Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: 0vj3upyitPxjFuaZL2FSoUNZF1wb2OPjU1kQR6RWCx8=
Subject key identifier: B3:F4:57:F4:F5:C5:DE:78:67:1A:41:B3:A7:96:1C:75:A4:4A:39:37
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01A10EB9C3229AF8BD811B9F8BBA19F15BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 01:00:17 +0000
Manifest this update: Tue 06 Oct 2026 01:00:17 +0000
Manifest next update: Wed 07 Oct 2026 01:00:17 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: H8KDs+wPZKMMssgQi1HWCVPIogNnZi+z09BhyXIGBHQ=)
2: lF6xMupUMlipMq7GMpM0r0z9I7w.roa (hash: 0Res1n1L0Nd2qqeKb1zoNe5I0Gf7UP1O9DGe+CZxdzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:b9:c3:22:9a:f8:bd:81:1b:9f:8b:ba:19:f1:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Oct 6 01:00:17 2026 GMT
Not After : Oct 7 01:00:17 2026 GMT
Subject: CN=b3f457f4f5c5de78671a41b3a7961c75a44a3937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:a3:c0:80:a5:d8:cf:2f:38:71:78:f3:97:
b3:ac:6b:11:78:d9:4e:b4:03:48:62:77:d8:f7:b9:
08:6f:94:7d:5b:ab:0e:03:ea:7f:3a:d0:72:04:ad:
ad:d0:5f:bf:9e:be:47:cb:d1:34:e2:95:5b:dd:8b:
0d:97:b9:fb:08:3c:fa:37:6d:cd:73:bf:45:08:96:
0f:8d:e4:4f:15:a8:bd:5c:28:4a:0f:12:15:cd:0d:
be:b7:b1:82:5e:25:c0:21:65:15:5e:00:fb:27:97:
55:1b:f7:61:3e:16:78:51:df:ce:f0:c8:67:af:68:
eb:a1:74:0b:e5:72:06:ed:dd:25:51:97:39:2b:b5:
e7:94:cb:a5:ba:7b:92:58:51:34:60:29:53:ba:29:
67:28:c2:f6:05:d7:04:a4:7f:69:42:cd:37:c5:3e:
46:35:56:9b:fb:1b:e3:4f:c5:95:de:27:bc:aa:92:
fa:c0:86:62:d6:50:40:dd:42:4a:86:21:5b:bc:6a:
79:a4:af:59:c0:74:05:f9:4a:9f:71:58:bc:09:79:
38:db:2b:59:7e:5d:9c:e7:ef:08:2d:23:77:a0:82:
05:ff:ef:c4:8d:1d:76:24:d3:92:57:0f:16:3a:d9:
7b:35:4f:1a:f5:cb:69:7b:6f:55:64:33:1a:42:7d:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:57:F4:F5:C5:DE:78:67:1A:41:B3:A7:96:1C:75:A4:4A:39:37
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:64:71:0b:e8:ee:36:17:f4:49:3e:77:60:45:57:ea:4a:
0b:c9:5a:d5:8a:58:21:40:89:6b:32:32:48:db:b4:9c:67:31:
a4:6c:6e:2f:d3:b1:12:0d:6f:72:59:76:cb:96:4b:28:05:08:
76:0d:bc:5c:a2:11:f7:1e:fe:0f:e0:b3:1f:cf:60:77:d5:03:
46:ef:57:65:2a:96:cb:13:95:1e:98:c3:e0:cb:39:39:42:4e:
6a:f4:81:a0:ab:20:46:75:67:78:61:1b:a7:3d:89:80:6f:8e:
cb:b9:d7:11:ee:1b:71:4c:33:82:4e:2c:78:f3:7d:0e:85:cd:
ea:e8:02:22:4b:8e:f3:e4:8c:54:cf:3a:f3:61:bc:e5:4f:ca:
ed:1c:2b:e6:f5:2e:df:79:0c:d7:07:a7:99:48:b4:d8:45:25:
a3:47:8a:77:ab:02:da:d0:f5:a9:61:53:50:c9:3a:ec:ba:6c:
b1:3d:d5:f6:d2:c5:57:56:d8:9e:72:16:b4:dd:24:0c:47:05:
76:bb:df:bf:3b:91:97:a9:fe:8e:8b:8c:3a:fb:1d:69:c7:7d:
be:85:22:4b:32:0f:93:03:69:e0:2d:75:a6:86:44:49:93:a3:
94:68:b8:71:69:ac:c9:d2:13:f2:f2:28:e9:21:85:64:df:e7:
ad:0f:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:45:27 2026 by rpki-client