Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: weeb/KBq26cA+MP7I1tOmG8vklR+FpVizOG6iwgHocw=
Subject key identifier: 28:6A:A7:21:84:9E:02:53:BA:F3:D0:5D:90:F8:5D:FB:67:54:1A:4D
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 01A0D6827529D5E432FC0A86F4A83601526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1903
Signing time: Fri 25 Sep 2026 03:01:08 +0000
Manifest this update: Fri 25 Sep 2026 03:01:08 +0000
Manifest next update: Sat 26 Sep 2026 03:01:08 +0000
Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: cxQ6538+HQSjMkUJUm/Oko8tO3BVp+ZTUPIp9vKevtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:75:29:d5:e4:32:fc:0a:86:f4:a8:36:01:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Sep 25 03:01:08 2026 GMT
Not After : Sep 26 03:01:08 2026 GMT
Subject: CN=286aa721849e0253baf3d05d90f85dfb67541a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:e6:fd:e5:15:a5:57:0f:38:87:eb:89:ff:
63:a0:0d:ad:a1:2e:4a:73:37:c4:55:31:24:31:80:
6e:fc:d8:65:26:23:e8:0b:fc:19:5a:41:96:a7:c8:
f5:a6:88:21:81:97:62:cf:9c:e9:9d:15:5e:9e:fb:
a5:db:8d:db:39:05:6e:ad:75:49:93:17:c3:37:dc:
ca:44:49:07:13:84:30:b4:87:72:19:10:d6:f6:df:
8e:28:df:6f:a2:90:a8:d5:82:fd:e7:ba:4e:5b:1b:
90:31:59:e1:cc:58:33:11:19:c9:b1:43:9c:b2:2b:
0b:9f:34:62:76:c3:ad:7b:fa:d9:2e:1d:c6:21:ba:
b9:b3:07:c3:3b:07:2a:cb:65:f0:ed:48:31:f1:c5:
c3:6e:c9:d4:41:50:1d:a8:5e:29:1a:79:6e:52:bf:
d4:e4:72:7d:80:39:20:10:a3:ee:a1:e1:8b:af:c4:
15:cc:cc:ce:74:c9:6c:f3:62:a8:56:74:ac:56:84:
fd:66:77:42:5f:3c:14:08:51:0d:91:e1:22:f8:c5:
ae:47:dc:43:56:91:63:44:48:59:37:ad:e9:2d:c5:
2f:e4:8f:34:9b:cc:84:c0:39:ce:d8:47:f0:1c:bb:
cf:14:29:aa:64:95:95:a6:a7:a3:a1:42:cc:dd:b5:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:A7:21:84:9E:02:53:BA:F3:D0:5D:90:F8:5D:FB:67:54:1A:4D
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:23:d3:fb:34:1c:29:ee:a0:62:74:af:69:05:cf:7e:c7:e2:
b1:1b:35:8d:1a:51:37:56:d5:fa:ac:e0:1a:8e:ec:fc:26:aa:
3c:db:86:99:33:c2:f0:2a:21:9b:25:4b:d5:44:2e:9f:10:43:
7e:07:b6:6f:3a:b1:71:42:6f:7d:29:e6:3f:88:c9:86:ff:ae:
d2:7b:20:db:f8:ea:f7:ad:17:55:86:6c:24:6d:44:6b:15:59:
c9:ee:36:b6:14:19:0f:3f:a2:4d:11:5f:02:6f:b3:7d:76:eb:
8b:51:8e:09:78:eb:d5:a6:a3:0c:29:e5:bd:31:25:73:4d:49:
58:5b:c8:d4:ce:69:7d:03:0e:d0:ad:8b:94:99:26:8c:0b:e9:
55:65:d8:32:08:bd:bb:e6:b0:ff:77:7e:15:a7:0b:91:95:41:
39:f7:5a:0f:71:b8:9f:91:68:ce:21:a0:04:1b:29:e7:e4:d2:
a7:d4:48:6d:1c:2b:4e:31:7e:ea:c9:80:48:67:c5:76:8d:84:
70:74:b9:2e:78:ea:83:c1:91:ad:7d:2d:7c:e2:65:24:5f:f2:
5e:a5:a6:e9:ff:8d:b1:bf:9e:b7:ea:62:c9:4c:f9:d2:5e:82:
f6:53:98:a1:7e:67:58:42:74:7d:91:52:09:f7:72:d6:ac:d5:
7d:a9:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:11 2026 by rpki-client