Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: X/R6NH/2T4hF4o1fcUJe0xfMUpg3kpBbzEycFH3w40c=
Subject key identifier: CD:8D:51:57:AD:2F:33:15:A1:E2:2B:BC:B4:47:F2:AE:B1:17:23:90
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 01A0D5DE349A63BCD26FCB08CCC6C2104480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 1077
Signing time: Fri 25 Sep 2026 00:01:44 +0000
Manifest this update: Fri 25 Sep 2026 00:01:44 +0000
Manifest next update: Sat 26 Sep 2026 00:01:44 +0000
Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=)
2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: ajfbtLB8lqdQGu5jX5V9VV2n49eeIAhWbH+1SvP5NJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:34:9a:63:bc:d2:6f:cb:08:cc:c6:c2:10:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Sep 25 00:01:44 2026 GMT
Not After : Sep 26 00:01:44 2026 GMT
Subject: CN=cd8d5157ad2f3315a1e22bbcb447f2aeb1172390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:83:89:ac:77:ee:00:fd:fb:e4:40:89:4c:
ae:46:37:f5:c4:89:c2:5a:9d:34:a4:6a:09:0d:bb:
51:49:46:a0:55:ae:2b:da:7d:34:c5:e1:49:90:00:
2b:a7:7f:a9:27:c2:7f:f5:40:3b:ef:c2:ad:45:e0:
6b:d7:c1:ab:eb:62:8f:e3:fe:fc:36:ab:eb:2f:55:
70:78:18:3d:1a:61:98:fa:71:ca:06:a7:c4:1f:0f:
96:47:28:df:5a:01:0c:86:6d:dd:35:bd:99:c1:2d:
83:10:35:57:d0:01:a5:b9:c2:dc:e2:50:8a:48:7f:
53:f3:b2:62:e2:08:da:a7:51:61:b8:3f:74:07:7f:
85:03:82:54:d5:ff:4c:e0:2b:61:5f:43:72:d5:7f:
3a:ed:3a:e8:e5:0d:61:40:9b:4c:ff:5a:7f:7b:7e:
44:11:6a:20:1e:b9:9c:28:7f:79:c7:28:a3:10:f6:
5d:6c:3a:32:86:10:1e:bb:9d:d9:5c:c7:a6:c7:5b:
31:6d:0d:9d:a2:8a:7a:3d:7f:09:2f:aa:61:5f:e0:
28:38:64:d6:05:bd:fa:ac:23:82:a0:f3:6a:09:19:
04:ad:31:c5:09:c8:2c:2d:bf:9f:7e:c7:cd:00:39:
d1:39:c7:3b:46:f4:b7:b0:ef:26:b2:4b:17:ac:b8:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:51:57:AD:2F:33:15:A1:E2:2B:BC:B4:47:F2:AE:B1:17:23:90
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c0:83:41:68:7e:69:72:3f:74:75:76:39:dd:60:54:25:31:
3b:ee:ad:7b:77:c2:48:50:f2:e1:32:4f:9a:f7:63:0e:cf:1d:
d6:a3:be:fc:d7:98:0a:36:09:b8:03:02:77:fe:52:d5:f2:61:
5e:a0:97:f1:4e:d9:47:fe:e6:90:89:66:3b:fa:c8:a7:9f:ae:
a2:a5:2a:da:d1:62:b7:05:dc:de:1d:02:bf:cd:a8:fd:ec:14:
98:58:5a:3b:59:94:ce:62:da:ed:72:10:47:19:01:88:94:27:
be:ba:53:26:4d:b0:09:de:40:9c:0f:89:76:55:0a:d3:ca:bc:
14:9b:fd:80:cf:ff:f1:98:df:4a:b7:7a:3f:07:47:62:63:d5:
7b:7e:fd:dc:f6:ce:64:54:6a:b4:32:49:f1:e4:ac:46:71:99:
93:b6:a4:3d:b3:77:f5:28:b7:b4:ac:93:fc:d8:51:13:1d:bc:
4d:e5:df:01:7f:09:ee:e2:42:89:29:f8:fd:80:1c:e5:7c:ce:
66:81:46:53:a8:dd:16:db:fd:02:75:80:fb:a2:8e:7f:85:c8:
f9:19:49:8f:22:50:81:6a:79:2a:cd:d9:e4:5b:32:f0:cd:41:
52:7a:58:54:3c:cb:38:aa:6b:ab:a8:b2:53:d8:9f:99:09:92:
0f:c1:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:00:42 2026 by rpki-client