Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: 4Cmk+uZcLtcVGQqEO887QFp8DmfnZAvoF3ilWRWdlHU=
Subject key identifier: 81:06:ED:8B:03:ED:7A:CD:37:5B:3D:BA:4B:E6:CA:7D:0C:30:90:09
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 01A0D9BBD021559C6AB256EB13D9C571A909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1908
Signing time: Fri 25 Sep 2026 18:02:39 +0000
Manifest this update: Fri 25 Sep 2026 18:02:39 +0000
Manifest next update: Sat 26 Sep 2026 18:02:39 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 6Aj9tYBDWvrdAhquw6VyBYAfTVKArhKbHq8xONCAMwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:d0:21:55:9c:6a:b2:56:eb:13:d9:c5:71:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Sep 25 18:02:39 2026 GMT
Not After : Sep 26 18:02:39 2026 GMT
Subject: CN=8106ed8b03ed7acd375b3dba4be6ca7d0c309009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:6d:0f:8b:2b:33:07:65:30:b2:d6:ef:b0:
02:b4:ce:4b:6e:81:63:65:da:6b:be:1a:98:a2:a7:
52:ef:46:9d:dd:a8:f8:d7:6a:d4:a3:c2:e2:d5:72:
1c:2e:98:30:36:dc:ba:b3:61:b3:2b:3f:5f:87:b1:
bc:82:a6:1c:09:1e:25:68:73:93:a5:58:9e:b3:17:
a9:b1:52:95:6d:d9:78:cc:ae:0a:03:b9:67:12:70:
9a:b9:3a:5c:a5:ac:48:6d:c1:04:12:47:88:e1:14:
2e:5d:da:1f:d1:ee:1e:f4:94:3a:c7:28:73:a9:b0:
6f:72:c8:ab:e8:c4:27:c1:c3:61:c4:5a:b5:d4:0f:
d4:b6:e7:b6:ec:a1:6e:0d:ae:5e:aa:d4:e4:63:b5:
7a:2f:89:bb:fb:58:f8:a5:95:42:8b:6a:2a:e4:da:
42:37:fa:0a:d3:e0:cc:12:30:0f:fc:1c:e2:25:45:
98:c5:94:e7:c5:6f:51:c1:ce:42:f7:f7:d6:93:29:
41:9c:7d:12:cc:dc:f6:9b:9a:da:ec:8d:81:fa:21:
cd:67:f7:9b:70:11:53:59:4e:88:4e:ed:29:84:9b:
a4:0c:0c:49:8e:e9:21:56:ea:c4:a9:1f:d5:34:41:
90:b5:fc:ac:b2:68:8b:2a:55:89:3d:9e:6c:7a:c8:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:ED:8B:03:ED:7A:CD:37:5B:3D:BA:4B:E6:CA:7D:0C:30:90:09
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:20:21:fc:e8:27:dc:7f:9b:cd:14:09:14:90:d3:be:20:0b:
62:9f:59:d3:be:92:68:30:e7:26:65:1d:72:2b:b0:e7:4e:dd:
28:65:84:66:b1:70:85:ae:3b:25:71:71:eb:69:4c:02:aa:e0:
3f:d7:59:9f:40:62:60:19:c0:41:ed:01:02:81:1a:21:9d:d0:
40:8c:2a:0d:cc:76:e9:6e:51:db:cb:04:8a:47:c5:3d:4c:28:
50:65:8b:6c:41:4a:f4:1c:1c:0d:41:ff:17:9e:e8:37:ef:13:
f0:2c:c5:a8:e7:74:21:3d:7e:27:24:7e:9a:2f:02:bb:99:58:
9d:91:cf:d2:2d:33:8d:3e:58:1e:6c:89:cf:71:3a:23:75:38:
6f:3a:d9:2c:3d:44:40:c5:4e:00:7f:a6:b2:d9:cd:27:7d:b5:
a7:fa:ff:87:d8:ed:8a:35:85:44:0b:1b:7e:1c:4b:85:7a:4e:
51:81:f1:52:91:21:9b:98:71:c1:7a:8f:a8:86:86:96:8e:c8:
f2:84:e9:3b:26:e3:82:0b:30:c5:a7:0d:57:5c:b5:07:4b:0a:
73:c5:65:03:56:66:97:67:4f:0f:36:c3:d5:3e:ed:02:0c:04:
b7:9c:a2:fd:f8:79:26:1d:6e:02:b7:cb:a8:12:77:e7:de:7b:
aa:c5:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:12:03 2026 by rpki-client