Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: 1KL7bPMjYWjS9n/UxxlJPVaqFAXFHWV7yVDZ3q3aVrg=
Subject key identifier: B9:31:8A:3D:62:47:99:6D:31:D4:53:49:C5:40:D7:4F:B7:45:5F:77
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 01A0D6B993C0950175B3C0B31034B2DE196D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 08EC
Signing time: Fri 25 Sep 2026 04:01:21 +0000
Manifest this update: Fri 25 Sep 2026 04:01:21 +0000
Manifest next update: Sat 26 Sep 2026 04:01:21 +0000
Files and hashes: 1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: 7Fq74YsUU6DxI0kscQnDcWpUcp6Sm4ZtwpqcJowFPsw=)
3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:93:c0:95:01:75:b3:c0:b3:10:34:b2:de:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Sep 25 04:01:21 2026 GMT
Not After : Sep 26 04:01:21 2026 GMT
Subject: CN=b9318a3d6247996d31d45349c540d74fb7455f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:23:84:af:86:43:d9:1a:0d:5f:14:d6:d2:
fe:a8:9b:c9:c1:6d:b6:5b:82:e8:64:ec:5d:1e:42:
00:e4:45:4a:ae:5c:5b:4b:10:8f:f6:2e:eb:fc:90:
3f:11:01:1d:59:ab:8d:21:a4:8a:67:de:18:b9:c9:
cb:50:63:33:cd:7b:29:83:c6:a5:1b:e1:f1:ce:a7:
90:34:21:c4:28:4b:e6:38:8b:23:10:fc:f6:d6:00:
7b:ee:b6:93:fb:8b:e3:3a:6d:06:bc:df:25:14:f3:
41:6f:fd:17:8a:eb:bd:e3:b3:be:47:ad:6d:0f:89:
a5:32:90:75:a5:b9:27:b9:6f:a4:18:63:9f:ff:a8:
59:d0:2b:ef:f3:2f:d6:b5:c2:a1:67:d3:63:c2:c5:
02:82:61:00:5a:62:11:5e:87:73:19:dd:8a:a2:fe:
0c:27:a1:cb:8d:24:5d:fc:3a:c0:34:8e:a6:57:f9:
18:ed:72:03:f2:d4:6c:a3:6b:fb:30:bc:f6:b4:02:
bc:6c:17:95:11:63:57:ba:a5:e4:b2:bb:91:48:f6:
c5:06:d4:f5:ed:5e:3b:d8:5c:65:5d:8f:9a:ee:38:
c8:96:a3:aa:ae:88:b4:f2:75:d6:3f:62:e3:e7:ad:
85:9f:c0:9d:b4:48:a7:05:a4:e1:da:70:74:a6:d4:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:8A:3D:62:47:99:6D:31:D4:53:49:C5:40:D7:4F:B7:45:5F:77
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0c:c9:af:b4:85:29:77:46:6f:72:e4:e1:a3:cd:2d:4f:5c:
16:82:b9:e7:3e:03:ce:70:a6:15:b0:ac:c7:3b:ec:db:58:fe:
07:fd:92:e2:12:53:fc:e1:e3:97:63:b9:b3:37:64:8a:12:7f:
d1:9a:dc:4e:78:e3:f6:32:7b:5b:47:32:39:7b:2f:d7:84:3d:
57:a5:7b:e8:a9:1c:ff:19:8b:7d:30:79:b5:c5:39:26:1f:e4:
7f:31:7f:c9:ea:b4:08:3b:60:a7:a4:90:d6:70:84:bc:31:2b:
5e:05:a8:47:22:4c:e3:8a:72:1e:9d:97:50:68:c2:4a:77:da:
2d:f7:77:5a:19:06:77:cb:13:0e:0b:c8:15:75:91:6f:b7:e2:
b2:de:7c:9a:c2:d3:62:11:f6:e3:41:4e:e4:84:90:17:57:70:
ce:74:61:ec:cf:6f:a8:25:df:30:94:18:8f:d4:fc:5d:2e:08:
a2:79:68:d9:7a:c6:8f:f7:52:39:9d:82:eb:a1:6d:b0:d6:91:
82:6f:84:fe:5f:60:66:0e:c1:43:1a:c2:ac:ac:c6:23:a9:5a:
4b:e5:4f:80:54:36:1b:60:97:f1:42:c7:f0:82:74:94:42:e5:
40:ab:84:69:0f:14:ed:2e:41:b7:8a:8b:19:fb:31:b6:96:6e:
33:20:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:08:40 2026 by rpki-client