Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: D2Flx3vMJLMNVHLsnVbgrTV6SdhjjXyI1imRc6PE8kI=
Subject key identifier: 56:59:13:6E:D0:58:F3:77:B8:E8:0F:69:AF:CC:ED:7B:BC:71:84:62
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 01A0D5A6AFA3699CA4775EE9E6C3302B02FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 23:01:05 +0000
Manifest this update: Thu 24 Sep 2026 23:01:05 +0000
Manifest next update: Fri 25 Sep 2026 23:01:05 +0000
Files and hashes: 1: MiEsRtqbk8f9Jyv8IyxMZOx2e2E.roa (hash: 0+M0KN/0qMyXVee1yKyBcwMkTGKxSKcvVUW4ZAOcFIQ=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: LKeCnY/C1varlU1z81ZrL5kubvv0YfoTVimHKI+fBao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:af:a3:69:9c:a4:77:5e:e9:e6:c3:30:2b:02:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Sep 24 23:01:05 2026 GMT
Not After : Sep 25 23:01:05 2026 GMT
Subject: CN=5659136ed058f377b8e80f69afcced7bbc718462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:86:bf:f9:eb:48:87:81:5f:5d:ab:83:fb:
84:53:b5:53:8a:c5:07:58:79:ac:3b:4c:0e:72:e2:
c1:ab:00:47:84:44:3c:2c:eb:22:25:20:4c:0f:06:
c8:ad:6f:f4:cf:3a:3c:eb:91:3d:f2:16:2c:cd:b5:
3e:11:71:84:ae:a2:8f:fa:a8:52:f8:bd:cd:b5:94:
67:63:89:30:a6:b3:94:b6:db:75:aa:06:6e:28:06:
a4:2d:c6:9a:5c:00:ab:c4:2c:86:73:cb:c7:92:e2:
7c:10:fa:20:2a:2c:d7:48:d8:30:99:a0:99:55:3b:
8d:31:4a:2c:e9:fa:b3:9a:2d:87:ab:a6:71:82:e8:
aa:7c:0e:44:2b:b6:66:67:50:44:dc:16:d2:38:72:
e4:9e:a0:d7:06:71:41:f0:02:88:24:d6:2a:a9:53:
ec:45:5f:f8:06:5d:2b:78:24:3b:8d:26:3c:d1:f0:
50:90:42:d7:63:39:ba:7b:7e:c6:5a:dc:0f:4b:61:
ab:a0:c1:3d:b4:cd:54:5f:da:66:f2:3b:7f:08:6f:
c4:b3:cd:a3:e7:67:e7:de:f4:db:38:fc:7e:37:49:
b2:73:5b:ca:52:8f:a3:0c:8a:e0:32:87:61:75:5d:
8b:13:2e:20:73:53:c6:d2:a1:33:9a:1a:25:ad:9e:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:13:6E:D0:58:F3:77:B8:E8:0F:69:AF:CC:ED:7B:BC:71:84:62
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:15:aa:8c:e1:12:f3:ea:a9:8f:27:39:5b:90:9f:b5:a9:ca:
e1:17:ee:83:29:e5:6c:86:1b:c5:35:53:a0:c1:1f:7c:7b:71:
3e:d2:55:07:91:c9:50:0b:fd:48:9a:ed:3e:fe:6e:54:a9:3b:
61:06:a4:be:5b:84:1f:0a:f9:09:86:15:7f:be:87:e3:22:53:
a6:47:b2:e4:6e:bd:20:62:39:ef:07:aa:a4:3b:87:05:db:a1:
a5:fa:e2:0b:50:4f:17:57:aa:0a:45:9d:1e:64:ec:03:f5:81:
e9:a5:39:ad:27:73:d7:21:26:43:93:f7:7f:f5:07:23:a3:47:
c2:84:ab:bf:f4:09:eb:bc:77:ec:73:7b:da:80:7f:9e:cc:e2:
ee:59:30:d4:ad:db:65:04:ee:90:23:54:41:d9:db:b3:ea:e1:
1f:3c:5e:d1:b5:c2:dd:db:f6:ed:1b:e4:2d:c6:98:b3:4c:68:
23:cd:5f:46:3c:64:09:b3:28:9a:ea:f0:96:d5:8e:a3:62:ad:
eb:fb:bd:1f:29:56:80:a3:0a:82:b8:15:7a:b9:d3:12:23:7c:
c4:b0:43:b1:8a:90:33:e6:dd:56:b8:a8:ac:5c:25:bb:55:6b:
45:31:69:69:67:d1:c5:05:cd:71:9c:42:b0:3b:d5:85:b5:ec:
ae:c7:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:26:29 2026 by rpki-client