Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: lsE9s83eq4lep/KNIcxzPURIrJmSpyJtahvzws6T8yU=
Subject key identifier: 6B:C7:A2:8F:05:64:74:F8:EC:1A:AE:B1:39:CD:9F:99:38:9D:36:79
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 01A0FC7E7EC68E2B1A78A2EF1B0DB3E48305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 1715
Signing time: Fri 02 Oct 2026 12:02:23 +0000
Manifest this update: Fri 02 Oct 2026 12:02:23 +0000
Manifest next update: Sat 03 Oct 2026 12:02:23 +0000
Files and hashes: 1: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (hash: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: Vk9Lca6/OL45vGwQHI4LSGdPlu1398iaiJbJGtQ+Zwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 12:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7e:7e:c6:8e:2b:1a:78:a2:ef:1b:0d:b3:e4:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Oct 2 12:02:23 2026 GMT
Not After : Oct 3 12:02:23 2026 GMT
Subject: CN=6bc7a28f056474f8ec1aaeb139cd9f99389d3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:b6:23:ec:3f:dc:9a:75:27:2e:c7:aa:6d:
97:37:9b:43:1c:21:33:ae:31:c1:63:c5:aa:40:95:
76:db:00:f4:1d:5f:8e:d0:3f:13:09:7d:70:4d:40:
42:bf:dc:57:54:2a:13:cb:12:1d:43:8d:b2:96:14:
d1:41:c2:a3:4d:7b:9c:c8:1e:d8:ac:91:a8:53:43:
08:ac:e1:8b:89:35:3f:eb:ca:35:51:72:ce:bb:09:
e7:00:33:ea:03:7a:ab:a5:bd:c5:5f:f0:32:5a:52:
dd:9c:9c:81:01:d6:2c:aa:16:e8:b0:78:4c:33:b3:
32:bf:fb:65:03:c0:8e:30:39:d1:83:b8:9d:9c:c0:
7b:28:44:4a:ca:20:ba:ef:f1:ad:06:6d:ad:89:8b:
2d:29:71:b5:bd:98:b8:26:7b:53:24:4a:78:7f:fc:
b8:3a:78:8b:dc:79:f7:44:4d:55:50:7d:49:19:fc:
79:60:fa:19:2a:be:23:ef:e0:f6:5e:6b:be:9f:e7:
1f:07:20:96:60:ee:cd:60:7a:20:eb:af:12:75:88:
40:41:9f:59:d6:a9:72:e0:2e:31:e2:25:b7:c2:fb:
43:62:eb:17:65:20:08:e7:99:98:c9:f2:11:2c:60:
6c:60:fa:a6:4a:67:19:b9:34:27:94:ae:2c:bf:34:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:A2:8F:05:64:74:F8:EC:1A:AE:B1:39:CD:9F:99:38:9D:36:79
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:eb:00:d7:1c:a0:1a:96:6a:01:49:0a:21:61:67:8b:80:
be:a4:5b:3d:b0:9f:3b:53:fb:90:c3:e7:d6:ae:74:76:e3:95:
b5:09:f3:05:13:31:84:36:35:4b:35:5d:1f:38:c9:30:19:d6:
94:e0:93:f1:f8:7b:14:eb:d0:b9:1e:b1:ed:12:51:9b:ab:cd:
e7:e9:8a:59:07:5f:57:cc:31:17:9b:ba:b3:1b:b4:71:5e:a9:
e4:07:62:41:34:74:30:b8:ce:2e:2f:b5:7f:a8:38:3b:e6:76:
da:34:7e:4c:dc:14:1d:90:c3:c3:0e:e4:23:69:95:7e:a0:93:
fc:be:09:81:dc:8a:3d:af:f1:ff:b9:aa:0e:ad:d2:ad:ca:48:
2e:0e:3f:08:e8:ad:9a:e4:17:e5:8c:82:bd:c7:a5:e7:a4:1b:
3a:ac:51:fa:fc:9f:07:a6:84:8e:bc:91:bd:8f:0c:fb:0c:41:
88:f0:7e:bd:da:48:25:32:12:95:19:bb:fb:a8:55:76:af:c2:
b9:e7:5a:77:72:90:13:df:a3:3c:20:b2:cd:41:be:ec:79:80:
9c:08:53:54:e0:45:3a:05:65:78:49:b9:bc:40:d4:83:27:ab:
5a:42:70:5b:c3:52:ba:c1:3a:39:f1:79:df:1a:11:a3:81:f0:
3e:40:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:49:32 2026 by rpki-client