Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: t5rbtvHHoEcwQT7xpyzL2m9hrKfPx/TGSwv+F36hwwU=
Subject key identifier: A9:B9:A1:6B:5A:35:8D:78:A7:9F:09:A6:D2:0F:49:B2:08:42:9B:59
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 01A0DD298378545B55F358923DC6D579697B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0A16
Signing time: Sat 26 Sep 2026 10:01:20 +0000
Manifest this update: Sat 26 Sep 2026 10:01:20 +0000
Manifest next update: Sun 27 Sep 2026 10:01:20 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: 5423fNJZ9EdK07+7AJGJ95CLX4EVONxAslSpX2IyjKs=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:83:78:54:5b:55:f3:58:92:3d:c6:d5:79:69:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Sep 26 10:01:20 2026 GMT
Not After : Sep 27 10:01:20 2026 GMT
Subject: CN=a9b9a16b5a358d78a79f09a6d20f49b208429b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:8e:7e:b5:e2:35:81:c9:63:a7:27:ca:f7:
ca:a6:cb:15:1b:09:a6:33:3e:77:d2:6c:c4:1e:ec:
ba:32:2a:45:cb:b6:d5:7e:7e:31:ce:de:0c:32:fb:
14:c1:9e:c5:25:e1:d5:3d:6c:d4:07:43:0d:ca:e6:
d6:3b:7b:de:e5:2e:61:f6:9f:74:90:ca:f3:22:b1:
b7:18:67:4e:c8:c4:7f:8c:7f:21:9c:20:28:7c:c1:
6e:b9:5c:88:12:de:6a:5c:57:ea:54:6a:6f:db:03:
3f:9b:b9:24:7e:98:f7:b9:54:18:c7:4a:96:d2:b1:
83:61:f6:30:b6:77:16:77:3d:d3:48:e2:cf:78:ab:
e2:17:98:e8:90:d4:54:f2:be:63:6b:3b:c6:92:a8:
12:84:81:f0:ab:80:d5:fa:52:27:d4:5b:c3:27:ce:
d7:88:19:d9:ad:5c:a1:6a:de:18:29:df:cb:54:4b:
89:38:28:d2:35:8b:1e:f9:3e:b0:de:6d:47:78:ae:
dd:c5:0d:19:ac:35:5f:bf:71:aa:c5:68:75:1f:22:
2b:bd:1b:ba:0b:4c:d5:71:da:12:bb:05:70:d3:1e:
61:19:a6:6f:1e:14:c8:71:4c:8c:49:c8:ff:26:8d:
c8:b8:eb:5b:ba:76:2c:78:41:8f:b6:8c:fa:0a:99:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:A1:6B:5A:35:8D:78:A7:9F:09:A6:D2:0F:49:B2:08:42:9B:59
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3f:ab:c7:e6:62:04:d8:f1:96:30:e4:8b:4f:9a:aa:3d:3c:
81:8f:40:9c:c0:62:48:13:4a:d9:a0:00:04:57:87:0f:ca:8d:
64:cf:ae:c2:a4:39:91:c0:49:2b:76:a9:c2:db:02:55:67:dd:
fa:2a:0e:10:08:02:a2:e0:7c:b4:0e:5f:60:7e:67:92:e6:42:
cc:22:67:47:90:5e:9b:0e:5d:48:66:9c:c7:50:23:f2:02:20:
87:2e:87:1b:f9:32:54:89:ef:0e:fd:45:5a:42:10:5e:5d:05:
db:5d:23:94:d6:71:90:a2:fa:fd:ee:0d:b6:84:48:59:ef:df:
8d:c7:50:e5:93:23:88:13:1a:b1:46:3d:dc:80:eb:dc:11:b8:
75:2c:ad:06:3e:cc:fa:49:44:be:5b:65:f1:51:0e:0b:51:2d:
2b:0d:b6:65:63:4e:e1:51:59:73:5e:16:b0:f0:66:85:f2:e0:
7e:1a:e0:6e:fb:5b:f4:97:5f:83:a7:af:27:33:5f:6e:13:9a:
f1:57:45:0d:85:78:d2:5b:d2:de:a2:eb:f9:f8:b0:8c:aa:e2:
00:14:b3:1e:04:8e:8a:c3:9a:d5:bd:93:83:ff:21:c7:60:f2:
7e:8a:01:a3:46:d4:63:2d:71:74:9e:31:eb:24:1e:62:8d:d3:
cc:0d:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:28:35 2026 by rpki-client