Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File: hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier: +sWiO2OfcXFjYg+m0mA35BxyDi68jff6YNsmZdGRS+4=
Subject key identifier: D9:03:6E:A1:9C:73:26:6C:56:8F:54:7D:7B:02:7B:0A:AB:17:54:AD
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 01A0EC65F9E201D18817542140A407557F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number: 0D95
Signing time: Tue 29 Sep 2026 09:01:41 +0000
Manifest this update: Tue 29 Sep 2026 09:01:41 +0000
Manifest next update: Wed 30 Sep 2026 09:01:41 +0000
Files and hashes: 1: GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa (hash: JjmXr+ibRaRGfx0pfBbomv1IH9Jgiuy25aSKoWiXJmg=)
2: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: MeqHuCPkZIz+HAxEGuUAhjoX07ibUcpEN7JVPqbRIb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:f9:e2:01:d1:88:17:54:21:40:a4:07:55:7f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Sep 29 09:01:41 2026 GMT
Not After : Sep 30 09:01:41 2026 GMT
Subject: CN=d9036ea19c73266c568f547d7b027b0aab1754ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:ae:80:18:a7:04:cb:98:62:7c:cf:99:65:
7d:11:11:54:3b:63:23:a4:a6:1e:2d:fd:0b:35:49:
45:90:de:45:41:16:67:8a:64:da:e4:81:1f:c7:d8:
08:73:98:45:e2:5d:32:d2:d8:c9:35:92:1b:dc:eb:
4a:8f:e1:62:69:49:ec:b2:2c:00:5f:0f:31:94:91:
85:d3:47:67:45:5f:e3:92:1f:df:c9:1a:42:41:19:
06:41:45:69:da:fa:7a:07:b2:18:d1:b1:50:60:ea:
61:cf:f6:f9:07:9e:3e:f5:f9:fa:67:10:ae:7d:ff:
cf:cc:f0:00:20:3e:b0:f6:18:92:a1:2e:a9:6f:b6:
35:a3:97:42:ff:c3:47:ed:58:53:6e:99:3b:db:b4:
86:99:38:30:4d:93:5e:e2:6d:e2:48:a4:66:7c:0a:
89:34:06:87:0b:08:9c:80:cf:27:8a:9a:14:92:42:
58:93:72:37:0e:46:2e:db:a6:81:5c:43:c8:35:45:
a3:1c:24:b1:a5:41:bc:b4:a2:6b:b8:a8:d6:72:31:
73:70:ea:d0:06:57:ca:6a:e8:a8:4a:a4:6d:03:7d:
79:ad:aa:83:de:bf:f2:39:47:25:34:8c:9d:73:4b:
ac:85:d7:cc:65:1b:b2:66:b7:71:8b:98:c8:21:4b:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:03:6E:A1:9C:73:26:6C:56:8F:54:7D:7B:02:7B:0A:AB:17:54:AD
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fc:d4:b6:94:5d:a3:df:66:1d:ee:e2:7b:0e:06:66:cd:4e:
dc:a4:10:16:1b:06:78:29:65:e6:f5:f0:2c:5a:f2:d2:1a:cc:
fc:58:6f:2a:e4:6b:3e:19:39:47:4b:0c:fd:6d:d6:b1:80:c6:
de:e2:72:e1:b3:8a:67:87:9d:6f:29:ee:b8:64:c6:fd:f7:c0:
37:f9:6c:7d:4b:cc:c6:4e:81:d6:74:58:68:7d:2e:1e:3b:8e:
d1:82:94:f5:db:26:34:48:ad:8b:a4:63:e1:1d:15:17:8d:39:
f6:40:2f:d0:50:3f:3a:7b:d2:5d:74:e0:ce:e4:9a:33:0b:5f:
2e:41:52:ea:cc:e3:8d:2b:e0:3c:38:a6:b8:87:37:30:26:f4:
4f:af:ad:33:9b:4b:76:8f:81:f2:b6:97:02:d3:d9:3f:c0:12:
b2:57:b1:ea:8c:66:68:6e:42:99:20:30:3e:48:a4:4e:5e:da:
76:ce:b1:cc:ed:da:78:e0:00:54:79:54:ac:e9:36:96:c9:df:
0e:81:95:3a:11:f0:e3:73:c7:d2:e8:37:48:1f:ff:55:44:46:
95:ee:a7:dd:89:1f:de:df:5e:3b:50:ea:c9:45:8b:10:ed:d7:
a4:0f:b5:a7:42:71:90:39:72:05:b3:67:f1:45:2a:d8:b9:00:
33:7e:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:03:27 2026 by rpki-client