Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: 6+XA7aaJtGQuWARMVE1uNTl1hqvPTpciVPzj0Iju/s4=
Subject key identifier: B2:3E:83:D1:CD:78:85:24:5E:EC:36:5A:E6:11:72:FA:CE:5D:63:C8
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 01A0D87241DD497916D1A126F010BE627C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 1599
Signing time: Fri 25 Sep 2026 12:02:41 +0000
Manifest this update: Fri 25 Sep 2026 12:02:41 +0000
Manifest next update: Sat 26 Sep 2026 12:02:41 +0000
Files and hashes: 1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: rmu48p/V6Aqp4ZFamY/v+aphSpzLr3ajalBLjwigS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:41:dd:49:79:16:d1:a1:26:f0:10:be:62:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Sep 25 12:02:41 2026 GMT
Not After : Sep 26 12:02:41 2026 GMT
Subject: CN=b23e83d1cd7885245eec365ae61172face5d63c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:4b:b9:be:5c:bf:6a:c3:c6:0b:18:ad:33:
77:c9:1b:35:b4:1d:4e:68:18:d7:9d:07:96:51:03:
4e:b3:b1:08:da:c9:54:25:6e:e9:3c:9e:b1:4d:3b:
3a:a5:c8:12:6b:e9:e3:cd:73:98:f8:d8:42:63:f8:
cb:49:b0:a4:5b:80:4e:cb:bb:64:6b:55:2d:a3:63:
96:bd:8a:28:6d:52:dc:5e:9b:85:c1:81:c9:a4:d9:
63:c2:62:cd:cd:f8:fc:01:19:c8:6d:39:f1:ac:8d:
a4:39:3e:7c:66:7d:94:5a:f7:49:fd:f7:38:25:fd:
b3:6e:bd:50:2b:22:40:ac:1b:66:19:5d:d1:ee:0a:
51:a8:1c:4c:3f:54:86:bb:6a:26:81:41:fd:20:5d:
c0:d1:ba:04:5e:d4:89:3f:86:3c:33:de:bc:53:40:
30:85:6d:c6:4b:20:a9:a5:ff:c5:ca:03:8a:21:37:
f9:b2:31:3e:1e:fb:98:1e:ba:34:29:0d:c9:a7:16:
fd:02:d2:43:4b:22:18:80:06:3a:f6:dc:83:19:4e:
ee:ad:9b:c7:b1:93:db:a5:cf:d7:a6:5f:ae:38:7a:
b5:73:7e:76:c0:d5:50:bf:51:de:f2:fc:c3:f3:a3:
8d:80:c6:7d:6e:7b:08:5c:bc:19:0a:ed:20:5a:0d:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:83:D1:CD:78:85:24:5E:EC:36:5A:E6:11:72:FA:CE:5D:63:C8
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:e2:b6:16:95:58:60:25:52:62:da:0e:a2:71:b5:09:68:
7b:4b:f0:8e:0e:9d:2e:7b:26:c7:a4:76:01:4f:90:33:11:05:
90:2a:ad:cb:35:fd:b6:08:73:e2:07:b4:9a:62:b2:b3:68:22:
3f:22:ce:d8:34:be:8d:05:61:f0:09:d4:de:9a:31:b4:75:65:
a2:75:be:cb:f8:07:d5:96:2e:45:f5:d7:84:52:50:47:6d:40:
29:da:f4:a6:1b:40:4b:9e:c2:d1:e5:56:57:98:1e:a4:6d:ec:
23:09:56:64:9b:a8:86:a8:e5:cc:c8:32:07:8c:2d:89:14:67:
d2:fb:28:65:47:37:5b:09:8b:42:34:19:9b:24:f9:16:97:aa:
6b:31:0e:e8:a6:09:00:25:ae:ed:ae:18:b0:e7:6c:d8:1e:07:
03:ab:33:7b:93:d2:84:ac:a9:ad:54:db:d1:3a:db:6b:7e:44:
92:ae:aa:46:f2:e9:23:7e:59:bb:65:53:77:55:c3:0e:37:82:
a2:b2:75:05:24:d6:e0:32:49:60:2d:43:14:51:40:61:f2:dd:
90:cf:58:1d:8d:b5:3a:3e:a4:46:e3:d5:98:db:33:11:61:74:
f4:2d:5b:97:4b:9a:91:95:ca:45:a4:66:5c:61:9b:6e:a6:0e:
2d:eb:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:15:43 2026 by rpki-client