Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: ZrkwTMzR1pzvnyl8+cvOOrRUGkmxXFQhISQDzAdIRUI=
Subject key identifier: D9:D6:6F:3F:9F:2D:08:36:A8:76:F3:8B:FF:7F:FF:5B:B4:B7:87:34
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 01A0DCF24E4A8897B2165B856CC3EC7E0583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 1696
Signing time: Sat 26 Sep 2026 09:01:02 +0000
Manifest this update: Sat 26 Sep 2026 09:01:02 +0000
Manifest next update: Sun 27 Sep 2026 09:01:02 +0000
Files and hashes: 1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: i38S0FMG3XP2SdPRwFIwyLcg+52RqXCekDThzzrU5kI=)
5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:4e:4a:88:97:b2:16:5b:85:6c:c3:ec:7e:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Sep 26 09:01:02 2026 GMT
Not After : Sep 27 09:01:02 2026 GMT
Subject: CN=d9d66f3f9f2d0836a876f38bff7fff5bb4b78734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:ae:41:e6:c5:2f:ab:9a:c2:a2:25:eb:db:
e4:42:26:bb:e5:0f:6f:5c:dc:83:12:5f:7e:6f:4d:
65:a3:5d:7b:94:83:52:ce:52:94:61:a5:32:57:15:
19:11:1d:7c:33:6e:fc:d7:9b:2e:48:23:97:c3:3c:
54:3f:bd:bc:60:88:08:9d:80:3e:29:cc:4d:b1:ee:
13:3a:39:1b:4e:9b:3c:40:b9:d8:a9:19:51:7c:48:
4c:d7:2d:ff:45:a0:0e:c1:5c:e2:98:70:38:ec:09:
0d:ed:5b:42:8e:fb:7f:c7:78:a5:85:c8:3a:5b:83:
59:49:b6:ff:cf:81:26:ba:27:56:e9:78:76:a8:58:
df:9f:c8:bd:b5:20:9b:b9:f4:54:2c:32:ac:59:75:
f6:2f:ac:43:26:a0:d4:d4:32:be:72:f9:31:eb:b4:
3d:63:3d:84:af:cb:bc:72:1c:f3:e0:09:bc:b7:04:
14:fe:f6:dc:b7:4e:82:de:1a:dc:74:69:c9:a7:0c:
e7:1d:3d:23:fc:c4:67:2e:5f:94:4f:bc:fc:f3:2e:
e9:c2:32:f3:f2:08:4e:0e:d6:59:2c:26:f6:f6:41:
9f:96:c6:61:3e:a5:9d:08:35:21:12:bc:09:86:21:
e3:7a:b5:03:d1:f3:20:27:b9:12:18:45:04:d4:86:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:6F:3F:9F:2D:08:36:A8:76:F3:8B:FF:7F:FF:5B:B4:B7:87:34
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:13:73:f6:c5:91:4b:7a:e6:3e:d1:55:d1:46:b8:f7:63:ac:
8c:76:6a:34:fd:ee:bc:7e:24:92:bd:36:11:b3:22:c9:cc:81:
e4:c9:b8:72:e6:85:e5:61:7b:41:9a:85:b8:6a:6c:9e:ee:7a:
bb:ad:4a:bf:42:4b:64:7c:bc:e4:13:e5:ed:23:b6:f0:44:7d:
59:64:c2:38:e0:6d:0a:a0:e0:68:aa:90:8e:e9:53:bb:18:6f:
4d:a5:7d:e6:5e:93:e2:eb:6f:8f:8b:4b:ab:4c:f6:1d:af:01:
ae:d4:b1:15:11:a1:90:d9:ff:3a:49:79:fa:0b:a7:03:33:6f:
d9:6d:2e:a7:77:53:7e:39:b8:24:f4:43:6f:04:6c:84:47:ba:
31:b4:38:6f:05:92:18:73:ff:70:e6:ea:0e:95:16:64:2e:79:
33:61:04:04:54:06:b6:1c:e9:17:17:10:ec:93:5b:35:21:b3:
27:92:30:09:cb:0c:a2:b1:60:34:c4:9b:9e:bd:d2:fc:ed:a2:
fe:f4:2e:83:aa:78:c5:9d:a5:e1:99:23:2a:7a:24:b0:7a:79:
74:d5:ad:c2:20:5e:25:8b:5d:79:53:7d:60:5d:72:a2:ae:60:
ca:c5:0a:0b:8e:94:55:0e:91:d6:1c:db:e7:9d:b1:fd:6e:e4:
c9:09:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:38 2026 by rpki-client