Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: /q4UCR7VydQ4zqYu91Ueq0AyC9PqoA2ZOD2qd9/Zg1s=
Subject key identifier: E8:9A:BC:8A:6E:2D:0B:7E:5B:FD:01:42:7D:51:10:3C:07:98:AB:C7
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A1DB6FB6E003D2FC8BCBA5A67829852CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0B45
Signing time: Sat 14 Nov 2026 19:01:33 +0000
Manifest this update: Sat 14 Nov 2026 19:01:33 +0000
Manifest next update: Sun 15 Nov 2026 19:01:33 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: keNWnsBQglOUI7+g7NiqpZpL0LFZJDh5uzr0sOz19eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:b6:e0:03:d2:fc:8b:cb:a5:a6:78:29:85:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Nov 14 19:01:33 2026 GMT
Not After : Nov 15 19:01:33 2026 GMT
Subject: CN=e89abc8a6e2d0b7e5bfd01427d51103c0798abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:49:8f:9a:ec:d8:7b:d6:30:45:6c:a8:66:
1d:64:23:0a:06:d1:1d:52:b9:70:1c:14:5a:a8:e0:
af:68:da:f9:f1:37:57:42:0f:ce:6e:47:dc:85:57:
0e:41:33:e6:16:54:48:4c:d3:29:34:02:60:e4:91:
91:df:e8:f2:23:ff:05:57:6f:0b:0e:36:ce:51:c8:
97:18:10:f9:f0:6f:9a:41:69:5a:30:5c:64:ff:b9:
9e:aa:91:a4:6c:b5:f5:5a:94:5c:a9:c7:48:84:58:
dc:1d:f5:08:5a:1f:28:ef:71:24:1a:7a:f1:40:80:
2d:f3:44:3f:a9:45:1a:68:87:f2:af:2f:41:3f:f5:
49:f5:70:dc:53:28:31:f7:0b:5f:02:65:dc:f1:6b:
ec:bb:38:03:47:d5:14:a0:fd:8d:6a:9c:af:9d:0b:
ab:23:81:31:35:ac:61:80:27:75:62:2e:60:e4:0d:
77:33:7c:c9:02:0f:3c:7e:1c:d7:a8:6d:e5:a4:3e:
06:3d:b6:7a:ce:f5:98:21:3c:d1:a5:70:ca:19:57:
d0:7e:6b:18:3a:62:47:4f:14:4d:17:89:90:78:8f:
f9:bd:62:4d:93:eb:1f:60:49:a0:7f:4c:91:31:a7:
02:15:54:a1:e0:73:31:c4:30:a3:c4:bd:c8:02:5f:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:BC:8A:6E:2D:0B:7E:5B:FD:01:42:7D:51:10:3C:07:98:AB:C7
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6c:23:11:35:ca:86:8c:68:9b:47:fc:08:f6:f4:14:67:71:
66:bb:66:28:c1:3c:46:c4:44:eb:3e:2c:a0:ab:cc:a2:44:1d:
dd:87:21:f6:10:1b:78:16:99:b5:d8:0d:33:d9:ef:fe:e2:d7:
8f:20:93:7e:db:ed:81:69:28:17:85:be:a8:b7:53:24:e8:57:
6e:96:23:3e:30:56:79:70:07:76:85:b2:b6:bc:84:a2:a9:01:
fb:a4:e1:3b:8e:e3:cb:b0:26:ed:c6:9b:57:53:cb:37:0b:80:
e5:58:21:e2:29:98:93:7d:6c:43:c9:6c:27:95:2e:f2:64:b1:
7e:db:d5:aa:6d:f8:fb:8f:f0:38:ec:94:56:12:2d:49:26:17:
73:97:b3:f5:d9:49:d1:85:9e:5f:50:db:ab:2b:b1:b3:e6:62:
75:9f:36:58:f3:a8:c0:14:38:d8:a2:dd:fd:7f:bf:47:a3:a9:
da:4c:6b:47:7b:ce:ad:96:cf:8d:e6:3f:23:61:75:5b:33:3b:
5e:60:fc:8c:d5:cc:5e:1f:7d:23:e7:3c:d0:76:89:48:af:9a:
3c:d6:c6:88:70:00:b0:bb:60:e7:b8:be:9e:70:ad:c4:65:3b:
09:5f:09:23:f4:9b:aa:ba:f8:3d:0b:61:01:c0:ab:27:4e:d1:
ca:7f:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 03:32:15 2026 by rpki-client