Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: 95AjJFxkm4KwQN1MjDNVY+rY2fjBM4ZVtn8yTx2xABs=
Subject key identifier: 83:A8:86:FC:A6:4A:89:07:D0:98:3B:12:45:6A:67:08:20:0F:85:62
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 01A0EBF9B5CE154A58CC36D44B9BF93DA10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 1901
Signing time: Tue 29 Sep 2026 07:03:25 +0000
Manifest this update: Tue 29 Sep 2026 07:03:25 +0000
Manifest next update: Wed 30 Sep 2026 07:03:25 +0000
Files and hashes: 1: VpPJ4ZzReaEohaymqptLaOAjr1o.roa (hash: lqwSOhzaFJrXfe0L7Qw99FbYMDPv5g1eewbWIKteNLY=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: x0XgfIMOcUdlO8o67EWgPWoq2Kg6nqCC9k1mVkGj8P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:b5:ce:15:4a:58:cc:36:d4:4b:9b:f9:3d:a1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Sep 29 07:03:25 2026 GMT
Not After : Sep 30 07:03:25 2026 GMT
Subject: CN=83a886fca64a8907d0983b12456a6708200f8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:0d:db:37:d9:93:c2:53:ea:4d:ca:2b:bc:
ba:08:66:33:55:60:5b:71:8f:4a:5e:6f:42:58:6b:
4c:1b:aa:86:44:da:9f:5a:b5:c1:0c:8e:a5:40:14:
1c:d9:7b:53:d9:3a:89:a7:5d:20:8a:ef:c1:02:23:
db:f4:4e:7e:cb:a4:f6:4c:dc:36:13:e3:ac:d1:d5:
e3:a8:25:92:5c:fc:b7:da:72:8e:05:4a:7a:0e:9b:
05:a4:14:98:25:b3:45:bb:a6:b1:82:2d:2b:a2:39:
68:83:bc:f1:0c:04:97:0f:21:26:9a:cb:15:64:c3:
be:d6:71:6e:1d:1b:fd:f3:b2:4d:01:f6:70:c4:9e:
73:e2:bc:e7:d8:cd:e4:60:c7:b9:ca:7e:6b:98:08:
9e:a0:d3:db:bc:f8:29:99:a5:23:37:d0:5d:bb:e6:
e5:5e:fd:41:a5:d1:54:a2:0e:40:07:9e:32:1b:f3:
0b:5f:e8:95:f1:21:7f:f0:0d:3f:c5:d3:e6:ac:7b:
71:0b:98:0a:69:6c:ce:14:f4:d7:02:92:5c:e2:80:
3b:ef:6a:51:2a:42:9e:12:c6:b9:85:ef:80:f9:8f:
97:58:c5:d0:57:da:d8:66:ef:e1:f8:cd:13:a2:a0:
1a:d3:4a:de:d9:a7:d9:83:9c:8e:a8:db:20:c7:7c:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A8:86:FC:A6:4A:89:07:D0:98:3B:12:45:6A:67:08:20:0F:85:62
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f1:f9:30:ab:a5:60:5f:08:60:7d:3f:a5:3e:3a:33:b2:dc:
a8:bf:d6:9a:34:35:4c:4c:a6:9c:76:9c:d1:9a:4e:12:2d:38:
e2:04:17:83:80:4c:50:57:e9:0d:d4:e1:f5:da:dc:5c:c6:d5:
99:68:d3:1c:dd:4a:db:86:a5:29:27:54:b2:e5:c0:9c:24:63:
bc:8e:bc:fb:b8:b8:cb:ac:96:59:fe:1b:15:b4:27:b5:ba:52:
ab:1f:3f:04:fa:ff:8e:ff:c2:c0:b9:f8:81:61:89:45:0d:ad:
46:b1:14:d4:b0:6c:d5:b6:1d:2a:dd:75:84:ff:94:19:4d:ec:
0b:48:be:55:71:73:1b:57:bd:95:9b:ab:97:7c:cf:8e:7f:af:
c8:74:c5:28:a1:a5:e9:76:75:cf:37:8c:3b:e1:7e:ef:16:8c:
0f:12:cd:e6:65:f2:d2:fd:be:4d:14:2e:9a:10:ee:9c:60:e2:
33:a1:55:c8:6c:e1:99:31:ec:e4:75:d3:4d:60:db:58:a7:19:
89:66:d2:16:a2:3e:46:39:34:62:1f:20:4e:d0:8b:ca:a2:68:
4a:2c:2e:4e:53:0f:3b:87:0d:26:e1:af:62:01:72:f8:e5:0e:
f0:6c:bd:9c:1c:6d:ac:bb:20:7a:73:01:fd:95:2f:98:d1:5f:
be:31:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:37:19 2026 by rpki-client