Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: YAbAT3JtXQvESNMfoxuJ/NsUlkHZmeQdSUOZidLY1pY=
Subject key identifier: E6:33:E4:6E:4A:A9:C8:E6:6F:F8:7D:8A:66:AF:C1:DC:69:DB:2C:34
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 01A106C9E67DE336B6644F08ED6873F9530D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0ECA
Signing time: Sun 04 Oct 2026 12:00:56 +0000
Manifest this update: Sun 04 Oct 2026 12:00:56 +0000
Manifest next update: Mon 05 Oct 2026 12:00:56 +0000
Files and hashes: 1: 4ErzX-QVNekNwKgp4bp4FD23jUg.roa (hash: CeVzQivYoZLOezXlmDn5EdgQqoTtKCRcynyTRtxOdiE=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: jNknWxy3HB/upSNva+CXybhtnidPffrXCDRIF4Llvxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:c9:e6:7d:e3:36:b6:64:4f:08:ed:68:73:f9:53:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Oct 4 12:00:56 2026 GMT
Not After : Oct 5 12:00:56 2026 GMT
Subject: CN=e633e46e4aa9c8e66ff87d8a66afc1dc69db2c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:5e:17:b4:e0:3e:d8:c8:7e:f2:30:9a:1f:
13:ce:bb:b1:b7:9e:ea:20:e2:08:b2:c7:3c:c5:7b:
e7:c9:01:d9:d8:29:00:25:7d:cd:40:8d:99:19:b5:
16:88:3d:62:c5:f2:fc:ed:41:0a:6e:12:bf:24:ff:
5e:ae:3d:72:be:44:a8:cb:88:e5:82:5d:cf:c4:0e:
08:8c:23:c7:1d:f0:27:9a:c1:3a:0d:37:9f:d6:92:
bb:83:02:6e:85:78:00:7a:51:b3:eb:cf:a7:58:d6:
06:df:4e:a8:74:b1:29:3e:05:10:b3:93:5f:57:2b:
15:c4:79:a3:41:23:94:0f:0c:26:f3:28:6f:21:b7:
5e:41:70:31:9d:94:e1:ae:aa:7f:0d:ad:f4:25:b4:
50:c2:3c:a3:3b:f1:fd:3e:ba:cf:79:4b:3f:a2:99:
da:00:06:ea:5c:c6:d3:0b:7a:1d:c7:66:02:02:1e:
82:d7:15:f9:60:2f:d5:3b:1a:4d:00:61:0f:25:11:
63:6a:6d:91:83:d9:60:dd:31:ea:74:e5:1d:19:08:
4d:0a:eb:fb:04:dd:ed:2e:f6:e5:c8:17:3d:0f:31:
aa:62:e9:03:ad:78:10:66:31:74:fa:c7:74:23:b6:
d8:10:dd:6a:82:a0:75:f1:90:f7:cf:d0:cf:ed:8c:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:33:E4:6E:4A:A9:C8:E6:6F:F8:7D:8A:66:AF:C1:DC:69:DB:2C:34
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6c:f5:cb:b3:0e:81:18:29:a3:67:f4:c1:22:02:f5:ad:73:
74:7e:89:f7:16:e2:20:e7:e1:bf:77:67:f3:13:5f:18:1a:bc:
fc:a6:cb:e6:bd:ac:f1:50:4f:a2:28:57:7e:ae:d1:aa:26:15:
e7:c1:42:cb:4a:24:69:e0:c6:90:ab:3e:12:c8:a2:a3:d1:9d:
18:c5:23:ca:2d:99:d2:54:a3:10:9f:3f:9a:a9:fc:4d:60:eb:
d3:ec:38:67:75:1b:8d:51:29:52:1f:85:1e:6a:30:20:67:4e:
c2:0e:e7:6e:41:70:41:95:82:e7:82:1f:32:bd:73:99:69:17:
73:eb:62:93:b3:da:34:e8:61:44:2c:0b:65:27:78:d7:f6:ce:
2e:e9:ca:05:ac:75:41:80:0e:5a:40:ee:ed:14:55:1f:aa:12:
dc:d3:79:de:74:8d:19:18:6e:30:05:34:1e:12:f2:72:75:96:
cd:66:02:5e:c9:9d:c8:7b:26:89:3d:52:b0:77:c6:86:d0:8d:
c3:f8:38:21:96:3d:62:d5:a5:bc:2e:86:e2:de:60:73:ec:f4:
7f:bb:ab:7c:f4:b0:21:e0:05:ed:97:35:77:bb:45:37:d5:f2:
08:ce:1d:68:23:70:33:96:0b:e9:ee:91:96:39:c3:38:49:2c:
d3:82:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:12:12 2026 by rpki-client