Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: aIviUfj9ko1fQo0bKdAurLLT8dK+zb2UHAYCG/iT6iI=
Subject key identifier: F9:76:BD:00:44:1E:B6:45:C2:DB:FC:2F:1B:9E:72:5A:31:40:6F:FA
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 01A0D683089A6FD3AF111514A043491BFE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 077E
Signing time: Fri 25 Sep 2026 03:01:46 +0000
Manifest this update: Fri 25 Sep 2026 03:01:46 +0000
Manifest next update: Sat 26 Sep 2026 03:01:46 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: eMN8CCV+aKiKte6+kU22fl0fm17nqWa/hSc/fOihsWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:83:08:9a:6f:d3:af:11:15:14:a0:43:49:1b:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Sep 25 03:01:46 2026 GMT
Not After : Sep 26 03:01:46 2026 GMT
Subject: CN=f976bd00441eb645c2dbfc2f1b9e725a31406ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:dc:25:a8:67:e5:78:54:52:c9:77:0c:0d:
26:ad:ba:52:98:65:ed:16:a3:47:5e:63:ec:bf:23:
4f:94:0f:19:15:18:ea:44:66:55:b0:21:25:62:25:
ea:f9:d8:06:0a:db:da:20:b9:16:6f:5a:e8:d0:3c:
14:da:fe:ca:5a:e1:1b:91:62:63:1e:f8:32:77:64:
c6:e6:9d:7c:58:9c:f5:8a:9c:45:8d:a2:ec:ad:19:
07:62:8d:87:ad:17:c3:33:5b:c6:84:5f:3d:b6:e9:
4c:56:6c:e1:63:04:e5:e5:91:2a:6e:96:35:d5:d9:
22:61:f0:3e:fb:47:f1:a3:44:35:a7:cc:3e:23:b4:
c2:fa:24:74:28:8f:eb:a5:92:5d:12:97:b8:e3:68:
ac:b2:27:29:d7:7f:a4:9f:26:6d:7f:31:19:37:98:
3e:62:c2:d7:bd:16:d1:9e:1a:46:fc:de:7c:0a:d3:
20:89:92:a7:8a:52:ee:61:9c:9f:73:b4:07:6e:ff:
b7:e1:d0:ec:34:de:c6:08:9f:de:24:bf:e2:18:3f:
8a:a9:1e:62:76:ea:ec:3d:ea:c0:98:6e:46:27:13:
a1:31:5c:f2:82:0d:32:7c:c3:6a:f2:3f:be:1b:b1:
b9:bd:85:e5:b2:6a:e2:7c:73:31:17:43:29:45:53:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:BD:00:44:1E:B6:45:C2:DB:FC:2F:1B:9E:72:5A:31:40:6F:FA
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:60:d1:a4:f6:c8:fa:06:28:8a:e1:56:a9:e5:d8:5b:c4:7e:
4e:4d:54:e2:ed:ea:d4:ca:ec:43:54:ad:e4:8b:04:54:71:2c:
31:f0:b0:46:05:12:e4:5b:eb:93:fd:d8:55:d6:05:75:cd:e3:
21:c9:65:f1:59:2e:85:1c:21:cb:cb:a4:e9:20:2d:45:bc:04:
04:38:0d:eb:2c:1c:5f:a3:f1:4e:73:a2:eb:7a:27:f4:23:1c:
2f:e4:f1:f8:8b:5b:b4:b1:c2:b0:b7:6d:fb:3c:7c:5b:92:e6:
79:df:53:b8:29:ae:80:0a:bd:4f:cf:8f:30:a9:04:07:ea:1f:
56:c3:59:cd:33:f6:4d:82:65:20:84:ae:8c:1c:4e:e8:04:2e:
80:3c:e3:e2:88:d9:0a:27:06:d8:42:bc:4e:fa:c9:05:19:59:
50:03:24:32:9a:de:1d:f3:84:fc:60:2c:85:00:27:1f:5e:2f:
c0:e9:76:64:ef:63:2b:80:3a:c6:52:26:59:91:de:d8:f7:da:
ae:c3:6a:fb:8f:c1:ff:67:68:32:60:23:d9:3d:e9:ce:ec:a7:
b4:02:59:f8:d2:de:38:93:6b:72:f4:50:9e:4b:eb:1f:be:76:
36:8b:09:93:43:be:51:e1:7c:bc:2c:e7:c6:5b:c4:36:91:2b:
7e:43:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:19:42 2026 by rpki-client