:5c:f7:ec:8d:77:fc:d2:7a:72:eb:
47:1a:07:06:e2:f2:26:1b:15:d6:7c:5b:85:b0:1b:
57:06:68:b5:48:8b:4b:b5:d9:ee:64:e6:6a:38:c6:
83:1b:b8:88:af:f0:88:e1:e7:9b:49:ad:4e:0d:e8:
88:fa:68:72:a4:84:7e:bd:58:33:b4:1b:10:38:7c:
8c:ac:ef:93:d7:02:c6:3e:9b:0b:56:a7:c1:32:2e:
18:c0:ed:e6:90:24:9e:41:af:3d:02:16:c7:c3:a0:
2f:98:27:95:63:8d:5b:60:da:cf:a2:16:34:3b:4b:
44:bc:98:86:a2:cd:86:1c:3d:35:7d:99:a9:89:ce:
37:43:ca:26:a1:60:51:d5:5b:9d:6a:97:12:1e:15:
9b:9d:ef:8f:5b:04:12:d8:11:a9:e9:43:66:39:81:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:DF:A1:91:BC:7F:00:0A:C5:B9:21:1D:9C:88:96:5F:C0:D3:3C
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:f4:d6:60:a6:29:6a:0b:7e:e3:3a:42:17:f7:db:e2:d5:
43:c7:38:8e:db:a6:80:2a:5b:d8:5e:7e:4b:0b:a5:ff:e4:ac:
c5:e0:d8:97:87:5b:2e:62:a8:5b:8a:f7:15:70:46:78:1e:c7:
62:b5:cc:73:77:ab:a1:91:bf:7b:d6:d8:a9:9f:9e:98:04:70:
d1:4b:57:c2:a7:f3:47:49:f0:b3:79:03:a6:e1:90:1e:bb:bf:
38:6b:db:a8:e9:f6:32:d1:10:3b:41:24:4a:4c:43:d6:ba:ed:
b9:3b:48:47:44:ab:5c:c4:f3:e6:cb:a8:48:02:5f:a7:3b:3a:
81:73:08:14:62:80:c3:9e:b4:20:c0:aa:9d:32:3a:d4:91:8f:
e8:93:0d:9c:6a:ac:fc:2e:e3:78:b3:b6:d5:fd:44:c7:9d:29:
60:f9:c1:ba:8c:0f:ab:e2:d0:43:45:8f:39:cc:ba:ad:b6:c9:
7a:c0:ab:40:f6:8e:d7:be:c9:bd:b2:3f:cf:2e:bf:ea:2f:42:
3c:68:11:ec:a4:80:49:27:50:79:dc:99:49:f1:dc:b5:df:9b:
3e:9a:ea:ec:01:f3:d1:83:f3:cf:b6:dc:7c:eb:bc:b8:d8:20:
4b:cc:ba:48:fb:72:9f:4a:d0:2f:76:3b:3c:83:cb:5e:fd:30:
26:56:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:56:53 2026 by rpki-client