Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
File: h2mm8aRv5rEvfl8cASyKTMvve58.mft (raw, json)
Hash identifier: nKSFsIsy+bFggObf26u6DSfBth0Fh2HjC70DvK+Ht90=
Subject key identifier: 34:62:FC:50:00:06:70:7B:56:E6:B5:F0:68:25:86:76:9B:35:90:70
Authority key identifier: 87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
Certificate issuer: /CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Certificate serial: 01A0D9BB521070A1CF3D4EFDF7D77A2B46BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
Manifest number: 01A4
Signing time: Fri 25 Sep 2026 18:02:07 +0000
Manifest this update: Fri 25 Sep 2026 18:02:07 +0000
Manifest next update: Sat 26 Sep 2026 18:02:07 +0000
Files and hashes: 1: Pwqn4oY0KPuWxFDB-Ztc1zWrVwI.roa (hash: j9WbrXVSr2U86ODDAeyZl+rZySS1lzxdLUlG17Tpq0c=)
2: h2mm8aRv5rEvfl8cASyKTMvve58.crl (hash: En+10nfRYcAQ7ZQ+awJLEuWdQ66RKszrtYnl+CcWpk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:52:10:70:a1:cf:3d:4e:fd:f7:d7:7a:2b:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Validity
Not Before: Sep 25 18:02:07 2026 GMT
Not After : Sep 26 18:02:07 2026 GMT
Subject: CN=3462fc500006707b56e6b5f0682586769b359070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:fe:80:64:62:6a:9c:cb:88:77:6e:3e:f1:
80:16:48:23:b6:26:e0:c9:29:fd:fb:ff:a4:a6:39:
aa:bd:fe:ad:8a:b9:82:41:cf:68:c1:29:6d:89:4a:
6a:2b:eb:96:a8:1b:81:2f:33:e8:14:e2:97:cf:7c:
40:fc:98:6d:ff:7f:b0:2b:6c:92:50:de:9e:2e:cf:
d1:e7:78:15:e4:db:06:0a:46:f7:71:9a:8c:26:67:
1b:43:2b:ad:94:91:59:a1:fa:44:b3:5c:ba:de:fd:
3f:5b:d2:e6:30:f1:ee:8b:ca:5d:dc:28:2a:25:02:
43:b0:c9:09:aa:6f:fc:f9:73:bb:c9:f3:d9:2b:77:
da:06:25:19:24:13:87:30:fc:63:81:0a:5c:bf:33:
a1:79:d2:5f:60:f2:31:a2:07:4d:f0:83:dc:b1:ed:
1a:f0:ef:17:ed:02:9b:81:2b:3e:f1:46:2d:d6:fb:
44:f7:34:db:a4:a1:79:e6:6a:29:d0:a7:2a:08:34:
d5:12:68:d7:0e:8a:01:c0:58:07:07:a6:9d:fa:bb:
37:40:29:58:36:8e:f5:fe:2f:ae:4b:fd:02:71:ce:
2c:0f:40:5c:31:09:10:6e:14:dc:5f:35:54:6e:30:
11:34:36:2b:d4:c9:60:53:c2:12:5d:27:57:5e:b0:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:FC:50:00:06:70:7B:56:E6:B5:F0:68:25:86:76:9B:35:90:70
X509v3 Authority Key Identifier:
keyid:87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:49:0a:79:84:e7:41:69:09:29:9b:d3:39:71:bd:5f:e2:2c:
43:12:cc:4c:ba:4c:1c:51:aa:b1:eb:e5:39:8a:13:c9:81:83:
01:5a:0e:98:28:8f:df:86:4e:7e:6e:c7:9e:0c:21:59:27:04:
67:28:ba:1d:5f:09:b9:1a:a2:ba:dd:70:1b:cf:6e:10:b6:6b:
e5:2f:4d:71:d5:9f:35:5b:d6:94:ea:f9:15:ad:61:fb:3e:b3:
3b:dd:70:1a:20:7a:4b:ca:e8:c9:56:de:0d:f7:54:94:f4:17:
40:e3:ab:77:fe:f0:7b:16:17:75:ec:be:af:1d:75:8b:d8:0f:
cb:05:94:b4:8b:d5:8c:f4:80:67:2f:38:15:f7:3a:f9:d5:03:
b9:6b:58:28:da:f8:96:e6:c3:7a:87:f2:50:04:30:4e:92:21:
e2:14:2c:d8:b0:85:51:24:50:30:68:54:0d:c6:1d:16:cc:5e:
7c:09:0a:14:44:92:66:7e:97:7a:ba:2b:3d:b1:cd:bd:c1:7f:
62:55:8a:42:11:d1:6b:52:60:b2:ea:15:54:2d:9e:93:7b:87:
ee:10:2d:e5:f8:c0:c5:71:1c:a6:3d:cb:db:67:c1:8b:db:3f:
bd:18:e9:eb:b2:72:ac:b5:6b:b6:ef:bd:6d:5a:eb:fa:6d:6c:
99:55:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:33:22 2026 by rpki-client