Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: Jm4pZ4tSbyqZPVkj/q6B6PRFcf9RlNwLc6zJ9EmUPDQ=
Subject key identifier: 78:2B:DD:DA:3A:ED:16:49:21:17:50:BC:E2:A3:17:92:B8:0B:EC:6E
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 01A0D23768D88A1170DEA0931E673E266437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 03AC
Signing time: Thu 24 Sep 2026 07:00:41 +0000
Manifest this update: Thu 24 Sep 2026 07:00:41 +0000
Manifest next update: Fri 25 Sep 2026 07:00:41 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: /0m2YfS6pHI6xxPHkDwi/XybU8f7MEQT6CRiiMuN9mQ=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:68:d8:8a:11:70:de:a0:93:1e:67:3e:26:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Sep 24 07:00:41 2026 GMT
Not After : Sep 25 07:00:41 2026 GMT
Subject: CN=782bddda3aed1649211750bce2a31792b80bec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:d5:8c:23:bb:a3:67:82:19:8b:68:b8:ce:
f7:16:25:12:2d:aa:1c:f2:81:8a:78:fb:8b:08:ce:
38:21:de:43:86:15:b9:f8:f9:c8:eb:5c:41:e9:19:
b0:7d:e9:6f:35:5d:02:9d:42:79:a4:cc:86:90:ee:
ea:21:08:6b:d0:a7:23:8f:00:b1:0e:e6:c2:c4:17:
b2:5e:62:fe:c0:ba:74:ff:97:ef:e5:47:23:6e:ec:
d7:94:3d:76:8a:6e:b0:5f:e3:08:4b:c3:96:8b:2b:
23:25:d1:ee:0f:a7:d2:5f:b9:75:2a:2d:50:5a:c2:
4b:f4:a1:d9:f6:9e:d5:ad:17:38:fd:b2:84:42:f5:
0a:3d:64:3c:de:23:e5:37:93:e0:0c:bc:5a:ba:14:
14:be:54:98:5e:9a:0f:d4:a4:7b:30:6e:90:f2:ba:
51:b5:a2:7a:b6:f1:08:33:93:dc:19:f7:95:bd:43:
61:44:60:b2:7e:88:69:8e:e7:a4:9e:25:68:a7:82:
18:88:86:7b:34:24:c0:5a:60:d8:98:d7:83:46:d1:
ad:e2:90:8e:e5:65:d0:01:fd:d0:9f:2c:22:49:d9:
ac:ef:0d:df:1e:32:4c:07:f4:98:f8:19:6d:b5:8a:
40:eb:eb:5f:0c:cd:50:04:0b:d8:ad:8d:e4:69:19:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:DD:DA:3A:ED:16:49:21:17:50:BC:E2:A3:17:92:B8:0B:EC:6E
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:02:da:3a:3f:3e:7e:f3:fd:30:a2:ef:a7:54:d1:7d:64:
bb:e5:ef:a6:99:41:c6:c1:47:7b:36:70:b2:75:48:af:90:15:
7f:4c:b6:8f:f2:a5:5d:c1:16:fd:c7:8e:38:8d:49:23:85:f4:
a9:c0:6e:7b:16:0c:d0:9a:dc:23:2f:ec:32:1b:00:7c:47:05:
c0:ea:ab:1c:c5:fe:e5:2a:f1:8b:6e:50:19:81:e8:8e:66:42:
0f:14:30:5d:bb:e1:f4:10:eb:00:50:61:3a:9d:da:29:7c:de:
8a:96:67:4e:69:5e:6c:87:f9:4b:83:52:94:6d:e8:90:9f:46:
5c:23:12:3f:4b:ce:5a:0d:c0:da:51:dd:ee:a1:a6:f6:87:06:
88:90:3a:84:11:38:5e:4b:88:d5:ca:35:90:fa:89:88:6e:fe:
b3:d5:31:df:60:cc:c4:ee:43:8a:69:e1:94:46:72:9e:a0:cb:
df:f4:36:d6:16:6d:a6:5e:ef:19:aa:06:93:db:60:1e:e6:62:
f7:71:66:88:52:2c:92:83:ff:f9:54:df:12:36:55:0d:eb:e2:
fb:91:94:64:9a:95:1b:38:ff:2a:e8:84:69:f7:34:9b:57:f4:
35:6c:39:15:14:7e:ae:94:4a:77:e3:0c:c2:c8:af:1d:8d:b1:
18:32:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:29:31 2026 by rpki-client