Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: 5lHD57lCLLA2fKf14MvATRWeEl2axY1TPg11k7dNNVw=
Subject key identifier: A3:FD:18:54:82:5E:D2:F8:D2:85:96:12:42:0E:35:6B:60:47:3E:1F
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 01A1242F37A01798B1F5BA9D998215276CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 05:00:36 +0000
Manifest this update: Sat 10 Oct 2026 05:00:36 +0000
Manifest next update: Sun 11 Oct 2026 05:00:36 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: kjeb897hfr+9emtGKgJQ8/SD3W7qq4dM4PPn8G1eHfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:37:a0:17:98:b1:f5:ba:9d:99:82:15:27:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Oct 10 05:00:36 2026 GMT
Not After : Oct 11 05:00:36 2026 GMT
Subject: CN=a3fd1854825ed2f8d2859612420e356b60473e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:5c:62:96:29:7c:fd:8e:22:4c:f0:a0:f8:
bf:a8:d8:a5:0d:32:2d:72:db:26:59:6e:a9:10:60:
64:f3:f5:17:8a:8e:a2:0e:3a:5c:04:0a:58:fb:f0:
21:ae:ab:bd:2e:97:a6:c8:5e:a4:17:a7:29:6e:03:
ea:f0:5f:e1:15:fd:69:8c:92:8d:13:f0:73:69:7b:
53:53:1f:58:50:34:15:2f:ec:05:e9:5b:09:23:05:
d1:be:65:0b:14:dd:88:ce:50:78:05:9b:1e:0b:06:
77:6c:ea:c9:19:3a:a4:b6:cd:1e:0b:af:9a:fb:5b:
99:e9:a1:c7:ea:00:7d:ff:fd:b0:b5:36:a4:55:68:
12:19:be:0c:23:96:e4:f4:34:c8:78:ab:61:ce:c1:
2f:ae:ed:4b:d7:30:28:e2:52:f5:c7:2e:9d:99:62:
8b:db:e4:f2:a9:92:df:0b:ff:cb:82:c9:e6:81:34:
7a:4b:11:27:b3:a6:11:cd:93:4d:60:0b:bf:f9:b8:
f7:11:da:da:e0:09:cc:b7:6b:85:40:ae:aa:2b:cc:
72:be:d4:ce:91:5a:f4:a5:8f:a6:b6:7f:10:18:8c:
35:34:1d:b1:00:76:8a:12:27:a7:27:ce:11:58:af:
ab:d0:88:7a:5a:67:c0:55:f4:74:34:f7:d1:0c:c5:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:18:54:82:5E:D2:F8:D2:85:96:12:42:0E:35:6B:60:47:3E:1F
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:28:70:44:2a:e1:28:b7:39:a0:06:cf:97:da:8d:f7:75:
53:8a:00:68:8b:10:63:ee:99:e9:07:cc:10:9a:51:13:a6:23:
07:ef:3a:c7:36:0a:4b:93:0b:28:d4:af:5e:a0:f0:45:74:52:
15:0e:fa:fa:61:61:c6:5c:23:9b:8a:8c:00:a5:db:b2:f0:3c:
68:f1:be:64:97:07:1a:4f:b2:8b:2c:8b:35:63:03:92:64:0a:
24:71:a1:55:05:3c:fc:39:cc:11:98:9b:3e:5e:a9:5e:79:04:
4e:ba:e9:08:04:63:31:de:ec:62:47:9f:97:e9:ad:19:f9:55:
a7:5f:11:ac:6b:da:6d:ba:7b:6f:e2:7f:c8:28:54:5b:2b:71:
43:14:86:ed:65:77:6e:e9:d8:8f:0e:67:8c:70:d3:fb:0c:c9:
58:b1:39:63:ff:4c:69:f4:1c:0b:50:97:5d:51:1c:f2:7f:84:
67:3f:09:68:92:62:e4:9c:da:86:6d:93:13:d1:8c:9e:02:66:
bb:69:a2:82:57:24:80:c7:2f:1c:32:a0:67:f0:78:62:b0:37:
b8:52:52:f8:9c:9b:c4:df:a8:94:1c:6f:d2:84:ae:a5:9b:5c:
d9:be:c8:82:e3:cf:3d:ba:c7:3b:40:15:49:ca:31:4f:15:0d:
d1:a0:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:25:19 2026 by rpki-client