Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: NxOBmKSZMep4/Q/XuJLrp9liaUxFiSAJo8ixDAq7vSU=
Subject key identifier: F2:FB:46:AE:1C:00:1E:47:6E:80:4B:F8:48:30:57:6D:02:2C:78:22
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 01A0D4945972177F65FC47C940630EEA74CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 1A43
Signing time: Thu 24 Sep 2026 18:01:26 +0000
Manifest this update: Thu 24 Sep 2026 18:01:26 +0000
Manifest next update: Fri 25 Sep 2026 18:01:26 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: xohjcTMlCAhvt9uzPwaExfwxcR1JFKi+aFWvfSO2ORU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:59:72:17:7f:65:fc:47:c9:40:63:0e:ea:74:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Sep 24 18:01:26 2026 GMT
Not After : Sep 25 18:01:26 2026 GMT
Subject: CN=f2fb46ae1c001e476e804bf84830576d022c7822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:1c:99:23:4f:5b:5a:8f:2e:6d:96:04:21:
a7:c3:44:7f:78:b2:2b:62:71:9f:0b:52:c1:2d:ba:
d0:61:1f:c9:6a:15:22:15:3f:7a:4f:47:99:45:5f:
89:47:d9:ae:7b:1d:9d:0e:63:5d:c2:c0:92:15:f4:
46:fb:f0:6b:39:98:e0:62:1d:c9:9e:19:db:3f:2a:
b6:ba:6f:3b:8f:7a:5a:c5:16:3e:8f:9f:cb:8f:ed:
5f:5b:74:0d:b8:d6:71:cd:d1:ec:1f:31:05:fd:b3:
0e:50:da:d3:f4:a2:92:3e:7e:b5:1a:8c:6f:ae:6e:
0b:31:db:ee:f9:61:60:05:4e:c2:0e:68:c3:1f:a6:
6a:05:81:ca:02:be:92:98:4a:c2:d0:62:10:6e:2d:
14:9b:04:0e:4a:78:b4:a3:a9:8d:ec:dd:50:4d:94:
77:33:4f:27:d6:a1:e9:f7:40:94:48:99:c9:70:c6:
fa:e4:7d:32:59:7c:0f:bf:70:45:03:b9:2c:fa:b4:
fa:66:d1:1b:58:f9:d9:5e:32:fb:be:2b:c3:0a:29:
58:4c:08:95:5f:89:24:e7:ab:ae:bf:49:eb:cd:cd:
89:96:bd:94:d9:41:b5:58:2c:ae:24:36:01:30:15:
36:66:4e:b4:ce:7c:a9:fc:74:c3:15:3b:83:7a:75:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:46:AE:1C:00:1E:47:6E:80:4B:F8:48:30:57:6D:02:2C:78:22
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ba:76:f4:90:a8:0e:58:81:42:ee:9f:8e:da:6c:31:fe:cf:
47:dd:5d:10:49:50:26:de:a9:ce:d2:11:28:73:2b:9e:82:b0:
e4:70:92:6b:2f:11:22:e4:49:95:f9:e6:89:0c:c5:4c:b1:b2:
98:bf:d7:ff:3b:95:5a:ec:7e:1a:cc:09:42:20:3b:49:90:f5:
b0:2a:79:07:52:e2:9e:11:96:87:f6:17:c4:61:c8:d1:8e:08:
0d:c8:ab:4b:00:ba:8b:a8:99:5d:9f:cf:d7:cb:c0:bf:73:67:
49:ed:0c:f0:a6:8d:b0:bc:20:90:bf:39:a4:ae:f0:77:7e:b0:
8f:a0:e8:04:e9:65:5d:4a:8c:3f:6a:b9:e5:cb:70:a2:3d:48:
44:9e:5f:e3:82:2f:d5:53:d7:f2:ad:01:76:59:87:c9:65:ce:
a6:ee:85:0b:13:25:5c:b2:3f:95:1f:45:ad:7f:0a:22:4a:33:
8b:81:90:5c:5d:e1:5a:f6:a7:1b:ba:de:0b:d9:6a:95:2c:c6:
06:6d:6f:31:27:5e:0d:a1:ec:8b:c8:d7:0f:b1:81:40:36:28:
40:d8:84:23:d7:c7:8d:88:e4:a7:0d:de:a1:62:63:52:dc:63:
d6:99:89:ad:67:12:db:3c:31:2a:cc:53:99:35:56:14:86:b3:
68:fd:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:20:15 2026 by rpki-client