Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: LzcRwP5JNLphe83tRPDKyDRzzO278XD4OXgM3+0h3wU=
Subject key identifier: 0A:62:22:0B:E2:49:52:3B:24:38:BD:B7:90:42:85:7D:B5:CE:86:E8
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 01A0CAB51257415745284A2C3CF143271C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 19FD
Signing time: Tue 22 Sep 2026 20:00:59 +0000
Manifest this update: Tue 22 Sep 2026 20:00:59 +0000
Manifest next update: Wed 23 Sep 2026 20:00:59 +0000
Files and hashes: 1: 5zZlQrVbuy95V9_g-dvn6SEsMXc.roa (hash: docnOoPQs5bVmN+gWdBUoeRdhc/v8Od4pPggD+aPR80=)
2: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: 8Mpp7okYB57EbqmNAoHSv3niT8yoJPiy4S8ckkbVd+g=)
3: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:12:57:41:57:45:28:4a:2c:3c:f1:43:27:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Sep 22 20:00:59 2026 GMT
Not After : Sep 23 20:00:59 2026 GMT
Subject: CN=0a62220be249523b2438bdb79042857db5ce86e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:dc:c5:70:7a:dd:b2:8f:1b:a7:b2:c2:65:
1a:65:22:41:fa:84:94:a6:59:c2:4b:6e:fe:f6:29:
cd:f0:d4:25:f6:eb:2a:77:59:26:01:e5:41:c0:54:
83:71:8b:b2:1e:7a:34:a3:14:90:fd:b7:f8:28:92:
69:e9:fd:2c:21:e8:2f:fe:7e:df:3a:02:e9:5e:58:
28:32:e4:9f:7c:8d:63:4b:97:dc:51:79:84:a4:6f:
16:56:30:eb:01:17:72:69:28:15:fb:de:6a:ab:f4:
fd:00:42:d3:39:ae:28:99:04:ea:7c:d0:28:0b:f3:
cc:69:99:7f:c6:31:70:e3:9a:cc:f2:fb:be:01:c1:
cb:7f:be:90:09:f7:c3:de:ab:74:52:72:11:0c:6e:
0a:fd:01:f1:27:fc:06:cd:65:f5:48:2a:d5:d1:1d:
21:77:ab:9f:9d:a1:66:6b:3e:45:23:42:d7:6f:79:
03:25:17:ad:33:be:ec:71:0c:a9:2d:83:1b:2f:6a:
1c:45:28:d7:ef:ee:39:71:ca:06:48:3a:9c:95:f9:
dc:e2:d7:60:6c:d1:97:48:a3:ca:1a:46:36:e5:7d:
14:c9:6f:a5:4a:bc:ea:3f:3a:ea:cb:2a:cf:86:2b:
e4:85:0d:18:07:71:f0:a7:25:c4:aa:b6:85:bf:19:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:22:0B:E2:49:52:3B:24:38:BD:B7:90:42:85:7D:B5:CE:86:E8
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1f:2d:81:3f:c6:4c:63:2c:76:bb:ac:5b:fa:28:bc:eb:ec:
be:16:ba:b6:97:03:09:d9:8c:b3:40:50:97:2e:f8:f7:63:fc:
70:cf:de:da:84:2e:74:51:ba:90:6d:c6:1a:65:29:ce:2a:b6:
c3:de:4f:25:4c:74:cc:8b:4a:1d:3f:42:15:0f:ba:a7:76:27:
cd:75:3d:cd:0d:fb:83:4c:f7:41:58:38:e7:63:f2:2f:d8:34:
dd:e7:b8:a4:da:f2:98:6e:3e:c0:3c:f0:d7:0b:9b:f7:bb:4b:
a4:d7:67:8e:45:28:3b:2d:b6:35:bc:8c:2b:fa:3a:c2:09:82:
0f:88:0d:66:78:6b:2c:46:e3:83:71:e5:69:d8:00:8e:d0:7f:
19:71:f8:6e:25:20:0b:88:ca:76:19:50:0e:10:f0:6f:64:0f:
a5:64:a1:20:3e:69:b7:5b:0e:72:ea:16:6e:45:e7:12:04:af:
9f:b3:d3:02:e0:70:87:64:c1:dc:49:5e:7c:4a:9e:11:ca:51:
c9:85:d6:33:22:08:6f:f3:08:9f:00:84:0e:7f:4c:23:60:53:
db:85:75:3f:41:90:94:8e:6b:32:f9:48:a7:23:0a:a6:77:5e:
fe:19:d2:f9:d9:aa:c2:ba:6b:91:aa:48:fb:c2:bb:de:ae:ed:
0e:cc:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:59:30 2026 by rpki-client