Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
File: 8-hh3LY0GJOsTmMm723kNEHmaUM.mft (raw, json)
Hash identifier: 1buJELzFR8YCgqHcsXR4bTLSNlZ2Eg1ge2GE6YhK4JQ=
Subject key identifier: 45:45:B3:17:D4:A4:71:DC:DB:75:FF:43:65:74:C6:60:BB:9C:E6:C1
Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Certificate issuer: /CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Certificate serial: 01A0DBE016FD2E6A51CBC96BB9966DF939F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
Manifest number: 03D5
Signing time: Sat 26 Sep 2026 04:01:31 +0000
Manifest this update: Sat 26 Sep 2026 04:01:31 +0000
Manifest next update: Sun 27 Sep 2026 04:01:31 +0000
Files and hashes: 1: 8-hh3LY0GJOsTmMm723kNEHmaUM.crl (hash: 2oYM8ugBm307eQxV6VBYcyLT7lfslEXPuGwdNkVKACc=)
2: bk4lZusY2_Koxe78KPF98kBhHJ4.roa (hash: 1Foi9h5PHolKa1KqV3ZXYBv+pGOywWlibfdBplpePww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:16:fd:2e:6a:51:cb:c9:6b:b9:96:6d:f9:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Validity
Not Before: Sep 26 04:01:31 2026 GMT
Not After : Sep 27 04:01:31 2026 GMT
Subject: CN=4545b317d4a471dcdb75ff436574c660bb9ce6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:31:87:40:5f:e6:17:7d:10:11:f8:30:89:
91:b1:92:b4:52:ab:a7:89:2c:a0:a1:d4:82:68:88:
a5:dc:c0:29:55:06:bd:79:f8:01:cf:f7:0c:c3:da:
09:99:6b:d7:8d:00:a0:d3:e2:d5:b7:b6:c6:fb:1a:
5f:0a:f1:8e:2d:14:a2:ce:ea:8e:c4:9c:48:46:dd:
3d:bb:49:11:27:a6:60:f7:05:eb:ed:75:7b:c6:a0:
ff:ca:46:f6:5e:90:bc:3e:2e:a9:23:91:6b:83:0b:
ea:9b:f9:f1:c2:f6:ae:fb:ab:ee:91:b4:58:59:99:
fd:01:50:27:3e:36:ca:53:45:4d:80:55:a2:04:03:
3c:5d:bd:de:4a:b2:a1:1c:26:46:e5:c9:7c:1b:a9:
58:e2:3f:ba:d6:e0:56:4f:60:51:e3:cc:42:0f:38:
0a:45:23:a6:14:13:7b:3b:5a:3c:12:59:68:69:0c:
4a:64:3b:39:0a:d0:a0:8a:55:1e:5e:b9:8b:af:bb:
6b:73:45:4e:0e:11:12:1c:53:ad:0c:ee:44:ce:c4:
46:3d:e6:b8:b8:37:77:e6:6a:24:b3:82:32:ae:a3:
1d:28:7b:a8:4c:de:8f:50:42:fc:2f:19:c9:73:a3:
df:21:e0:a3:e8:cc:d6:9d:bc:16:4f:f1:93:e2:a9:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:B3:17:D4:A4:71:DC:DB:75:FF:43:65:74:C6:60:BB:9C:E6:C1
X509v3 Authority Key Identifier:
keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:48:3f:98:4a:67:cd:53:7d:6b:9b:ba:d6:73:e6:1e:b0:
08:b7:80:6a:60:90:6b:e5:b6:8b:2b:0a:15:67:32:d7:a3:40:
ab:61:38:dd:cf:22:6b:51:a7:e9:c5:2f:2c:ab:2c:4a:ef:87:
27:eb:a8:4d:c5:d8:70:ae:ef:f5:d1:1e:64:ac:3e:4f:f8:a7:
46:97:4a:87:55:a5:da:90:f6:77:c4:e7:0f:16:77:f9:05:dd:
35:29:05:1d:64:fa:4f:0d:ab:f6:12:ef:ab:48:59:46:90:e4:
c7:b5:82:42:8a:9a:cd:99:42:6a:e3:00:bb:6b:d7:c7:0b:95:
c1:a9:d3:5a:80:2a:92:f7:cf:d4:cb:a0:91:c6:47:29:5f:9f:
c0:dd:5f:35:94:22:0a:a9:1f:5d:25:65:0e:97:91:5a:a7:02:
54:fc:e1:81:b4:02:17:f7:bd:5f:e4:78:ff:99:34:27:d6:a7:
65:77:bc:20:b1:74:47:a1:06:a8:3b:fb:cf:2d:82:8d:23:a6:
7a:3c:b1:79:3b:ef:52:40:e1:9c:cb:f3:f1:27:b0:00:82:42:
83:f4:c4:b6:8c:2d:31:03:9e:36:67:4b:1e:e4:00:25:b7:e8:
2e:6e:5e:fc:5f:b4:90:59:4b:ac:9e:92:33:7c:cd:75:36:c0:
48:45:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:33:21 2026 by rpki-client