Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: HEU/2LDLTMjEEisR7i07DHOw/OB6MEvCAJHI0XAPZy4=
Subject key identifier: FB:16:16:64:75:2F:89:69:7F:F5:CC:27:34:8D:50:A1:2E:E7:F8:F9
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 01A0D872A5883FF7634EAE543D29A45D1FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 08F7
Signing time: Fri 25 Sep 2026 12:03:07 +0000
Manifest this update: Fri 25 Sep 2026 12:03:07 +0000
Manifest next update: Sat 26 Sep 2026 12:03:07 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: pnCQJ68EMwgJ9Nif5YNfrtpwKF4XSh4tyv0Opqq0pko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:a5:88:3f:f7:63:4e:ae:54:3d:29:a4:5d:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Sep 25 12:03:07 2026 GMT
Not After : Sep 26 12:03:07 2026 GMT
Subject: CN=fb161664752f89697ff5cc27348d50a12ee7f8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:f5:f1:54:7b:9d:2b:f2:95:e8:a8:ba:76:
b3:62:16:a7:a8:98:e3:09:a1:60:8e:0f:93:87:ac:
ee:d6:f2:6c:b3:c0:9e:b1:c5:f8:06:2d:8a:44:c4:
e4:f8:b5:24:c4:09:bd:73:53:0c:3d:7a:3b:6b:d8:
b6:a8:c9:a3:67:31:a0:1b:42:16:ca:03:83:a5:39:
fa:01:ae:96:be:f6:2e:c7:05:82:1f:94:b0:a0:5a:
09:52:91:d2:f4:0d:dc:fa:87:43:f0:07:37:d7:9b:
01:97:f4:2b:ea:89:22:b5:9a:6e:8c:00:ea:07:63:
36:f0:3f:e6:5f:4d:c1:e1:93:9f:d1:f3:d0:cd:fb:
59:3f:9c:1b:83:5a:45:e6:03:3f:29:24:72:87:57:
ed:92:a9:5b:ff:c5:12:bf:7b:0b:7b:55:65:ab:ae:
34:56:6a:45:59:41:29:a6:dd:b4:37:52:bd:41:cb:
ad:79:12:55:91:78:48:0b:24:55:07:51:35:55:36:
f5:e3:8f:54:de:56:8c:aa:d2:c1:d4:ef:64:cf:76:
c9:4a:f9:4b:bb:69:44:c5:35:c4:20:b0:4b:f9:fe:
80:4f:a8:93:ff:d5:cf:5d:e6:21:72:47:b8:13:14:
d9:27:86:6f:b0:6f:be:7c:35:b9:2d:e5:2a:e1:33:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:16:16:64:75:2F:89:69:7F:F5:CC:27:34:8D:50:A1:2E:E7:F8:F9
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:24:27:91:16:86:1b:77:d0:c4:0d:a7:d4:eb:b7:59:36:e4:
ac:e3:20:1d:44:81:f0:9b:bc:aa:4b:1b:29:e5:e4:18:f2:4b:
03:f5:60:62:aa:e5:20:fc:75:5d:e5:2b:18:36:b4:c1:27:19:
7b:dd:32:c4:24:64:c5:a6:05:39:74:bf:3c:7f:88:35:54:8e:
97:c4:82:95:25:85:16:94:86:53:be:d5:0d:fc:c0:d3:dd:55:
3a:66:40:b0:ad:6f:e0:49:87:1a:33:05:f6:ba:f5:5c:70:1a:
de:9b:7d:34:35:4f:8d:9d:14:f8:9d:f3:58:8d:f2:08:27:a9:
7c:02:8e:e6:4d:9b:c9:cb:7e:9f:43:b2:9d:0a:af:04:20:32:
c6:47:58:96:08:2e:21:1b:5f:43:5f:65:47:fb:03:21:47:c6:
41:8f:4b:55:a3:19:aa:ea:af:03:71:d1:bc:15:84:d8:8d:92:
e8:8e:62:e6:18:d6:3d:30:e8:74:65:44:84:24:60:da:43:ab:
bf:2e:15:0d:44:03:28:2f:de:d2:41:56:84:4d:a9:33:bd:3c:
a1:bc:9e:2b:2b:38:f4:c2:e5:83:dd:31:8c:9a:b6:01:9e:3c:
7b:b9:50:10:8f:b5:0b:bd:5f:12:34:52:75:10:b5:d8:56:50:
fc:e5:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:21:02 2026 by rpki-client