Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: 3YkYrtp417fsRb+74+y85RWHpH022Bh1AvqlU1rq6RY=
Subject key identifier: 81:7C:CD:3B:A3:C4:12:1C:6B:EA:F6:EC:1C:0A:2C:EC:E6:F6:81:F2
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 01A1366D7F1C7A1360B0B75EE5272F0AD810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 18:01:47 +0000
Manifest this update: Tue 13 Oct 2026 18:01:47 +0000
Manifest next update: Wed 14 Oct 2026 18:01:47 +0000
Files and hashes: 1: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: 3UNcHmApJA822YsO6sErDhLwcJtJSPecIVAaG8nYGHk=)
2: jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa (hash: W/pO2gP/Hnrcu+Gr8iHWv61QQmdy+1W+lWNUobK5q7E=)
3: wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa (hash: 2XlLOO+ABU/ZZshWxT2yxE7ljUn/cRbzQybAhDOI4UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 18:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:7f:1c:7a:13:60:b0:b7:5e:e5:27:2f:0a:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Oct 13 18:01:47 2026 GMT
Not After : Oct 14 18:01:47 2026 GMT
Subject: CN=817ccd3ba3c4121c6beaf6ec1c0a2cece6f681f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:2d:14:dc:39:2f:77:b3:05:e2:41:ac:86:
e8:83:fb:f9:a6:fb:16:f0:53:83:dc:bc:16:a1:2d:
6b:48:93:c8:34:1e:38:d1:eb:70:a0:59:66:3b:98:
ef:63:f9:6f:c6:1a:ad:50:57:f4:38:e4:87:b5:6b:
cf:54:19:06:e9:9b:b1:f8:9a:1a:d8:c0:d2:1e:0e:
1a:2d:1e:0b:8f:03:e6:ed:bf:b3:0c:85:1b:c8:3c:
a8:2c:47:64:c9:7c:dc:10:d2:e6:64:2e:7d:de:31:
c2:7c:f4:12:72:e4:1a:1b:b2:56:2a:13:ce:d1:6b:
60:08:a1:ab:21:f3:93:38:45:64:80:0e:b0:b7:e5:
4a:1a:0f:47:3d:5d:94:75:8a:6e:ce:67:8b:7c:ba:
8a:da:4a:01:61:5a:78:55:69:8c:39:7e:5e:c0:e0:
73:04:f5:04:ca:5e:81:ab:5e:03:09:27:ae:c6:da:
82:4c:1b:26:c8:56:d6:38:0d:5f:7f:d5:c1:ff:a5:
bf:3b:bd:05:9b:af:84:64:f7:30:d0:2d:1b:32:ba:
92:41:5c:46:b7:83:d5:6a:be:cb:e8:29:5a:ae:33:
a7:2a:15:b0:df:0e:b6:58:fd:60:7f:02:95:09:87:
21:d5:47:4e:b7:22:59:fe:12:44:39:fd:35:83:bf:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7C:CD:3B:A3:C4:12:1C:6B:EA:F6:EC:1C:0A:2C:EC:E6:F6:81:F2
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:bf:64:93:3a:60:76:83:b7:08:9a:99:af:3b:15:20:70:
e5:9b:10:c3:bf:78:89:3f:25:ac:35:f7:39:df:be:23:f8:06:
35:91:ac:4f:a2:df:56:36:d2:c8:d0:f7:0c:60:0a:9b:7d:02:
09:eb:f0:1d:f6:60:b4:56:c5:5c:a9:2d:12:36:d0:06:3c:4c:
6a:ed:90:89:7a:6f:a4:8c:ce:b2:81:9b:fc:75:fe:90:e0:b7:
99:1e:81:e7:4c:93:22:56:b8:d5:32:55:a4:eb:da:3c:5b:91:
5b:a8:8b:0e:62:93:3e:9d:ef:3a:82:8c:80:df:8e:d0:71:ad:
85:1c:a8:e3:34:3f:44:fc:e8:85:bb:af:55:1c:6b:13:24:f7:
83:e4:8b:57:af:91:57:85:67:7c:60:1a:23:0f:e1:08:03:0a:
29:1a:84:cf:14:c5:ea:9b:30:64:68:a2:db:77:05:50:d5:00:
5b:64:25:fd:c0:c0:85:50:82:44:23:5e:86:10:71:bf:13:57:
db:0f:c6:3e:4b:ed:15:6a:e8:a2:a0:78:44:b8:c9:99:b7:9a:
59:ca:fc:c1:9e:54:13:f6:d9:98:22:8f:1a:a0:13:d2:de:4f:
6c:dd:74:16:91:27:0d:e5:5a:89:47:87:9b:08:92:e4:da:71:
f2:ea:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:10:50 2026 by rpki-client