Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: M9ArmkDZVGjRtPka/RULOnzNYZegdyGZHNvUCFBkuzc=
Subject key identifier: A9:F9:0C:C1:A6:83:43:58:E1:44:4C:9F:AA:5B:85:56:0D:B6:FD:A1
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 01A1DB38454344859F932D6D2D013FA54F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 1ACB
Signing time: Sat 14 Nov 2026 18:01:00 +0000
Manifest this update: Sat 14 Nov 2026 18:01:00 +0000
Manifest next update: Sun 15 Nov 2026 18:01:00 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: 6jwSrP9NqleLIIzmqMKNmTwRm2e9AUkCgZl6KGJTfIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:45:43:44:85:9f:93:2d:6d:2d:01:3f:a5:4f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Nov 14 18:01:00 2026 GMT
Not After : Nov 15 18:01:00 2026 GMT
Subject: CN=a9f90cc1a6834358e1444c9faa5b85560db6fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:96:c4:03:08:7f:a8:70:d2:b7:27:7a:c2:
90:fa:4d:96:f3:b4:34:24:b2:e7:d6:cc:ef:8e:c2:
9c:70:6f:f8:c4:d1:0e:b3:ce:4c:7e:f2:82:99:6d:
23:5e:96:04:34:07:71:44:c3:c6:92:2d:02:45:fa:
be:4e:66:87:83:67:46:bd:b0:ca:af:5c:16:fd:8d:
bc:69:99:f8:3e:48:e4:8e:e8:98:f3:b7:bb:1a:34:
e0:7e:a8:04:53:90:d4:72:b8:8d:f8:71:64:b9:cb:
0a:69:4b:16:de:e0:39:71:ef:95:13:ca:d5:d4:a4:
d2:82:7e:34:82:38:7f:70:a8:51:d6:ed:cf:d0:c7:
b6:0a:da:ef:f9:8f:14:7f:8b:24:fe:14:ba:71:29:
18:f2:39:10:79:ff:07:dc:8c:5f:0d:e5:cb:05:2d:
76:77:9a:f9:71:d5:a9:c1:23:ac:e9:9e:7d:81:21:
c2:d4:a0:b7:e4:50:67:88:82:ca:0d:b4:1e:69:c6:
12:40:86:fd:0b:9e:71:f4:cc:01:cc:bf:f1:3d:cd:
a1:5b:62:0f:bf:df:06:d3:a4:b8:ee:bb:30:f8:cb:
cf:5f:15:b2:5c:fa:a0:23:ab:5e:6e:c8:fa:66:0a:
e9:67:7b:18:84:85:73:9d:2b:38:ce:8d:bd:c2:89:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:0C:C1:A6:83:43:58:E1:44:4C:9F:AA:5B:85:56:0D:B6:FD:A1
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:20:cb:c7:07:56:95:90:7d:ab:b3:a8:1e:cd:48:f9:75:45:
7b:75:bb:5f:ba:a3:b8:6a:86:bb:25:15:70:1b:56:88:e9:e4:
a4:15:89:51:96:71:be:71:3e:20:91:0a:5d:9d:4e:54:2e:bc:
77:e0:6a:d1:8e:84:f4:26:b7:7a:27:95:43:60:fd:5f:c8:a3:
29:47:da:fc:4d:c6:57:65:4b:50:8d:a9:3d:0b:73:71:a4:5b:
a0:5f:1f:4a:79:56:00:26:25:92:19:2d:2e:49:54:83:c4:ce:
fc:41:fd:85:f3:3f:b5:7b:c5:ab:59:d4:e1:56:62:ff:3c:c1:
fe:db:9c:a0:1a:34:88:6c:39:8b:d5:f0:b5:fa:52:32:c3:ff:
68:c0:9e:6d:2b:8d:c0:64:f7:0e:94:f4:a7:d8:6f:68:fe:3b:
d0:51:d9:b0:9e:f7:43:9e:89:c0:25:38:9e:fa:0b:f1:4c:48:
23:cb:2a:8e:a8:92:90:ae:cf:72:81:47:1b:f3:17:a9:3d:7c:
6b:db:f0:7c:6f:9c:25:80:44:95:7f:90:5f:18:2e:74:fa:1c:
42:24:e3:a9:2c:6f:2a:88:f9:c1:64:2e:58:10:56:e6:54:c8:
50:be:3f:70:4f:d7:97:a7:76:9b:c4:5e:3f:b1:40:00:a4:57:
8d:5b:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:48:06 2026 by rpki-client