Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
File: hHypPNDOjUlqTNkjidTXsiB0T3g.mft (raw, json)
Hash identifier: D1nbX693adscuVKjpTZsbcki2Cvq7EBjsWAR3roKZx4=
Subject key identifier: B0:1E:6B:2E:0F:DF:F8:B2:3A:84:33:E9:18:46:5C:42:39:A5:D1:FD
Authority key identifier: 84:7C:A9:3C:D0:CE:8D:49:6A:4C:D9:23:89:D4:D7:B2:20:74:4F:78
Certificate issuer: /CN=847ca93cd0ce8d496a4cd92389d4d7b220744f78
Certificate serial: 01A0D4947C9C5077E05B43DF77EFDBB221E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHypPNDOjUlqTNkjidTXsiB0T3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
Manifest number: 0133
Signing time: Thu 24 Sep 2026 18:01:35 +0000
Manifest this update: Thu 24 Sep 2026 18:01:35 +0000
Manifest next update: Fri 25 Sep 2026 18:01:35 +0000
Files and hashes: 1: hHypPNDOjUlqTNkjidTXsiB0T3g.crl (hash: UZiq2GEM0VXUrwpv4ULXDuSMPH4ECuyUD6jAJjqtZp8=)
2: xCiY3nX8uoDJZB9zg6bY7Xqx-Qw.asa (hash: WvhH8RuJyfdWqZ9IZPEjWSY4dIG3+tKUFvJ+HKnCERU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHypPNDOjUlqTNkjidTXsiB0T3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:7c:9c:50:77:e0:5b:43:df:77:ef:db:b2:21:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847ca93cd0ce8d496a4cd92389d4d7b220744f78
Validity
Not Before: Sep 24 18:01:35 2026 GMT
Not After : Sep 25 18:01:35 2026 GMT
Subject: CN=b01e6b2e0fdff8b23a8433e918465c4239a5d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:4c:74:6e:d1:73:fc:d6:58:3c:30:94:c1:
68:75:e4:f8:a4:c1:18:a9:6f:47:b0:99:69:81:5b:
82:9e:0a:27:87:e1:65:f8:9c:32:95:9c:a6:99:1f:
a8:73:a7:7e:65:58:07:18:21:47:10:d8:3c:7d:0e:
95:db:4a:a8:44:d1:6f:cf:cc:12:d7:e9:9c:db:ae:
27:9c:4f:1a:c4:2d:d5:02:45:a7:e4:d2:6f:0b:0b:
81:df:80:d6:5b:5f:5c:d5:fe:4d:c9:72:53:5b:69:
87:74:dd:d0:e7:dd:35:a9:c9:1f:02:5b:19:64:ff:
43:00:75:fa:c9:e9:18:86:a3:33:e7:5a:bb:5a:d0:
2a:a1:a9:f6:eb:36:3e:d4:d8:71:24:6d:28:57:23:
86:18:f1:db:08:c9:7a:8d:00:dd:68:70:c0:84:8a:
27:69:ea:c2:83:db:9b:e1:59:8c:85:d3:d6:90:a2:
61:6f:db:9f:67:b3:ad:ca:20:02:d5:09:e5:66:f3:
de:0d:9a:0a:bf:0f:f6:c8:a5:87:4d:08:c1:28:27:
94:ba:dc:ee:95:b4:9f:5d:e1:8a:fc:41:0a:75:77:
56:94:9e:d6:2d:6c:a8:5c:14:25:bd:14:88:c7:67:
26:76:17:7b:51:9a:b4:2a:e7:6d:55:cc:f0:23:f8:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:6B:2E:0F:DF:F8:B2:3A:84:33:E9:18:46:5C:42:39:A5:D1:FD
X509v3 Authority Key Identifier:
keyid:84:7C:A9:3C:D0:CE:8D:49:6A:4C:D9:23:89:D4:D7:B2:20:74:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHypPNDOjUlqTNkjidTXsiB0T3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:fc:4c:0f:3e:17:31:f7:f7:74:28:eb:9c:68:ed:13:97:
c9:e4:50:93:e6:ae:6c:8b:4c:82:7e:75:c9:b7:aa:40:64:03:
2e:1f:ab:9b:38:f5:4e:2c:2a:6d:88:e6:ac:52:a7:5d:98:e9:
bf:a5:75:ab:90:b6:24:e6:ed:b7:12:4a:18:85:8c:72:f6:66:
61:cc:db:8e:4d:a8:6c:5a:a0:ba:7f:7f:b0:a9:29:ae:78:1c:
7a:23:88:01:00:a9:99:6b:e8:7d:c2:2d:ac:df:d4:46:31:5b:
65:ec:cd:f8:46:c6:f5:fe:fc:4e:03:be:c0:da:28:16:c2:c8:
49:0e:88:d2:b2:fe:83:dd:94:2b:47:87:07:62:b9:32:14:72:
35:c6:c9:63:cf:09:f5:fe:b6:21:42:f0:bd:9a:34:b7:95:2d:
94:a6:b2:17:09:4b:7c:c0:12:15:77:18:28:75:69:4b:38:7c:
00:3e:09:c3:50:14:40:09:1c:5b:1a:d5:be:3d:56:01:05:16:
a9:0b:65:db:6d:3c:f4:8f:20:3c:d7:71:f1:e8:d9:93:fe:cb:
25:7b:d7:5a:e9:0d:b1:34:eb:08:ce:d4:6a:75:4a:a6:bf:70:
a7:a6:02:d1:72:e8:96:82:4d:16:ab:97:d2:44:40:86:2a:b1:
48:af:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:11:58 2026 by rpki-client