Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: JMXkCu2Kj+qayZmctizJmAORBCSsc8hbOfvgzn96G98=
Subject key identifier: 68:0A:3C:C5:C4:B9:C6:12:EB:5E:7D:48:6B:9B:A8:E3:30:E7:94:FA
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 01A1DD26A4058328A57726002B0EDCCF1D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0806
Signing time: Sun 15 Nov 2026 03:00:59 +0000
Manifest this update: Sun 15 Nov 2026 03:00:59 +0000
Manifest next update: Mon 16 Nov 2026 03:00:59 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: QB61I6eTs7yiu9uIHGkLHCGsUg6zcLphGb2LvSxuTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:a4:05:83:28:a5:77:26:00:2b:0e:dc:cf:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Nov 15 03:00:59 2026 GMT
Not After : Nov 16 03:00:59 2026 GMT
Subject: CN=680a3cc5c4b9c612eb5e7d486b9ba8e330e794fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:b9:24:a5:e4:15:a5:7e:82:40:ba:8a:0a:
28:52:11:2d:ff:a2:54:ac:b7:35:82:18:e2:db:9a:
6d:2a:51:3b:28:d5:d8:6b:85:72:95:a2:cc:3b:3f:
cf:38:5d:ed:ec:f5:df:27:eb:1f:5d:e1:ad:98:1d:
b8:05:a3:d6:db:e8:21:85:ef:b3:19:80:7a:77:c7:
d1:48:76:cb:85:5d:9a:54:dc:2f:52:19:ff:dd:75:
be:fe:ae:9d:b6:cf:5d:a4:96:7e:9d:95:1e:49:22:
cf:b9:f1:de:91:e5:3b:2e:47:4c:f9:c2:51:f5:fa:
7c:bc:55:f9:82:7a:46:8d:3c:41:93:c2:93:14:74:
ed:29:ac:32:a7:0a:ad:39:62:02:5e:58:3c:30:40:
07:97:da:21:0f:66:c1:e5:c8:d5:09:c3:c0:79:73:
44:69:89:22:7f:c4:13:a4:4d:da:7a:fb:bf:54:2d:
1f:be:1c:b0:d6:68:05:44:08:37:6a:f8:c2:6e:0f:
45:be:05:f4:c3:62:2b:84:02:78:05:08:c5:43:af:
fd:ac:f6:48:e4:d8:8e:76:ee:5f:51:3c:fa:96:7d:
0a:16:a8:73:ee:2b:84:e7:f1:7c:e5:b6:bf:0d:4c:
e8:7e:c0:a9:79:f3:0e:b9:29:8e:9e:37:0f:89:60:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:3C:C5:C4:B9:C6:12:EB:5E:7D:48:6B:9B:A8:E3:30:E7:94:FA
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:44:57:5b:73:40:5e:d5:09:a5:5d:dc:55:ab:28:c5:23:63:
ff:0b:9f:81:98:b1:4d:85:0f:7a:1f:9a:64:f2:73:b5:4a:3c:
f2:b1:ca:dd:57:72:75:07:de:82:2d:16:fd:1d:a8:d9:f3:fd:
b2:2a:7b:5c:c9:3a:ad:c6:62:79:40:ab:73:5f:77:7f:45:8d:
14:80:e5:c6:0f:e5:3d:04:8f:8c:10:43:d5:86:da:0b:02:6b:
40:eb:5c:e6:4c:db:23:cd:38:56:0f:2a:ba:dc:d3:5d:7c:f9:
94:45:a4:e8:8a:c7:8d:c3:a8:e0:d0:32:db:4b:99:9d:d0:a8:
fe:54:ea:9f:2b:1b:18:5b:d5:c9:74:79:f4:36:b4:c6:ec:24:
2e:d2:14:16:fc:42:7d:c4:13:7e:d5:6b:73:d0:bb:8e:0b:23:
93:26:47:c7:8f:52:ed:b4:d6:8d:95:46:96:1e:91:dd:b5:e0:
29:db:e7:32:10:35:ac:53:bd:e2:ad:40:d8:e3:01:96:2d:26:
f0:65:c7:8d:ea:87:86:46:d7:a5:9c:be:c0:92:7f:8f:18:3f:
5d:a7:8e:15:cb:1c:6b:54:bf:08:57:85:13:16:fe:13:55:76:
42:f8:54:78:06:88:57:af:96:3a:c3:fd:31:79:e9:e9:2c:3a:
c5:a2:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:24:06 2026 by rpki-client