Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: Uxtmxa4mzGYSM8sBtCFYrRdMDJ8U2QmZCde9Rvw4WPs=
Subject key identifier: 96:54:8F:B7:BB:9F:6A:51:F8:2F:CD:F8:6D:DD:91:B2:1A:FC:3E:6F
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 01A0DD29C5B1F233FE13583595A7FB2299DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 168D
Signing time: Sat 26 Sep 2026 10:01:37 +0000
Manifest this update: Sat 26 Sep 2026 10:01:37 +0000
Manifest next update: Sun 27 Sep 2026 10:01:37 +0000
Files and hashes: 1: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (hash: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA=)
2: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: sqWPhANgiQdeIIGUJMPtpACk+3vKKKVdYdnhEsLLAp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:c5:b1:f2:33:fe:13:58:35:95:a7:fb:22:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Sep 26 10:01:37 2026 GMT
Not After : Sep 27 10:01:37 2026 GMT
Subject: CN=96548fb7bb9f6a51f82fcdf86ddd91b21afc3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:c9:73:40:89:26:6f:df:5c:6c:da:c0:a3:
05:f4:5f:64:78:4a:9e:b4:6e:18:42:56:e0:53:44:
b7:d8:d1:5d:2c:15:eb:c3:49:31:ca:d8:b5:eb:a8:
02:ca:ca:67:df:b6:39:58:70:b0:b2:1f:7f:60:8b:
fd:94:dc:8e:7b:25:59:c5:60:0d:5b:0e:e6:9b:94:
08:cd:9b:c6:8a:82:d7:22:65:0c:1f:73:98:f9:e5:
a6:97:ad:68:45:08:af:1b:a2:59:0d:19:1f:87:f8:
e7:91:83:fc:eb:16:34:4a:88:06:68:2e:f9:6f:8f:
88:b1:d1:50:f1:f5:f1:fd:6b:43:67:54:72:3d:d1:
06:47:a2:63:b7:d1:36:7d:2c:c7:91:dd:67:d9:22:
32:eb:8c:d2:65:d1:57:75:90:80:9f:a3:78:4d:b0:
1f:43:b4:a6:50:01:aa:c1:79:de:ec:72:0a:65:1e:
bc:61:d6:19:3f:83:a2:9c:3e:5b:90:bf:12:16:4e:
8a:f9:70:76:a6:99:b2:93:2c:0b:56:5b:7f:86:35:
ae:a1:8e:9f:41:48:ff:e0:d2:91:36:ec:6f:e9:c3:
c9:49:92:f4:25:a7:56:5d:1e:0b:42:a2:37:ce:c8:
99:6a:05:61:7f:eb:ab:42:ab:f7:22:09:2a:38:de:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:8F:B7:BB:9F:6A:51:F8:2F:CD:F8:6D:DD:91:B2:1A:FC:3E:6F
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:0e:3a:e8:e1:f8:76:3d:8b:72:09:4d:4d:89:95:43:7f:
06:d6:1f:7d:6d:37:0f:cb:81:a3:de:9d:87:55:e4:37:d1:43:
75:ae:8d:84:8e:2f:66:bd:cb:cf:7a:f2:10:48:1d:e7:a2:1b:
bf:a7:b2:7d:b6:4d:79:38:4b:4e:fc:3b:6b:f3:3f:b9:56:bc:
f1:f4:ed:ed:c1:24:42:93:5b:54:de:9d:48:4e:8d:69:d7:4b:
50:bb:86:9a:96:2b:d4:35:a5:bd:ee:03:c6:bc:ad:aa:ba:bd:
12:bc:b5:65:4a:8b:91:b5:c8:af:68:6b:a0:1c:1e:8c:ba:1e:
29:f7:66:cc:1c:ae:d5:45:b6:55:ce:db:e2:09:92:f3:b7:3b:
95:d3:f8:06:61:e8:79:cb:a3:54:a6:bc:e1:79:c2:10:bd:1e:
c1:b0:b0:25:2c:1d:e3:7f:85:80:c2:90:58:3c:1a:bd:81:5e:
af:af:ff:40:35:e1:36:ca:b0:93:aa:da:51:64:ac:cd:d7:85:
82:45:86:7f:da:66:ab:72:a7:78:43:0a:b0:55:6f:b4:dd:27:
9d:19:75:a1:87:24:c3:6d:93:89:fd:64:7f:da:0b:8c:95:57:
41:7d:ca:f2:31:72:f6:99:06:a8:3e:ed:3a:36:19:00:f6:d1:
ca:69:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:21:20 2026 by rpki-client