Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: zttowWP4YHFnwtuCckR97TyBttXsRMle6pbTVj2y2hA=
Subject key identifier: 3E:F7:63:81:C9:76:F2:43:60:26:05:15:C9:BA:6B:87:93:61:DB:2C
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 01A0D012431DD16AB110E05F6E0DB0CDE2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 068E
Signing time: Wed 23 Sep 2026 21:00:52 +0000
Manifest this update: Wed 23 Sep 2026 21:00:52 +0000
Manifest next update: Thu 24 Sep 2026 21:00:52 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 4493DXSo0VlFfG+Boi+RWXh2XoCXvE/7UfFYdy9SZFc=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:43:1d:d1:6a:b1:10:e0:5f:6e:0d:b0:cd:e2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Sep 23 21:00:52 2026 GMT
Not After : Sep 24 21:00:52 2026 GMT
Subject: CN=3ef76381c976f24360260515c9ba6b879361db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:d2:f4:d7:87:50:cc:df:cb:bd:ac:8a:97:
ec:1b:15:94:20:a3:cc:ef:11:f8:86:85:34:56:70:
28:dd:1b:f1:23:ac:87:f0:9c:2a:e5:d4:d5:c4:13:
01:fd:44:c3:55:d0:f6:e3:0b:aa:fc:7d:f7:b3:05:
fb:3c:e6:f0:51:4c:52:28:45:40:3f:42:05:a5:2c:
64:69:51:3d:fb:25:0f:8b:8d:71:d3:5f:8a:41:dd:
06:ee:a8:2b:b6:8f:f1:e0:44:4b:21:3b:aa:64:8c:
2c:ca:e1:83:6b:d6:b9:8d:67:54:2c:57:95:f0:ee:
93:be:b1:48:13:91:a2:18:08:f3:df:5a:87:20:9c:
f8:7b:d1:04:94:8e:e4:b7:fb:03:a1:16:1b:aa:a5:
a7:12:73:22:20:5b:36:f5:79:a1:76:5a:f9:be:21:
b9:9f:ce:ff:f5:c6:2e:77:70:a2:69:09:32:2d:84:
dc:3e:38:8b:ed:ef:85:ac:55:b8:7a:21:be:e1:b6:
66:73:0d:4e:08:ac:04:fc:d1:26:44:27:6c:3b:85:
73:9c:a9:95:c7:df:d9:ee:ed:18:d0:9b:ba:5a:91:
3f:63:b1:c5:c2:9f:ab:d8:a9:3e:2c:9c:8a:1e:0a:
46:0c:31:ad:c7:b2:dc:b9:26:ee:13:c3:73:59:00:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:63:81:C9:76:F2:43:60:26:05:15:C9:BA:6B:87:93:61:DB:2C
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fe:6f:d3:62:ec:00:6d:25:f5:8d:8e:6b:42:4b:c0:1b:d5:
1f:3b:ee:8e:1a:fe:6f:6a:ea:e9:a2:66:7a:09:01:e5:28:8d:
ab:c7:c1:95:37:75:5d:ff:b1:28:75:e5:0a:38:08:1c:8a:e0:
dd:5a:85:25:fe:95:b9:0e:63:4c:68:99:4c:d7:ee:21:65:64:
43:26:ff:2f:ec:ae:5f:d7:b2:e2:3c:20:11:ed:73:30:64:78:
15:cd:d1:c6:b1:1f:ba:71:7e:45:ef:d0:e5:a3:e0:b3:e4:a6:
f3:d6:d4:e4:d6:b0:4c:6f:fb:da:fd:c3:64:2b:bd:f7:40:f3:
ce:cc:04:36:ce:3c:44:16:b1:14:37:60:78:70:e8:50:9f:a3:
b4:e9:ff:0b:53:0c:f0:b4:d3:ef:8e:1c:69:ad:d4:e9:42:3f:
82:66:68:fa:d7:89:20:21:d3:32:b0:6d:70:b3:51:06:94:40:
f6:1b:80:a7:e9:ec:dd:1d:ff:24:80:29:95:70:fb:07:e2:8a:
98:0b:84:7d:8a:17:70:e7:a7:19:ba:0d:90:27:6b:8b:e1:51:
d3:d4:ea:99:20:96:c4:c2:be:40:5b:60:35:a5:6c:10:fb:f2:
86:c0:ac:c8:9c:62:0b:14:5f:ca:61:e6:fe:28:62:6a:06:33:
de:42:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:42:43 2026 by rpki-client