Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: YS6o06320A41j24bT2TSO8ojvTh7qOTM6ZPpAuzxatI=
Subject key identifier: 16:14:CD:59:31:18:C0:8C:E4:73:2E:34:64:61:1C:1B:D0:CB:05:73
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01A0D6F07C609667C6262316F1911422F8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1703
Signing time: Fri 25 Sep 2026 05:01:19 +0000
Manifest this update: Fri 25 Sep 2026 05:01:19 +0000
Manifest next update: Sat 26 Sep 2026 05:01:19 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: eHsmCZqZsyok5NjEM7VxlnnPw05FRPZFi5/9lKQumGY=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:7c:60:96:67:c6:26:23:16:f1:91:14:22:f8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Sep 25 05:01:19 2026 GMT
Not After : Sep 26 05:01:19 2026 GMT
Subject: CN=1614cd593118c08ce4732e3464611c1bd0cb0573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:14:4f:a8:fd:3b:9a:20:38:83:d7:7a:87:
e4:1e:e2:26:b5:eb:07:fe:98:15:26:fc:d9:34:a5:
df:c7:bc:38:45:49:3c:4e:5c:a5:31:48:67:44:bc:
41:fc:98:b3:b0:3d:3e:46:54:b8:23:0d:38:7d:ac:
de:69:ef:43:18:a4:50:8d:30:7a:dd:dd:c5:86:79:
cb:b5:58:c6:ec:99:14:a3:e2:e2:40:26:fe:69:55:
d4:01:0d:36:40:03:f2:f4:2d:75:fe:59:b7:00:be:
ff:68:f0:ab:1b:22:ce:69:c6:39:ff:91:6e:d5:c4:
a3:aa:5f:3a:ab:ee:ef:f9:ef:ba:06:14:2b:26:8e:
11:bc:3b:f6:aa:79:a9:16:a3:d3:48:b8:30:4e:97:
a0:40:b3:3f:99:85:77:a3:71:e8:91:93:ba:a1:b6:
25:a8:97:58:37:7b:c6:50:1d:53:5e:fd:3b:72:95:
97:0e:47:16:2e:8f:42:b3:95:0d:b4:fe:25:0c:c1:
9c:e2:53:7d:e5:b0:e9:dd:86:0e:0b:24:a3:ca:84:
b9:69:46:40:44:3a:ec:c5:01:26:82:d8:c9:a0:be:
78:65:36:77:b9:c2:a9:42:f6:60:72:9b:c4:1d:53:
3a:66:9f:55:a9:12:fe:80:91:18:96:67:a4:15:31:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:CD:59:31:18:C0:8C:E4:73:2E:34:64:61:1C:1B:D0:CB:05:73
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:4e:aa:cf:dc:de:c4:9f:9f:27:17:0e:13:10:ad:c0:cf:
7a:2c:39:8c:6b:65:4e:2d:5c:7e:79:71:8d:3c:68:79:75:35:
cf:36:04:a6:a6:fc:30:28:41:c9:7a:1b:ff:66:2a:d9:cf:e5:
a3:42:7f:8d:3a:5d:8b:28:f8:69:de:19:c9:93:c1:68:03:15:
a3:db:83:0e:79:c6:16:61:3e:d1:4e:10:63:54:e5:cd:82:e2:
95:42:49:d1:94:90:2f:28:20:21:70:b7:1e:89:3c:5c:dd:fa:
e3:95:d5:67:da:c4:e8:e1:94:5d:b5:8c:82:86:f4:51:0b:ae:
b7:1f:5b:72:1a:6c:b4:7b:e6:bc:89:c5:83:c5:a8:e6:3e:85:
da:2c:3a:5f:c3:6f:5b:fc:03:0f:9e:f1:3a:59:c7:47:81:f4:
ba:b4:8d:64:a7:04:b8:24:47:40:34:c1:3f:52:98:de:ec:f2:
88:83:b5:df:ad:59:a0:45:25:8a:ea:ca:5a:91:66:77:7b:9a:
4a:db:b5:d6:08:71:2a:7f:77:18:86:7a:b9:99:21:8c:79:2c:
a3:1a:36:d0:f7:36:ba:00:bc:d4:27:7c:5c:52:4c:59:46:1f:
d8:6f:0a:15:5f:c9:9c:5b:c3:c4:ca:00:ae:13:ce:d1:d2:f4:
6a:c1:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:02:01 2026 by rpki-client