Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: +u8D2zFiRiltTZcEVy4MFS7CB9L++xcz+3d7Z4MIeG8=
Subject key identifier: B1:29:91:64:2E:4B:80:D3:C5:31:03:E7:4E:A2:70:1A:6A:9F:B8:B0
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 01A0E02A5426CD0D7D92E6E5ECB92E0E56F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 00:01:05 +0000
Manifest this update: Sun 27 Sep 2026 00:01:05 +0000
Manifest next update: Mon 28 Sep 2026 00:01:05 +0000
Files and hashes: 1: 8rQFycP0wCkWTOuHRSr62IO8dgE.roa (hash: MFuuptNilDQ2/pqjlNHx2pqwg9aDYbH9lFzucSAdE5E=)
2: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: WaW+WmALyxS9b9F9AI/lWaNhrQPHizC4Pw42yVEKSkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:54:26:cd:0d:7d:92:e6:e5:ec:b9:2e:0e:56:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: Sep 27 00:01:05 2026 GMT
Not After : Sep 28 00:01:05 2026 GMT
Subject: CN=b12991642e4b80d3c53103e74ea2701a6a9fb8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:e8:79:5c:20:d2:6b:fd:70:b7:56:d0:e4:
f4:e4:4e:6c:64:9f:67:21:a9:60:2c:22:a6:2f:c7:
f8:f4:00:b0:52:ae:ce:d6:10:84:6f:6f:06:0f:94:
7e:cf:5a:f4:88:b1:05:76:c6:1c:73:0e:81:9c:59:
20:ba:7c:93:e0:fe:23:86:73:fd:0b:b6:17:54:f4:
58:00:fb:83:22:11:69:a0:30:2d:8e:98:47:e1:1e:
74:1e:01:9e:58:2d:99:e6:7f:d2:5a:e7:0e:ec:a5:
50:6a:4b:2e:21:80:49:4e:e7:78:24:23:ec:74:5e:
de:47:8b:03:97:7c:9c:07:eb:fe:05:12:df:05:b8:
a4:82:00:95:88:fb:3d:7f:60:c2:e6:31:0b:d7:5b:
13:9f:cf:c9:5b:89:1e:e9:5a:ca:38:b2:58:4b:9d:
6d:f1:b8:93:8c:29:14:be:e2:af:6b:e7:06:a9:59:
79:34:80:47:c8:42:13:f7:2e:54:41:8e:40:3d:0b:
02:79:26:e5:64:73:bc:0e:fe:8b:04:dd:cc:06:da:
fc:9c:51:e1:23:90:89:64:a5:43:ca:2d:00:8a:db:
31:24:da:5a:56:83:b0:88:61:52:58:c7:97:04:23:
bf:20:b6:70:d6:fc:20:02:94:60:1d:26:75:81:4a:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:91:64:2E:4B:80:D3:C5:31:03:E7:4E:A2:70:1A:6A:9F:B8:B0
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:fe:9c:60:d4:6b:63:00:c2:d5:73:6c:d9:3d:b6:61:1e:
67:5b:da:87:06:91:9a:fb:44:69:4f:24:42:4c:b7:3a:a4:fa:
81:13:fc:b3:3d:8c:e5:46:17:3d:f4:08:53:2c:0b:4a:2b:29:
f1:9c:e2:48:1e:2d:11:89:8f:88:59:d2:7f:d9:9f:10:e5:4e:
fa:1e:49:a4:d1:bb:3e:64:81:af:02:55:9d:9d:cc:4c:27:32:
89:be:4e:63:80:42:59:9d:27:3e:69:94:86:ef:0e:ae:fa:26:
e7:c2:14:89:a2:ab:19:a5:3e:26:d8:5b:55:b1:30:03:ae:82:
66:f5:c4:03:92:1d:eb:1b:c0:0e:76:cf:17:7d:57:30:85:3f:
b1:a7:40:ec:8f:39:0d:28:f8:1a:3c:b4:26:6c:f0:04:6e:95:
8e:90:ae:c1:d3:6e:ed:43:a8:ef:82:95:e9:f8:59:90:3d:5f:
06:cf:05:94:60:07:8b:27:27:1d:df:04:4c:57:13:0b:e5:4c:
08:cc:de:b0:fd:70:0b:0f:3d:25:8d:22:de:da:85:40:f3:6f:
31:b7:ba:d7:6b:81:23:f3:6d:93:d2:5b:0b:0b:0c:19:e6:33:
46:30:a6:4a:4f:bf:cb:98:7e:6e:4d:55:e0:9c:6a:73:f8:7f:
fd:06:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:04:12 2026 by rpki-client