Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: RkUzJ4hpOfjdTW6klekCE0leRxJx/PGpQ0sSmKe59fg=
Subject key identifier: 89:6E:77:46:8E:8A:12:32:56:18:47:13:F9:1A:12:86:A3:3F:75:1C
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 01A0D8DF648380C6FE2D2AEE14F44521AD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 087C
Signing time: Fri 25 Sep 2026 14:01:53 +0000
Manifest this update: Fri 25 Sep 2026 14:01:53 +0000
Manifest next update: Sat 26 Sep 2026 14:01:53 +0000
Files and hashes: 1: 7ObucnjBknjOc9VGyDvq-rah57Q.asa (hash: AfmsB5ElxTW0o9bXlvelsvJ0CpTckZTI7iwTHE4nG1E=)
2: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: UDnhjYmLfYYwza+DE92DHQFI7Wy+TaVoDvzz5gExBxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:64:83:80:c6:fe:2d:2a:ee:14:f4:45:21:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Sep 25 14:01:53 2026 GMT
Not After : Sep 26 14:01:53 2026 GMT
Subject: CN=896e77468e8a123256184713f91a1286a33f751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:7e:78:4f:eb:12:0c:ca:ab:3c:11:d5:6a:
33:34:c1:bf:95:12:7d:84:91:65:7f:2a:cc:ac:1e:
47:c1:68:ed:22:49:f4:2d:18:bd:d4:0f:a3:a3:99:
e4:a5:50:0c:3e:c0:2f:1c:d3:34:c9:94:67:ed:bd:
dc:92:2d:6a:48:99:db:ac:d7:bd:ac:7c:52:89:c7:
12:ad:a5:58:bd:a2:f2:23:65:d3:19:ae:7f:57:4f:
c7:c9:7b:a1:63:c0:e2:52:76:71:6f:d6:49:96:75:
4d:13:51:b9:e1:57:a4:50:8b:71:b2:9a:10:c4:58:
86:c8:c3:81:0d:87:9f:f9:be:c5:46:64:a2:79:2d:
df:1b:9c:9b:a1:80:d0:68:bb:ae:b3:ea:97:44:f1:
96:59:23:9d:23:65:f4:ff:14:61:06:1f:09:55:0c:
42:2d:4d:35:e3:ba:35:ba:cb:35:98:b7:8f:9c:99:
f5:8f:5f:13:74:6e:c1:b4:c8:fc:58:5c:f2:d5:19:
ea:8f:45:de:2b:c8:b0:a1:7a:02:ed:6f:28:3e:eb:
fc:6d:ac:c5:51:a6:ca:54:bb:8f:a6:28:86:54:21:
a5:21:3c:aa:19:b1:14:4d:f1:4d:11:d1:1f:65:2a:
d1:d1:75:c1:82:2e:45:25:18:72:03:f3:05:c9:a5:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:77:46:8E:8A:12:32:56:18:47:13:F9:1A:12:86:A3:3F:75:1C
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3e:a7:47:e8:f2:61:15:44:00:80:99:5e:ce:55:b3:36:3f:
06:76:72:90:5d:36:ff:86:de:68:ac:12:dc:0d:ee:68:b3:7f:
b7:8e:83:39:f2:3f:d6:f3:e3:47:8e:ac:d2:2e:3f:6e:3f:13:
62:9e:89:ab:ce:7d:c4:5f:19:71:6b:86:55:df:14:46:27:16:
b6:b8:37:c1:07:1e:dc:30:fb:dc:84:c5:e8:b6:fe:6d:d0:8c:
cb:ba:ee:7e:d8:0e:cb:57:cd:ce:58:33:79:08:9f:d8:bb:0b:
28:6e:50:fc:80:01:bb:f3:80:41:57:a0:87:81:5b:4d:47:46:
95:3f:34:1f:db:39:d7:06:da:59:65:51:91:bf:e6:6c:d8:94:
cd:35:da:83:6a:c5:94:33:b9:c4:19:2c:0e:f2:00:3e:09:9c:
e3:32:c3:8a:1e:c1:55:98:7a:d3:ff:45:69:5c:39:ba:6f:72:
43:75:27:12:e6:d6:72:c5:5f:f9:50:20:3f:09:cf:94:62:45:
5d:ae:a0:e8:5b:a7:ac:a6:c8:c9:0d:a5:fe:88:2d:3d:ae:c8:
78:99:fa:bd:b2:d3:53:60:61:9c:2c:c6:3a:75:e7:7b:b8:2f:
02:05:d5:ac:39:64:7e:2b:8e:5f:1e:ad:aa:b9:c1:9d:c1:e0:
5a:1a:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:38:06 2026 by rpki-client