Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: 0EtzEYwXQWLlJrHQCUQ6Arl0QSQVFZV6AwjTbcczGq8=
Subject key identifier: FA:59:E5:99:39:A7:64:20:74:A5:E4:95:26:E3:98:08:CF:E9:2A:D0
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01A10DDF38B1B710CC4A597390898A3EA819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1718
Signing time: Mon 05 Oct 2026 21:01:35 +0000
Manifest this update: Mon 05 Oct 2026 21:01:35 +0000
Manifest next update: Tue 06 Oct 2026 21:01:35 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: IMthy96/fhnZ+xBeGSmJnIgOYapj46tO5gtWaAjjoPk=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:df:38:b1:b7:10:cc:4a:59:73:90:89:8a:3e:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Oct 5 21:01:35 2026 GMT
Not After : Oct 6 21:01:35 2026 GMT
Subject: CN=fa59e59939a7642074a5e49526e39808cfe92ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:61:86:8c:ea:30:6a:49:b1:16:54:32:3f:
8a:26:7e:f2:0b:2b:cc:fe:7d:19:6c:24:af:ae:12:
ac:28:5c:1c:47:71:d1:3a:64:11:74:30:43:2c:c6:
0f:e0:15:61:ae:14:ac:39:87:7b:e1:15:da:35:f6:
1b:d3:14:57:b0:cf:de:a0:5f:28:53:57:49:5c:93:
43:1a:b9:71:8a:80:4c:6f:c7:7a:97:3d:6b:c3:7e:
bf:8b:c6:74:b1:22:98:03:a4:dc:ad:77:6f:cf:01:
f0:ae:52:94:fc:90:2d:fc:fb:e9:7c:6f:30:2d:73:
58:fb:68:ea:f4:86:f8:25:38:67:6e:69:78:2c:e0:
0a:ae:0e:d7:4e:44:50:d1:9c:d3:23:9c:bf:d7:ee:
9d:23:1d:70:05:1e:d3:33:59:9e:d7:c7:0e:09:62:
a4:92:f0:4f:c1:ac:0e:cf:dd:5a:69:11:e9:a6:47:
ca:84:bd:f2:ba:17:0b:16:3b:9f:81:24:dc:b4:5e:
a8:36:1d:16:b6:59:56:05:09:88:a9:ce:4f:36:6c:
a6:fe:68:69:27:5a:b3:4d:8a:b1:57:c3:57:53:39:
8d:79:07:1e:db:94:3d:c1:b7:08:20:46:0a:f4:52:
59:c7:8d:da:b4:2a:84:d8:7c:e1:9b:85:ee:ca:b9:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:59:E5:99:39:A7:64:20:74:A5:E4:95:26:E3:98:08:CF:E9:2A:D0
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:28:0c:21:3c:34:b3:65:23:4e:20:8b:6a:9d:a7:e8:96:
44:b1:74:3d:25:20:19:cb:56:fa:4a:43:5e:93:eb:ae:49:a2:
c6:be:65:32:52:cc:01:dc:6c:74:1e:5c:9d:89:a6:7c:4f:fa:
e9:8e:d1:8c:40:7f:54:eb:f9:82:4c:13:b6:f5:12:50:1a:f8:
a4:1c:78:53:6a:ac:9f:75:f3:8e:f3:00:53:d1:e9:14:5c:50:
1d:73:dd:1b:fb:e3:0e:76:95:e3:ca:45:19:60:97:45:24:a2:
b7:41:a3:26:83:37:90:40:6a:b4:8e:ba:e9:4d:d7:84:6b:f2:
0a:74:08:a4:da:f1:86:c5:5d:22:3f:df:c2:5c:5f:f6:aa:5a:
a4:bb:78:39:c4:c4:8f:cd:79:db:00:7d:55:6f:85:f0:f0:c4:
bf:40:ee:d9:12:1c:db:72:ab:c0:c9:ca:db:81:c5:64:03:20:
9e:79:0e:b4:f7:5f:3e:e7:bc:80:67:20:06:85:08:1b:66:86:
40:09:89:21:93:19:6d:69:ef:4e:68:88:c2:97:d7:aa:89:3a:
7e:95:3a:b2:e5:5a:c2:1c:d9:d0:a8:bf:9e:ce:67:49:47:96:
a7:2b:bf:f8:3d:a2:2c:c0:45:f2:77:bf:d5:90:e2:8b:09:7b:
89:f3:6b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEN3zixtxDMSllzkImKPqgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz
OTM1MDAwHhcNMjYxMDA1MjEwMTM1WhcNMjYxMDA2MjEwMTM1WjAzMTEwLwYDVQQD
EyhmYTU5ZTU5OTM5YTc2NDIwNzRhNWU0OTUyNmUzOTgwOGNmZTkyYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu9hhozqMGpJsRZUMj+KJn7yCyvM
/n0ZbCSvrhKsKFwcR3HROmQRdDBDLMYP4BVhrhSsOYd74RXaNfYb0xRXsM/eoF8o
U1dJXJNDGrlxioBMb8d6lz1rw36/i8Z0sSKYA6TcrXdvzwHwrlKU/JAt/PvpfG8w
LXNY+2jq9Ib4JThnbml4LOAKrg7XTkRQ0ZzTI5y/1+6dIx1wBR7TM1me18cOCWKk
kvBPwawOz91aaRHppkfKhL3yuhcLFjufgSTctF6oNh0WtllWBQmIqc5PNmym/mhp
J1qzTYqxV8NXUzmNeQce25Q9wbcIIEYK9FJZx43atCqE2Hzhm4XuyrmS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpZ5Zk5p2QgdKXklSbjmAjP6SrQMB8GA1UdIwQY
MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt
ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0
LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuwoDCE8
NLNlI04gi2qdp+iWRLF0PSUgGctW+kpDXpPrrkmixr5lMlLMAdxsdB5cnYmmfE/6
6Y7RjEB/VOv5gkwTtvUSUBr4pBx4U2qsn3XzjvMAU9HpFFxQHXPdG/vjDnaV48pF
GWCXRSSit0GjJoM3kEBqtI666U3XhGvyCnQIpNrxhsVdIj/fwlxf9qpapLt4OcTE
j8152wB9VW+F8PDEv0Du2RIc23KrwMnK24HFZAMgnnkOtPdfPue8gGcgBoUIG2aG
QAmJIZMZbWnvTmiIwpfXqok6fpU6suVawhzZ0Ki/ns5nSUeWpyu/+D2iLMBF8ne/
1ZDiiwl7ifNrDA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 05:23:27 2026 by rpki-client