Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: 69XQKA1cvvRijGqpZwTu2zl2x9iJf+2UrkXUf5rLTuU=
Subject key identifier: FA:B8:16:BA:6A:9B:CB:0E:46:C8:4F:86:3A:9D:FA:EA:BD:2A:CA:A3
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 01A0D0126209A5CC00EB4CE1A64665B8EF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 18D5
Signing time: Wed 23 Sep 2026 21:01:00 +0000
Manifest this update: Wed 23 Sep 2026 21:01:00 +0000
Manifest next update: Thu 24 Sep 2026 21:01:00 +0000
Files and hashes: 1: 1-bR6sRmqVUM--gERBLCMb9Ravtw.roa (hash: IEQS2o9NuZUHyISNsWvFCuuFh71uq4ILP2ZvrrGr1Uc=)
2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: PCrWXRK4WNOU5SA6h++lrfWhEjvexIbhuIVC/8YIJq4=)
3: vbqC7dnIYforI52OCrB0B1B9v_E.roa (hash: l+1hvAkiSw6p++rx/Ga348Dp115kPP0Bh0QVsqmz+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:62:09:a5:cc:00:eb:4c:e1:a6:46:65:b8:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Sep 23 21:01:00 2026 GMT
Not After : Sep 24 21:01:00 2026 GMT
Subject: CN=fab816ba6a9bcb0e46c84f863a9dfaeabd2acaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:d4:f5:06:d3:c9:42:93:77:3c:69:09:9c:
39:d7:ba:23:a9:65:56:8f:29:7c:df:22:a2:2d:b5:
23:1f:69:7c:66:a8:94:7d:e6:6f:0c:1c:7a:42:e4:
bd:84:f9:ea:eb:77:08:a7:6b:a7:b6:14:a4:10:81:
fa:c4:d3:e3:17:79:90:10:09:7d:f6:aa:64:b1:ea:
04:bb:df:9f:ab:c0:ad:44:3c:c1:f9:68:92:75:4e:
b8:17:f8:a8:6c:c0:9e:1b:cf:65:ab:76:e2:c4:ce:
c2:3a:4c:2d:26:e6:7b:db:7d:64:fd:80:98:d1:4a:
b9:5d:64:d4:43:38:c8:7f:4f:d5:c3:ca:cf:e8:30:
2a:77:d5:12:f9:fa:18:ef:b8:b6:98:a3:c1:51:a7:
c7:11:ed:16:b7:d2:02:4c:9a:d2:d1:94:c6:ab:e8:
2f:ed:25:6f:08:09:62:ac:d7:93:73:8b:cf:b6:6d:
01:a8:fb:e7:6e:d2:ee:c2:3b:91:ff:bf:3f:7c:c2:
24:c1:05:67:b5:6f:65:c5:e1:1d:e6:b0:4a:66:44:
b4:50:ac:96:08:3e:a0:36:cb:e5:2f:3d:6d:be:cf:
2d:84:82:a7:0c:a9:42:ed:21:c9:ad:06:96:05:7b:
f3:d2:11:cc:ba:fb:a6:7e:ef:a8:2c:0c:55:94:ff:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:16:BA:6A:9B:CB:0E:46:C8:4F:86:3A:9D:FA:EA:BD:2A:CA:A3
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d9:90:dc:6d:06:10:4f:8f:42:79:a3:a9:1d:f7:ef:aa:11:
bb:c2:d1:eb:a3:3f:3a:cb:26:21:cc:78:48:f9:e8:2e:09:8e:
f1:34:61:0d:ba:ed:c3:fc:e4:56:e6:f4:34:23:a0:26:92:cc:
3e:43:30:76:a1:34:0a:2b:ab:59:bb:f0:b6:a0:01:52:4e:b0:
dc:b3:f2:af:90:ab:61:4d:c3:bf:dd:2b:19:30:da:c3:38:ff:
5a:56:75:bc:98:9e:9b:70:e7:4d:60:d7:35:84:32:f3:22:c6:
54:87:67:a7:03:d8:8f:57:4a:5e:7e:47:bd:f6:27:af:21:30:
06:f1:f6:22:a1:b2:5e:32:54:ae:2c:5d:38:6b:5c:38:d5:67:
b4:64:23:0f:d7:d2:06:a9:43:64:12:04:c4:12:e3:b3:ff:14:
46:a0:cf:6a:e3:50:15:0a:ee:b0:77:8f:a1:37:3d:5c:52:03:
e5:79:8b:f6:a3:c4:e7:71:ae:be:0f:ea:3c:d0:87:e1:78:26:
77:01:4f:cd:73:63:e7:d2:08:a5:7a:28:cf:05:fd:ff:17:09:
51:cb:ed:b0:df:c6:8b:46:67:39:37:d7:03:50:48:99:c5:0e:
cc:79:f1:d9:f6:84:35:88:84:ec:29:a8:2b:ef:47:22:11:8c:
1d:fd:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:40:45 2026 by rpki-client