Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: jQLbi69vKOpC501O6aGDqkqjQNjqWdhCRtjr+b3GLY4=
Subject key identifier: 03:0C:F8:DE:4B:BB:65:B5:DC:8E:6E:EA:51:D0:B0:E6:B8:00:88:D4
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 01A0E09833ABF3969844B4FD9376DB28C4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 1A71
Signing time: Sun 27 Sep 2026 02:01:06 +0000
Manifest this update: Sun 27 Sep 2026 02:01:06 +0000
Manifest next update: Mon 28 Sep 2026 02:01:06 +0000
Files and hashes: 1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: B3VLLPjuH9rloPiZMHw7rHDMZJFktnQY3uQzS6uj37o=)
3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:33:ab:f3:96:98:44:b4:fd:93:76:db:28:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Sep 27 02:01:06 2026 GMT
Not After : Sep 28 02:01:06 2026 GMT
Subject: CN=030cf8de4bbb65b5dc8e6eea51d0b0e6b80088d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:d4:7c:d7:af:16:12:06:64:a8:c1:d1:11:
d4:87:b3:02:bf:4b:55:f4:dd:f4:48:1f:5a:af:01:
27:8f:8a:f2:e1:9d:01:b6:bc:9f:2e:28:72:bb:d3:
b2:be:68:c7:a1:22:ac:6c:9e:68:b7:74:f2:68:23:
97:c6:13:b5:50:11:98:06:55:3c:30:cb:8f:22:ca:
1b:94:35:bd:d0:96:17:3f:01:9a:ba:86:27:0e:db:
22:8a:12:b4:9a:7a:b0:03:1e:86:f4:c5:eb:15:8e:
b2:44:bb:68:13:ca:9a:f8:5b:6f:49:5a:51:f6:3f:
7d:56:88:8f:95:cb:88:d6:0c:2c:e4:76:0d:a3:f7:
8b:a7:4d:4a:1e:d2:ab:69:e7:48:28:21:18:e8:2e:
c2:5c:07:f0:2d:0e:79:b3:04:79:85:0d:5b:f6:54:
f0:49:19:69:25:88:84:a2:20:59:05:2e:85:f7:91:
c2:51:a7:1c:e8:0f:07:77:56:ec:c9:0a:a5:f3:5d:
33:48:71:53:eb:1a:a8:cf:de:69:cf:90:ac:22:2b:
be:8c:82:1a:0f:ca:cb:ca:d1:88:43:a5:60:63:e5:
2e:70:78:ec:fb:48:a6:ad:b7:ed:5e:12:af:a6:3d:
fa:d5:f6:d5:f1:c4:5d:df:88:05:75:80:1c:a1:d5:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:F8:DE:4B:BB:65:B5:DC:8E:6E:EA:51:D0:B0:E6:B8:00:88:D4
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:25:76:e6:00:b5:8d:96:c1:f6:c7:fd:91:6d:9b:4d:ab:
46:1f:46:41:9e:fc:13:d8:99:1a:eb:a8:75:be:ad:d7:76:2f:
d2:e2:f7:d8:8f:ff:4d:dc:60:4e:33:84:45:7b:52:15:cc:dc:
72:9e:28:3c:14:54:55:ae:7b:ef:96:1b:02:12:32:62:c8:8a:
03:ef:e6:7b:1d:13:c7:3e:00:6e:96:7a:59:65:53:01:04:cf:
22:9b:c0:36:8f:d0:1f:af:e6:fa:ce:b5:58:c8:d4:2c:4e:68:
45:f6:2d:14:8a:fe:66:c9:15:d4:32:87:e0:4b:ed:b1:ac:67:
d0:79:0f:2d:70:07:28:80:9b:7f:03:3f:84:b8:d0:e2:96:96:
fa:f5:f9:41:c9:c3:b3:23:ab:dd:77:71:6d:72:f7:bd:bf:88:
c4:c6:cc:43:55:9c:33:4a:c4:55:02:b7:7b:a4:57:6d:56:da:
ae:77:dd:97:93:95:b4:4c:90:29:e5:c5:78:47:2c:80:3e:17:
8e:b0:e5:0b:71:87:a0:44:11:24:d9:88:61:1b:ed:d5:1d:a1:
65:9c:c5:f1:b5:ea:68:87:80:b0:9e:80:ce:e0:43:1a:be:1e:
10:77:cd:bb:37:a3:a2:6b:b9:43:92:d7:16:96:be:3e:e4:04:
b8:88:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:12 2026 by rpki-client