Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: yKcnkhjHn9W2ttQNNLXDSWXlOTdOOamURAZW2ol7b6g=
Subject key identifier: 08:C3:E6:7D:6E:66:49:09:66:DB:6E:90:C6:58:37:40:41:8F:41:82
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 01A0D5A72C97960D965DDA39EAFB86A622CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 09CE
Signing time: Thu 24 Sep 2026 23:01:37 +0000
Manifest this update: Thu 24 Sep 2026 23:01:37 +0000
Manifest next update: Fri 25 Sep 2026 23:01:37 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: oZPSPlmieKhHai4NI7ymRnmFhJw7soTjZNFIevVxrT8=)
2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:2c:97:96:0d:96:5d:da:39:ea:fb:86:a6:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Sep 24 23:01:37 2026 GMT
Not After : Sep 25 23:01:37 2026 GMT
Subject: CN=08c3e67d6e66490966db6e90c6583740418f4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:20:1f:c7:56:45:66:b5:6d:75:b8:90:0a:
17:de:c3:82:f1:89:9a:eb:5a:69:fe:bc:9f:cd:20:
be:98:3a:d6:a1:c0:a4:de:78:17:57:d3:25:61:c0:
1f:dd:a6:82:94:6e:cd:86:48:da:4e:b3:15:ee:4c:
21:ae:53:8f:f6:47:83:3b:45:b9:36:76:c2:fc:44:
54:a9:8f:a4:69:a4:62:e5:d7:a8:e1:fa:64:57:64:
47:29:4f:b0:3b:17:b8:2e:77:0c:94:9c:d2:73:f8:
49:eb:a9:02:67:b3:93:da:42:44:78:a0:37:e0:de:
9a:2d:a8:19:0e:98:bf:58:9a:f0:41:2f:e9:47:d6:
af:9f:c1:b3:b2:3c:88:78:3f:a5:a7:6b:b8:7a:20:
8d:88:f1:ac:94:9d:96:24:f0:34:b6:97:4f:f6:a3:
ae:83:80:53:55:25:de:45:f1:76:dc:58:7b:77:56:
40:cb:f7:15:f5:1a:5c:c8:11:6c:b3:bf:49:48:14:
91:f2:9d:7b:29:d2:e4:09:91:68:b4:ec:4e:3a:e8:
b1:b1:19:a9:bb:08:fb:3b:fb:9c:ff:9f:28:fb:cd:
2d:92:5b:55:ce:d6:1c:94:97:14:5f:ba:4d:61:25:
2e:8d:c8:94:db:56:3d:a9:44:06:00:f2:12:1d:94:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:E6:7D:6E:66:49:09:66:DB:6E:90:C6:58:37:40:41:8F:41:82
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:32:da:90:48:19:29:3e:67:ac:21:5e:e3:05:ad:33:e5:c0:
84:78:c0:8b:f6:6c:17:9c:33:9d:95:0b:2b:d7:f9:ad:36:c6:
8f:2a:97:9b:3a:7f:b3:fc:20:76:63:9b:35:83:ac:6b:89:b0:
20:7e:1a:2f:ed:a9:6a:c2:d3:d7:31:31:1f:4c:a3:93:3f:72:
76:b9:cd:a9:12:80:5f:6f:f0:ba:dc:35:fd:dc:2e:26:6a:d4:
c1:a3:a2:1d:48:d0:ac:35:02:48:45:7a:b7:96:9a:aa:7e:7a:
bf:23:f1:e9:ac:5c:f0:68:e2:46:1b:ad:c6:ef:2c:16:91:74:
e6:50:23:5d:31:84:7c:23:db:72:51:57:29:ee:8e:ac:d2:65:
f7:26:a4:00:f5:98:1b:2f:bc:a2:f4:de:23:18:a8:95:89:0a:
f8:f9:19:be:7b:fe:fa:f5:de:86:0c:71:af:7e:35:07:d5:a8:
40:90:20:e4:b4:63:26:2b:4a:ae:ce:a9:5b:f8:e0:5d:76:10:
6b:58:eb:ae:4c:80:ca:bd:50:63:33:0b:37:fc:fe:ff:a7:cb:
4e:a6:22:c1:d9:46:ac:f7:04:92:b4:4f:50:b7:ac:93:53:ea:
7a:6f:0c:d7:be:b2:bb:68:9e:e9:fb:4f:25:14:3f:d7:c3:1a:
06:72:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:34:20 2026 by rpki-client