Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: J1CBZ0WyQjijUImYKsHkG0h6LCFMm6yzcGJEjvD8O/0=
Subject key identifier: CD:6D:93:BB:B9:D4:E6:D1:98:95:C8:2A:4F:75:76:AA:56:B1:26:8C
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 01A0CF36C1A8426358722C9F8239E225282F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1A87
Signing time: Wed 23 Sep 2026 17:01:07 +0000
Manifest this update: Wed 23 Sep 2026 17:01:07 +0000
Manifest next update: Thu 24 Sep 2026 17:01:07 +0000
Files and hashes: 1: 1jXhnTlNcIH-F__GRf4PM4BYn8I.roa (hash: E3HlVuT6hxf5ksKsL0iXZwkml17Q9oBpWogpOAGlEwU=)
2: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: hzHYiZkyIUyDGAb1WELJVtwNrUEpib+dX5AojpCqBiI=)
3: 5n_LJIXVhPPzdEHOUXNI628ingY.roa (hash: NQCHGHitMzomWbvAOfmN/9PVUkWlzv9zSoGTskUkpNQ=)
4: uhVewxHevpMHT9Vwqhs2oxQFyCs.roa (hash: wVttK0CYjEZiRPDjwBZLejNRTkNAN3AqB1UHgInSwjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:c1:a8:42:63:58:72:2c:9f:82:39:e2:25:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Sep 23 17:01:07 2026 GMT
Not After : Sep 24 17:01:07 2026 GMT
Subject: CN=cd6d93bbb9d4e6d19895c82a4f7576aa56b1268c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:cd:42:c8:05:34:98:ac:72:7b:e6:59:17:
dc:a1:01:fe:bd:74:79:42:e6:0c:03:66:c6:81:13:
59:a7:3e:11:e1:71:a7:0a:a2:e7:5c:d9:da:7d:ef:
7d:d6:71:cd:78:d6:b6:a4:cb:a3:52:1d:10:3c:e9:
2e:d4:35:71:83:90:97:b0:d7:d6:29:29:fe:6a:32:
27:40:eb:a3:93:07:73:29:65:2f:05:a0:bb:33:d9:
f6:a9:de:7f:a4:7b:cc:59:ed:ef:c5:28:cf:ee:ca:
fc:79:10:b1:d9:75:7b:ee:61:c7:9e:8e:5b:90:a3:
d1:aa:50:33:9e:a4:12:0c:2d:f3:6d:78:56:d5:38:
78:b3:58:84:4a:6f:cb:2f:1c:43:3e:27:ea:7a:d4:
94:5d:44:cc:72:9d:24:0f:1d:c2:a5:ab:7c:69:34:
db:82:73:8a:4b:7d:fa:16:44:12:80:b7:e5:9b:20:
54:e0:c2:f6:22:8b:b1:ab:87:c1:25:d2:fb:55:9c:
61:a6:32:7d:0e:01:78:6d:a8:d5:1e:66:b2:34:86:
3f:79:d3:f4:61:83:c7:7b:6f:b4:18:c0:3d:63:59:
6a:33:b4:ee:2b:e5:1d:ab:71:90:13:5f:c1:aa:c1:
f0:6f:cb:0a:7f:fc:62:b4:bc:40:e3:cc:a0:ea:f1:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6D:93:BB:B9:D4:E6:D1:98:95:C8:2A:4F:75:76:AA:56:B1:26:8C
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:3f:7a:dd:f5:3c:f4:0d:98:a5:4f:50:c6:34:39:ab:22:
0e:7c:93:60:dc:cb:41:d3:ac:cb:f0:29:43:bd:62:2e:97:20:
cf:3e:03:dc:ee:3e:2a:f8:62:95:0a:2e:2f:45:b3:6d:0b:19:
ef:6a:34:39:76:1d:5f:a3:f8:7d:71:78:52:ac:e3:93:2e:2a:
64:32:db:99:93:16:2a:c4:81:41:8b:8a:e6:c7:22:b8:8b:45:
dd:c8:8f:5d:86:34:7e:a7:14:ad:5e:17:4a:b4:b7:a2:95:24:
b6:ab:c7:84:a3:f7:78:3c:ad:ba:a8:36:b4:58:de:22:d5:5f:
48:79:14:c6:49:a7:bd:ea:77:be:a7:14:54:c1:9d:fc:7a:f2:
a3:c5:2c:52:9a:e9:b4:3f:0a:b0:ea:05:02:29:9f:7b:e9:49:
84:92:8a:ba:8b:7b:97:ea:f5:c5:2b:31:14:ff:2b:c3:32:66:
2d:c7:0b:9d:fb:46:8b:0b:c1:0d:98:84:85:c5:3c:37:cb:a7:
f5:24:d1:e5:39:f4:d0:30:25:40:0d:07:2c:dc:85:24:4e:22:
11:85:12:f0:49:09:e8:9b:79:57:77:ba:d7:fc:0c:b2:19:e2:
0e:43:93:64:80:f0:46:3b:90:3b:61:50:8d:ea:3b:6b:57:d0:
cb:b3:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:24:51 2026 by rpki-client