Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: ocYHbsmyKAt8Uub7NaqfbmDAUIcKrw6lL9S8ZAzlNuc=
Subject key identifier: 2A:DF:9E:E2:07:F2:0E:E6:1D:28:95:FB:E3:C0:26:21:5D:BE:91:8E
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A0E02A9A0432B4D51710CCD8A74918E34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 094D
Signing time: Sun 27 Sep 2026 00:01:23 +0000
Manifest this update: Sun 27 Sep 2026 00:01:23 +0000
Manifest next update: Mon 28 Sep 2026 00:01:23 +0000
Files and hashes: 1: 1-itT2gvROV8BPhqzIAr-ivOXq7M.roa (hash: ET+/yB+gbA5eF/0EQ5hfSG8t1yJ4BiB3R9H+OhDPgPE=)
2: 9zHInslftdR-WTREL502oLRwOwQ.roa (hash: jDPNOxcen5N6aPN2tf3xyYHO0gdcKMnqEAPq1TTj3hk=)
3: Fg7N_gQFSybcMtVV8_M9Elsq198.roa (hash: qHY5rWQi6Q9lmnwTOfO2DKm7A2p8iS4b9yJI5JgWPWc=)
4: WRu3Cv0xdmjOWoG2ZswVIKB_5Sg.roa (hash: FwZzTrgAJmCKVOp+9WkS40wNzmiqfA8Zg/3n5/Fzn+o=)
5: gCZGddOFDvIofw6Khaf6NPsf9No.roa (hash: Cxv2xvprn3bBXB2hR8mzha98ZrK5VBbIdggBrjhBjdg=)
6: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: Saf5EVe1z8KbzeDBmIXl4tIW0VCyCHWgwTzixPwwX4A=)
7: t2M2W76ZB36CpSnkZZgZapQo_V8.roa (hash: NBlTQZ6B4r8nzTov7lvRuViOT21EY0BAblo9WxcrWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:9a:04:32:b4:d5:17:10:cc:d8:a7:49:18:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 27 00:01:23 2026 GMT
Not After : Sep 28 00:01:23 2026 GMT
Subject: CN=2adf9ee207f20ee61d2895fbe3c026215dbe918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:5f:29:3f:e0:0c:62:41:34:f3:b2:9b:4e:
e7:33:01:1d:8c:0d:49:bc:7a:38:70:25:a6:ea:c3:
31:9a:19:e4:37:82:25:ea:86:e5:48:4e:f4:b4:c0:
38:50:e5:09:5e:81:e4:62:c1:42:cf:0e:51:1f:1e:
ef:2c:01:76:31:3f:46:a1:c7:92:56:c5:86:fd:ea:
0f:ff:13:90:ea:67:64:99:1a:d1:75:c4:06:98:03:
54:37:bb:0a:89:60:d5:0d:73:cd:f9:2a:6e:40:d2:
64:be:13:04:ee:c2:a0:3d:0f:38:da:a1:7b:1c:fd:
7f:90:47:97:20:1c:ea:88:87:99:7f:0b:ea:aa:a8:
c3:25:1e:f2:a9:28:ca:6b:62:bf:0c:fb:cf:a9:08:
d1:bc:d9:47:9d:f2:11:43:08:d2:a9:59:d9:4e:8a:
78:21:a3:09:c4:05:27:a3:6e:c8:db:ca:6b:8f:0a:
9c:03:71:80:9e:cd:82:63:c7:8c:5f:c9:cc:1a:29:
0d:d0:03:5d:89:70:68:2c:68:a5:cf:78:87:6b:41:
52:2a:05:b8:28:fc:da:e9:6d:39:82:73:c3:42:00:
d5:34:c6:47:97:d8:9f:24:a2:43:e2:a3:ed:a4:1d:
b5:0b:9f:5d:43:93:6b:00:df:96:ab:fd:08:86:c7:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:9E:E2:07:F2:0E:E6:1D:28:95:FB:E3:C0:26:21:5D:BE:91:8E
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:db:82:7e:e1:a5:09:ed:2d:e8:d2:c0:89:53:dc:3c:ad:15:
73:4d:ad:c6:d3:d1:9f:ba:6a:be:95:66:34:31:c5:d3:f0:36:
ec:e6:7e:de:72:a6:7c:c7:fb:04:e4:25:bf:20:1c:71:2a:1f:
ed:a7:4d:a4:e6:97:43:35:65:76:0f:67:1c:0f:b2:25:60:f8:
05:9c:e7:7a:4b:f3:3a:55:ea:b8:a5:fd:55:cc:21:82:e0:a3:
5f:0e:ab:c7:2c:1e:3a:a0:c8:eb:55:26:2e:5f:8c:45:eb:57:
98:2e:4e:68:5a:50:5a:9d:98:b2:93:5b:5e:ba:95:63:70:33:
36:2a:0f:a7:c8:77:36:a6:d6:64:3a:2f:12:a1:c6:04:6f:e6:
29:f2:6b:9e:95:b5:22:0c:de:56:31:c3:ae:a0:c5:eb:0f:f0:
43:fa:fd:d2:98:5f:68:fb:51:68:5c:e2:ff:37:f8:44:03:91:
26:7d:5b:0d:e6:43:27:f7:30:cd:42:0c:21:72:a9:7e:81:dd:
6c:7f:75:4b:42:0b:46:d9:b9:e3:e7:4d:03:ab:ea:2f:64:ad:
fc:12:8a:b3:b6:bb:a1:fa:2c:88:06:6f:3b:af:53:81:4f:3a:
f5:64:c9:17:55:c1:6e:80:f8:2a:12:90:f6:bf:cf:d5:67:b8:
73:50:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:37:22 2026 by rpki-client