Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: ToKF24CWF/+Ts6cuVuF7waNzmuIEqr0WiRi17QnP9mA=
Subject key identifier: CD:1A:92:81:29:9C:94:38:BD:08:9A:49:D2:92:05:07:D8:FE:B7:3C
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 01A0D45D8F5CEC687F1980DB13176C70ECFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0BC1
Signing time: Thu 24 Sep 2026 17:01:36 +0000
Manifest this update: Thu 24 Sep 2026 17:01:36 +0000
Manifest next update: Fri 25 Sep 2026 17:01:36 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: IhgxSa9kEiYV+p31X/IslI6WsWd7T5cIZJgFadIat1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:8f:5c:ec:68:7f:19:80:db:13:17:6c:70:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Sep 24 17:01:36 2026 GMT
Not After : Sep 25 17:01:36 2026 GMT
Subject: CN=cd1a9281299c9438bd089a49d2920507d8feb73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:64:1b:aa:2c:25:f3:d1:ac:a9:c5:6e:63:
95:89:32:11:c3:68:42:12:44:32:8c:5d:45:48:7a:
c3:32:f0:19:ef:d1:fd:22:ff:ce:82:b4:75:71:44:
fb:ab:96:2d:88:0d:fd:05:a1:e7:16:30:ed:d5:ee:
02:a8:a9:57:62:64:85:37:1c:ec:c5:43:d2:12:9d:
55:55:6a:4e:27:72:c9:7e:07:fb:53:8b:5c:93:45:
63:d6:f9:34:ab:67:b6:dc:28:c8:e8:16:27:2d:df:
7f:2f:b3:b9:be:54:96:4b:2c:a8:80:31:de:3b:ef:
e5:46:59:ac:5f:5c:cd:4d:d8:7b:36:50:10:77:8a:
45:0e:b6:2d:8c:24:3e:2c:ca:80:a6:86:90:16:40:
ff:b5:ed:fe:31:9b:ce:a5:2c:5d:6e:03:5f:6f:f5:
2c:dd:1d:a8:c1:05:2a:58:ca:e8:69:95:58:2d:b3:
90:99:f4:52:9c:70:df:d0:54:4a:0c:4b:a8:71:50:
d4:a9:f0:6d:ae:b0:e4:ab:ea:4f:21:7d:a9:72:5f:
4f:22:21:55:e9:71:0f:7b:35:0b:7e:09:10:0b:bc:
70:0f:0f:58:27:1e:f8:e0:77:b2:21:92:81:2e:2d:
d7:47:a4:9e:8f:37:9d:6e:c6:94:f2:09:3f:28:44:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:92:81:29:9C:94:38:BD:08:9A:49:D2:92:05:07:D8:FE:B7:3C
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b5:03:e2:21:8c:51:5a:6a:9b:ef:e8:2b:fc:20:d1:79:7b:
a1:a9:b1:f7:65:a8:b0:eb:25:0f:ef:3f:21:38:1e:5e:71:70:
48:97:1d:a3:d5:d6:1f:c0:ff:bd:1a:db:80:5e:2c:86:d0:ed:
99:ba:d8:9e:f0:7b:04:8b:36:08:74:ce:9c:d0:6e:f1:f9:3d:
0b:24:21:8d:42:97:77:6a:ca:2c:3b:a3:91:c1:62:ee:1b:4e:
86:89:97:38:93:69:10:9e:2c:97:9b:77:b5:ca:b2:cf:1e:4d:
79:66:ea:19:39:d5:6a:07:f5:1b:45:eb:d6:15:1e:7a:80:06:
73:e1:70:e8:54:69:4d:39:47:44:1b:34:ab:16:69:7f:3b:f2:
ad:e3:da:37:09:52:0b:13:09:7f:a8:2d:5b:98:8a:2e:09:f1:
8a:98:f3:b2:94:a0:ca:c1:f1:bc:5b:99:e5:36:e9:03:b8:88:
59:14:a9:ef:cb:97:43:ec:4b:47:cf:e4:76:0f:19:b1:88:2b:
d3:d1:ca:ec:e1:2c:2b:3c:77:7a:33:04:fc:9e:19:2e:fd:97:
37:93:2c:2c:15:24:a8:51:4c:d7:22:0e:9d:a0:90:5c:6b:f9:
48:3e:23:b8:ce:82:2a:b0:36:0e:ed:b3:d5:60:37:be:f6:af:
e2:25:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:36 2026 by rpki-client