Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
File: hB_ManHx4Ri9ybHAa8yAEb09ML0.mft (raw, json)
Hash identifier: z1x9rb2RS/OphkTtggvn2OIF+VZSTTHTBfcIQsOZlek=
Subject key identifier: 89:86:93:69:38:F5:CD:3C:D9:F9:6F:2D:E0:A6:BB:24:07:6F:D7:71
Authority key identifier: 84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
Certificate issuer: /CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Certificate serial: 01A0DBA97D7D11FD095BE546A9495C2B81B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:52 +0000
Manifest this update: Sat 26 Sep 2026 03:01:52 +0000
Manifest next update: Sun 27 Sep 2026 03:01:52 +0000
Files and hashes: 1: 7wuJBsTlCvMrXFT2hL5huDS2k5I.roa (hash: ORzrQnvsufAfber3BkyjXEBdXtY1ExPpP1tmxd/MKAI=)
2: hB_ManHx4Ri9ybHAa8yAEb09ML0.crl (hash: MW8O9uDCtICwQwgX5ClOOh8/c9QMQlyBn77BmibiIR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:7d:7d:11:fd:09:5b:e5:46:a9:49:5c:2b:81:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Validity
Not Before: Sep 26 03:01:52 2026 GMT
Not After : Sep 27 03:01:52 2026 GMT
Subject: CN=8986936938f5cd3cd9f96f2de0a6bb24076fd771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:21:05:66:2f:f4:22:6a:de:a5:38:15:94:
9f:b6:26:cf:9e:97:95:6d:d6:01:c9:82:33:6d:9f:
53:05:43:17:f1:a5:c8:5b:12:8b:cd:8b:78:87:33:
88:5e:2b:7c:fd:fd:f8:f1:c1:2a:cd:77:f1:3b:f0:
57:5f:a4:6b:75:81:9a:92:f5:98:46:52:e2:bd:2c:
92:40:ca:5d:8e:5b:5d:c7:ee:52:e1:b0:48:b9:1d:
36:b9:fe:d9:58:24:65:ff:d9:44:cd:40:6f:ae:c5:
31:3d:b8:ac:b7:d2:7c:1d:57:e8:a2:da:5c:4b:df:
8c:f9:06:0c:f6:23:ee:da:75:fa:94:54:03:e3:19:
38:3a:6d:eb:3e:7c:b4:fe:5b:f1:e6:72:f4:62:5a:
2c:2e:2c:37:d3:59:0f:22:d9:9a:52:1b:c4:81:72:
71:93:ae:07:d7:5a:12:68:ed:ac:c2:39:a5:45:3b:
aa:c5:1e:56:13:df:ec:51:8c:5e:c2:2f:16:88:5f:
bd:ed:03:65:a4:f6:5b:8e:56:d1:fb:df:66:e0:5d:
ed:61:74:38:11:0d:df:89:6f:ce:3f:c7:55:45:ee:
c6:be:ea:36:b2:1b:07:61:f9:1a:65:0a:3f:5b:ba:
e7:17:7b:33:a7:f4:b5:2c:36:33:36:02:c2:3c:e4:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:93:69:38:F5:CD:3C:D9:F9:6F:2D:E0:A6:BB:24:07:6F:D7:71
X509v3 Authority Key Identifier:
keyid:84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:45:2b:f6:e3:01:9a:f7:8f:8a:ad:0e:c9:7f:d7:88:b7:e0:
81:4a:e1:6c:ac:11:cd:d7:3a:a4:da:bc:4b:93:ef:7b:38:4f:
ab:d2:58:84:c9:4f:47:e7:e3:5f:bc:7a:48:e7:c5:e2:b5:c5:
e9:f8:73:84:a1:1d:76:2c:94:9f:dc:37:be:40:67:74:f7:3e:
fe:75:72:26:cc:97:6a:f6:71:d4:6c:70:c1:0e:0d:cc:26:1b:
75:df:17:d3:e3:00:af:67:6a:ad:de:70:8e:ac:56:e5:1e:70:
31:97:09:00:6a:5a:d1:db:01:49:4d:69:46:f9:a2:00:66:77:
a8:44:5c:e2:f9:69:5a:a1:50:ae:14:b8:9e:93:d2:75:f1:16:
5d:f1:c6:84:05:d6:7f:3d:d7:b5:0a:ab:f2:4f:2d:c2:18:2c:
aa:04:30:0e:b0:c9:87:3a:50:53:a0:3c:f1:20:0c:8e:6a:e4:
8d:ec:13:50:d0:e4:b0:76:ec:a0:37:a9:8d:32:82:7b:25:1c:
98:05:50:d3:f4:6d:ac:89:75:da:3b:00:44:04:fa:31:cc:d8:
91:09:b9:de:74:16:d8:d0:60:1b:6a:03:10:fa:c2:8e:03:7b:
9a:0c:d2:f0:15:ea:e4:2e:04:2e:cb:ce:7c:90:9b:65:75:cd:
18:b4:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:04 2026 by rpki-client