Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: qq8nLpLfNTUCAm/lynaVpI7Vhukua21A/q85ga1QiDo=
Subject key identifier: 94:52:26:A2:0B:52:BD:1B:B7:66:42:C2:5F:76:9F:63:4F:13:4B:55
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 01A0CEFF4A1804AD4E46178337D9985BC0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1985
Signing time: Wed 23 Sep 2026 16:00:32 +0000
Manifest this update: Wed 23 Sep 2026 16:00:32 +0000
Manifest next update: Thu 24 Sep 2026 16:00:32 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: ulWUGmM6AlWYFh8JD0+hvpd1gri6wedIUbLNoo3aBMQ=)
2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:4a:18:04:ad:4e:46:17:83:37:d9:98:5b:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Sep 23 16:00:32 2026 GMT
Not After : Sep 24 16:00:32 2026 GMT
Subject: CN=945226a20b52bd1bb76642c25f769f634f134b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:78:c0:3e:9d:8a:66:46:16:75:5a:c5:0f:
88:10:04:f9:c9:fe:58:18:50:9f:04:b4:ba:6a:44:
95:2c:98:2c:0b:84:fb:2f:e2:19:d8:40:14:dc:87:
1f:35:8a:ba:7c:ae:7f:7c:e0:2b:e6:eb:7f:13:a5:
2e:e4:aa:a4:ae:ae:56:fa:00:16:93:62:09:fa:65:
0a:c7:38:86:d0:73:18:d3:b6:25:57:ab:a6:3a:38:
9c:40:fc:c7:3d:4d:59:3b:cf:e4:59:f9:e8:11:3f:
89:0d:b5:a1:07:d0:79:36:1f:bb:f7:fd:6c:2e:f9:
f8:f2:e2:8e:5a:de:d9:38:cb:c6:eb:92:a0:4a:24:
ae:fb:12:82:89:e5:c9:ac:ca:51:2a:23:ba:5e:c0:
a5:00:5e:e5:61:48:45:2e:b7:7a:3b:75:dc:62:dd:
e5:a3:ec:00:26:63:eb:a0:15:eb:e1:54:ad:af:cf:
b4:85:9b:a0:27:49:bf:87:74:99:ce:2f:8b:52:d4:
2f:9c:04:c3:cc:6b:4b:4d:25:40:ec:3a:33:0e:c7:
6d:1f:02:de:a9:66:03:6e:2d:96:96:a7:db:ee:9e:
41:67:12:e4:98:21:58:32:4a:88:04:cb:02:1a:df:
f3:e2:19:12:88:56:37:f0:b2:8a:9f:93:e4:44:4d:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:26:A2:0B:52:BD:1B:B7:66:42:C2:5F:76:9F:63:4F:13:4B:55
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:54:32:cd:bb:19:10:c6:e8:ee:02:cc:49:26:67:2c:7f:1e:
60:2b:73:e5:a7:eb:1c:48:77:14:ef:d7:06:fc:d8:82:8c:9c:
6f:5e:f9:df:b2:a0:ff:20:5d:3e:f4:6c:c0:39:58:a4:41:15:
8d:be:d4:d2:e0:49:20:2d:5a:3a:ff:97:b1:a7:f7:f2:da:cb:
6a:d3:32:99:f4:79:23:31:72:fa:95:e8:9b:64:e3:7f:79:37:
0b:53:8f:63:47:b2:18:c4:8b:13:97:7d:6d:84:a7:cb:36:42:
e0:dc:f2:cf:e3:62:a1:7c:44:e4:60:16:0e:bc:02:17:06:9d:
80:34:35:61:e1:ae:0b:7e:98:4d:9c:7d:a1:57:27:fc:a2:69:
e9:df:fe:89:cf:ee:73:8d:00:59:a9:0f:9f:cb:43:fe:55:39:
b4:ed:95:d1:05:b1:96:67:77:cc:b5:e5:12:5d:f2:29:ad:cf:
5e:3a:8b:7f:a1:2f:1c:d6:ca:14:09:dd:72:6e:f0:c2:ae:a5:
86:2e:b1:50:8c:40:8e:ea:e5:94:9a:af:47:f8:83:0b:cc:37:
31:dd:ed:a7:6c:e3:14:9e:5b:0e:a0:ed:3f:cc:3a:e1:bd:12:
db:1b:aa:55:81:17:b7:fc:0d:a5:8c:b8:c2:6f:1b:11:b8:b0:
bc:3c:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:28:51 2026 by rpki-client