Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: 3Jk/9TgOOp9j72B6C2D/42nzM7vFssfdkL784WzZlUY=
Subject key identifier: 11:94:3D:69:58:07:0F:17:D2:30:01:61:B9:5F:AA:10:6C:31:2A:CF
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 01A0D6B9B995FBF9E949E0D6EA7D40E0B43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 04:01:30 +0000
Manifest this update: Fri 25 Sep 2026 04:01:30 +0000
Manifest next update: Sat 26 Sep 2026 04:01:30 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: l95NvL7NI2M8j3obmcpINPRW6KPV91RRKB0B/NVEU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:b9:95:fb:f9:e9:49:e0:d6:ea:7d:40:e0:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Sep 25 04:01:30 2026 GMT
Not After : Sep 26 04:01:30 2026 GMT
Subject: CN=11943d6958070f17d2300161b95faa106c312acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:0a:15:06:53:b4:c6:a8:5a:14:dc:91:99:
1c:6c:31:a3:b8:fe:f0:7d:a9:f7:c4:ca:2d:97:ae:
3e:6a:84:12:78:d5:0e:d3:94:68:50:f3:e8:ca:ad:
fc:6f:14:9e:64:60:c4:7f:dd:aa:28:5a:d1:ac:db:
6b:42:50:46:6e:2d:23:52:c8:ce:3f:b4:ef:de:f0:
77:46:cd:7f:7a:7b:ee:77:67:ac:c4:f3:bc:22:e1:
07:f6:2e:d0:9e:75:1d:7e:e2:0c:ba:c0:73:5a:c1:
65:47:1b:23:b6:8e:22:38:6b:6e:76:70:c7:fe:8e:
b4:de:2c:9e:eb:97:8f:94:57:ef:3d:c3:86:4c:00:
50:3b:72:cd:70:49:ca:67:19:56:d3:7a:63:7b:c5:
a0:43:de:6e:84:0b:c9:5b:44:f1:71:ac:63:58:40:
99:34:65:ba:bb:d0:e0:d8:9c:e3:c9:8b:08:d5:14:
8e:4b:77:42:d2:3f:fe:03:1b:72:06:ec:96:e1:45:
a2:75:15:55:e7:d4:de:70:4d:51:11:d0:72:0a:d4:
be:13:aa:5e:ae:01:62:7c:52:ca:2d:68:a7:92:f7:
92:14:22:d3:73:bb:ea:a9:65:af:68:4e:69:70:90:
68:4b:51:03:42:49:87:29:64:12:89:dd:a7:44:72:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:3D:69:58:07:0F:17:D2:30:01:61:B9:5F:AA:10:6C:31:2A:CF
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e1:09:3a:26:ed:4e:72:3f:6b:56:b7:2e:f8:a7:d7:6b:83:
a1:8b:94:ee:38:39:0c:79:63:4a:82:68:36:6b:39:0d:c5:88:
0d:80:d2:8d:ff:bd:15:53:a8:33:5d:88:e6:8a:4f:3a:02:03:
f5:86:8c:56:68:57:33:2a:38:01:49:1c:eb:84:9e:a8:c1:73:
e3:33:c6:06:19:3f:2c:e7:b9:f3:40:4b:1a:cd:8b:e5:76:82:
c3:b3:be:36:26:c1:02:1e:74:86:63:e2:da:44:0c:af:d1:be:
64:f3:38:83:5a:40:ab:22:da:3f:51:fa:aa:64:9c:a7:27:ae:
31:8d:33:b9:94:59:d0:59:c2:59:ad:40:95:5f:7e:0a:c3:54:
c1:3c:9b:8c:11:f7:63:7b:75:9b:4f:b3:80:95:f0:23:7e:f1:
43:08:c3:91:44:48:51:a2:38:24:41:d1:d6:1d:ca:eb:fb:4e:
64:16:aa:ea:1f:40:17:8b:39:27:33:49:58:b8:06:9d:01:57:
0d:22:f9:4a:6c:b7:22:9c:00:39:b3:c8:18:14:f6:49:65:0d:
0b:35:1c:3e:be:0c:1f:36:fd:d8:d6:2b:8c:a2:8a:71:a9:72:
78:93:30:0e:ed:8b:6a:4f:a0:80:e4:0b:26:5a:0a:31:bf:4c:
2c:4c:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:19:23 2026 by rpki-client