Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: nYI39NIi6WYZRz1W+ja5h1olO1t9yGCqz09GMhfRZgI=
Subject key identifier: 83:DA:E7:0D:01:D3:E0:9D:C3:EF:41:71:91:65:11:E3:75:E4:27:A1
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 01A13447854AD30D1B9CA50B37AD20D0B48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 03DA
Signing time: Tue 13 Oct 2026 08:01:04 +0000
Manifest this update: Tue 13 Oct 2026 08:01:04 +0000
Manifest next update: Wed 14 Oct 2026 08:01:04 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: lDUjnM1T8sWAq5RLG3ERcu2kA1tu9zbVNgI5BAQuC9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:47:85:4a:d3:0d:1b:9c:a5:0b:37:ad:20:d0:b4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Oct 13 08:01:04 2026 GMT
Not After : Oct 14 08:01:04 2026 GMT
Subject: CN=83dae70d01d3e09dc3ef4171916511e375e427a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:9f:50:87:af:de:d6:2a:e8:4c:b7:15:cc:
67:9a:6f:34:4d:6d:4e:c5:a9:72:8f:2d:62:04:96:
2b:62:58:46:bd:31:34:c3:49:16:88:06:ba:e4:4d:
cc:d2:a6:8d:8c:90:d4:7c:eb:ac:02:2e:54:6d:64:
52:0a:11:2c:f0:65:72:d3:f9:d5:46:c9:9f:a0:bf:
ed:5b:4a:9a:d7:c5:61:28:f0:0f:bf:71:eb:3a:5e:
4f:c5:d7:79:23:6d:08:82:24:27:f5:94:00:df:c2:
c3:6e:32:13:3a:6c:d7:80:c2:29:2e:66:7b:43:d6:
29:9e:80:fb:0e:7b:ab:6e:d7:b1:02:ee:4b:f3:db:
29:06:df:b5:cc:b4:d8:2b:0e:e6:24:e7:95:48:91:
ee:98:30:06:54:bd:a6:46:c2:c0:5e:28:c5:ae:b4:
72:17:53:49:7b:1b:60:60:ab:a8:48:f8:5a:76:54:
f5:2e:7f:4b:d2:7a:15:db:54:15:7b:87:fa:9b:6a:
2a:48:fd:5a:03:63:8e:37:e8:ae:94:15:d2:9f:8d:
bd:2d:25:75:94:0f:9e:f4:65:f5:f0:fe:62:8d:73:
62:bb:19:b3:b8:3a:e5:46:a2:dc:76:c8:0c:d3:a0:
aa:85:f0:00:6a:25:a3:5f:56:d8:a2:16:db:17:94:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:E7:0D:01:D3:E0:9D:C3:EF:41:71:91:65:11:E3:75:E4:27:A1
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b9:45:26:58:9e:96:28:4c:6f:c5:3c:d8:1d:bb:5d:d1:a4:
11:27:b5:29:7b:5a:17:5e:9c:cb:97:ac:07:b1:67:f9:f7:4a:
d1:fb:d4:9f:b4:86:25:da:a8:4a:79:81:b0:db:d5:39:2a:28:
cd:9d:bc:97:7b:f0:d3:81:dd:cc:01:d7:cb:a6:49:ea:e3:08:
ff:48:45:cf:3f:ab:74:0b:87:d2:09:c8:db:23:45:24:c5:79:
da:dc:23:a2:c6:c0:2c:95:da:31:d0:f6:50:d1:9f:05:d1:78:
f2:6a:08:49:8e:c6:17:38:9b:21:76:2b:e1:e4:dc:99:11:42:
ea:e0:a9:4e:76:dd:1a:8e:6f:32:d8:ac:7c:b8:c9:97:7a:e1:
71:5b:0e:67:a2:61:91:d4:7e:02:c2:60:c5:3f:b3:ea:7a:fa:
6d:1b:0c:dd:81:4d:57:ec:58:a4:93:7a:4d:84:e6:32:49:3f:
85:49:33:a0:11:87:16:3f:4c:ef:10:c0:fa:5a:76:e6:ab:f6:
1b:3b:98:9a:f5:a5:45:ba:30:63:d7:7d:7c:0f:18:cd:61:35:
0c:f9:3a:20:22:71:c7:d0:80:ae:b5:89:c7:8d:ff:96:d5:50:
fe:a3:61:f3:13:9f:0c:b4:17:53:1b:33:66:2a:d0:71:f8:f0:
43:8d:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:00:40 2026 by rpki-client