Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: bw4KEg08LijKuFf1eq5BZW4RNbESoz0E5/Yrx467z8U=
Subject key identifier: 52:BF:51:39:97:CB:EE:A0:BE:DE:80:46:34:16:AA:8B:DB:55:C4:BD
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 01A0CB22582D949C88F95D95E87CEFAEBB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: 0170
Signing time: Tue 22 Sep 2026 22:00:20 +0000
Manifest this update: Tue 22 Sep 2026 22:00:20 +0000
Manifest next update: Wed 23 Sep 2026 22:00:20 +0000
Files and hashes: 1: LrwsLYGATYrWrHHLDkqfghD5lvE.asa (hash: xSUEF8kVB96PvQCwAkm6dj5euHLOM2XZx7Zr4kPkTDE=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: DS+F8yXUuR/EIO0fnAjPd5lk8U82GtZbDT2itG6dmmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:58:2d:94:9c:88:f9:5d:95:e8:7c:ef:ae:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: Sep 22 22:00:20 2026 GMT
Not After : Sep 23 22:00:20 2026 GMT
Subject: CN=52bf513997cbeea0bede80463416aa8bdb55c4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:b9:aa:cc:d2:5c:c0:6f:01:82:18:17:03:
2c:ef:61:c7:46:0f:be:9c:e7:a9:7f:fd:6d:fd:d8:
df:fd:85:97:b6:3c:bd:2a:95:f0:ce:af:87:08:11:
25:a3:32:88:21:83:ab:51:0f:c2:9b:55:38:f7:3d:
6d:f1:f7:4e:31:67:b4:82:27:9e:5c:b7:da:52:fd:
5c:e1:3a:2b:20:98:b7:f6:34:44:7b:d0:3f:29:99:
c1:67:b4:0b:48:29:0b:2d:91:14:27:4b:84:c9:d9:
f3:98:86:72:4a:f4:27:ac:07:85:b9:67:65:b3:7b:
2d:9f:82:83:75:26:d6:ed:37:08:a8:36:4a:1b:f5:
ef:26:46:bb:f5:5d:35:6f:6f:4c:d8:65:bc:f3:33:
53:41:83:74:bd:7f:1d:0b:39:af:be:31:87:fd:c3:
1f:f9:50:a2:6a:0a:28:c1:ec:65:2e:4e:38:30:de:
57:68:de:31:08:ae:f5:c7:bc:09:20:91:87:51:3b:
dc:fa:cf:3c:98:be:4d:f6:96:2b:20:86:3a:07:0f:
9a:ab:65:3f:c0:4b:c6:e2:47:1b:eb:ea:94:5c:18:
1f:5d:5b:24:2e:ab:2c:76:4a:31:a8:ca:06:64:72:
a7:68:9d:5c:71:a4:0d:64:80:2c:94:1b:1d:1d:41:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:51:39:97:CB:EE:A0:BE:DE:80:46:34:16:AA:8B:DB:55:C4:BD
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:55:cc:40:44:00:f2:cc:f1:40:d6:d8:fd:7f:3f:13:af:0f:
24:f0:38:f2:4b:af:23:24:ad:8d:32:af:de:51:79:ec:ba:60:
ea:49:7f:d2:d4:9c:23:96:36:5f:fa:b4:76:ea:54:ab:00:ad:
a7:27:ac:db:d5:48:eb:68:bc:26:2f:62:33:bf:88:d4:a9:44:
21:d6:92:cb:f9:9d:33:ce:4e:85:29:89:4d:ef:af:71:d0:64:
0d:fe:4c:8a:41:53:01:98:02:65:63:d8:2e:34:dc:88:ca:05:
61:74:66:6b:b2:44:0d:13:7b:1a:b4:b1:23:07:36:81:a7:d4:
e9:73:95:89:57:84:8a:6c:43:04:e6:65:7f:5a:dc:c1:7a:7c:
48:e1:67:21:7e:27:84:44:8d:03:f3:1c:4d:11:8e:8e:c7:61:
5e:24:95:75:0f:27:59:2e:7f:4b:68:cd:e0:4b:3d:a5:3b:cc:
d5:84:f6:b9:c2:96:7a:8d:bb:12:26:97:76:33:2e:cc:d3:e9:
8f:53:85:28:fd:51:83:68:fc:ab:4d:1c:fc:84:01:21:90:b1:
5f:77:77:d3:41:fb:09:27:0c:77:16:3c:21:1e:af:7b:96:2f:
05:3d:34:ca:f6:be:1e:b2:73:e9:21:89:50:cc:aa:66:2b:d3:
ec:5f:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:17:49 2026 by rpki-client