Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: HXrMT6r5WAsBOBnCVrp4mdZraDTRFIDMR0xYHR6Upq8=
Subject key identifier: 8D:AA:85:2E:8B:F1:F7:01:E9:BD:C6:F1:3F:9E:93:17:32:B5:28:7A
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 01A10211AD29E1593467EA5BDBAEF2069037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 1A89
Signing time: Sat 03 Oct 2026 14:01:15 +0000
Manifest this update: Sat 03 Oct 2026 14:01:15 +0000
Manifest next update: Sun 04 Oct 2026 14:01:15 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: iy4Z4LGRkku5Xk7xA8Fh4oOE/97zOwUDV+FzwHlWdWc=)
2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:ad:29:e1:59:34:67:ea:5b:db:ae:f2:06:90:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Oct 3 14:01:15 2026 GMT
Not After : Oct 4 14:01:15 2026 GMT
Subject: CN=8daa852e8bf1f701e9bdc6f13f9e931732b5287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:fe:94:c0:9e:e3:52:c8:43:fc:61:f4:52:
8f:c7:8e:a1:a6:24:da:00:9d:21:0c:17:61:31:a4:
4e:26:58:a5:f9:c7:1d:d5:f5:72:68:db:7c:08:4b:
1b:22:8b:2b:ef:e1:2c:12:39:2c:1d:42:68:cf:c9:
04:a1:c1:f4:e8:39:2d:21:98:07:49:8b:d3:99:c9:
0e:cb:00:fc:fc:eb:78:14:1e:fa:bf:24:ec:9e:51:
aa:35:64:2c:f0:bb:a4:2f:2d:1d:4c:c6:c7:df:a8:
93:32:3c:db:d2:7d:70:2d:48:12:7e:90:a0:1b:91:
6a:c4:fa:32:ac:39:f1:cd:4e:1f:34:c0:a3:d9:6d:
0a:62:03:6f:d0:01:e3:4c:a0:5a:68:80:b0:a9:ee:
d8:76:64:ac:dd:d2:e1:1a:d5:87:f1:b0:3c:c1:22:
c6:1d:87:d0:f6:b5:44:8a:42:0f:9b:82:1f:ff:f5:
5a:73:ef:a2:68:a6:a4:de:eb:c3:1e:72:a3:22:79:
2c:12:84:41:c1:1b:3a:9d:8d:87:fc:97:a4:06:17:
4e:69:eb:fe:01:61:83:67:cb:88:39:f2:be:90:21:
e1:57:57:51:3e:8c:06:cf:23:e3:44:56:69:76:9a:
71:6b:94:54:0d:00:7f:d2:94:15:34:e6:b6:43:0e:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:85:2E:8B:F1:F7:01:E9:BD:C6:F1:3F:9E:93:17:32:B5:28:7A
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:09:ad:ad:c5:36:aa:1b:72:95:a7:96:86:c1:4e:76:fb:
3a:ad:dc:2e:2b:ba:d6:22:33:27:f6:6e:56:f6:58:e0:19:c3:
ea:30:a4:3a:2f:4f:bc:c4:4e:04:d7:f5:8e:7d:1f:e6:97:41:
66:07:2b:59:f8:8f:16:73:b1:34:3c:b2:a8:20:23:33:27:e0:
fc:37:98:2e:72:91:5a:85:fb:be:ea:2f:fc:2c:41:5b:27:96:
2a:a7:2f:71:25:db:ec:2a:58:a2:05:d0:2d:e8:28:8e:90:1f:
99:12:5c:9f:b4:ca:c1:17:95:0f:50:0b:14:9d:62:e6:65:c4:
52:d7:20:38:d5:0f:34:a9:75:fd:7d:f0:1b:0b:71:f5:39:3d:
eb:fc:e2:dc:c5:f8:50:95:70:a0:50:26:88:43:95:01:95:47:
65:78:2f:fa:5b:35:0d:c8:1e:05:df:32:86:8e:20:b9:d4:11:
ac:68:b2:cc:3a:33:8f:93:fa:46:b4:bf:9b:ff:48:78:c6:a2:
e1:d2:74:36:8f:58:c1:9b:b2:0a:78:41:2f:12:6a:6c:dd:4f:
e0:3a:38:8d:c3:59:44:31:26:e0:76:7a:f0:1d:a4:52:3b:fb:
02:9f:75:65:3a:ca:80:d9:d7:35:66:71:9a:6e:95:6e:bf:ff:
e7:ee:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:33:51 2026 by rpki-client