Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: XQLNHjgyfIVER9Kg6aikHcXwV3uwk4zVcxGTbOdyAYM=
Subject key identifier: 09:D1:47:8C:F2:B2:49:96:2C:97:0A:7F:7D:4D:2B:CE:FD:CC:A8:CA
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 01A1287A82E9314EECDE8721E9B743A59A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 1599
Signing time: Sun 11 Oct 2026 01:01:19 +0000
Manifest this update: Sun 11 Oct 2026 01:01:19 +0000
Manifest next update: Mon 12 Oct 2026 01:01:19 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: usBXCydmWPH7yrIJn7Xdchj80h5y5o9/aVPIlX7YFK0=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:82:e9:31:4e:ec:de:87:21:e9:b7:43:a5:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Oct 11 01:01:19 2026 GMT
Not After : Oct 12 01:01:19 2026 GMT
Subject: CN=09d1478cf2b249962c970a7f7d4d2bcefdcca8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:d4:7a:22:01:e4:f0:be:22:8c:46:8c:14:
22:56:aa:68:02:21:61:d0:fa:f8:83:3f:12:26:be:
61:27:93:ec:b7:77:64:fb:09:e5:a4:64:e7:0d:b5:
df:d6:7e:2c:aa:3f:94:b0:4d:b8:d8:d3:82:81:2c:
d4:87:d6:68:a8:a5:ef:61:d1:3c:b2:e0:8b:19:9c:
bd:3a:a7:f2:7a:26:3b:d4:e3:3a:43:3f:9c:b8:54:
62:c9:f9:b0:b9:d2:7f:6a:b5:12:a3:e9:7b:eb:ae:
b5:d2:e6:88:24:30:b1:7e:f3:8f:d8:06:aa:51:1b:
d7:0c:c1:86:97:47:b3:4e:68:5a:88:ac:3a:e7:e2:
31:c5:b5:8f:ad:2f:81:4f:73:07:ac:4d:92:74:03:
44:92:8a:23:22:5b:88:3f:5c:4f:f5:80:df:a5:3f:
d3:fc:67:70:db:2c:19:2a:19:51:46:a3:13:17:27:
40:42:0f:34:6d:af:06:ca:29:ac:39:12:8d:e2:e0:
5a:3a:27:2a:bb:2f:69:88:b6:dd:07:86:26:71:74:
6f:1c:46:b9:4a:85:75:e7:86:2f:05:ad:ff:3f:ed:
fc:37:66:8e:bf:23:7b:d8:69:80:f3:f7:14:35:f0:
9c:ae:cf:2e:4b:f3:db:73:81:2c:fb:4b:7f:36:60:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:47:8C:F2:B2:49:96:2C:97:0A:7F:7D:4D:2B:CE:FD:CC:A8:CA
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:92:18:3d:53:ae:c5:f6:57:4e:5b:54:cf:b6:fe:58:d5:c5:
ab:80:bb:f3:c3:8d:f0:fe:30:e4:7d:1c:99:8e:c4:a4:90:a4:
4d:dc:a5:64:48:41:17:96:d6:07:c8:98:a8:19:bd:ce:45:be:
c0:dd:62:6b:b5:be:f1:85:bc:58:7b:a4:94:09:a0:4c:c0:ec:
dc:4a:5a:18:4f:cf:27:90:b3:7f:8e:4c:9d:1e:87:6e:36:3b:
26:5e:79:e5:77:8b:9a:c3:19:87:04:44:75:7a:d0:1a:0e:5b:
cf:26:58:7e:a9:f3:b8:88:de:7f:fe:14:59:e1:b6:03:7b:8e:
56:9d:42:98:68:1a:75:58:e6:ce:9e:44:6c:8c:de:3f:b6:dd:
fc:fb:f9:ba:c3:0a:f4:f6:5c:56:13:d4:20:56:6f:93:73:1c:
46:99:8f:d5:50:1a:9a:21:03:3c:3c:bf:61:08:07:dc:58:2d:
69:60:96:31:3a:a8:72:d7:f3:71:47:9b:c9:4f:3d:bd:f2:d2:
8a:7e:d7:f6:2b:f2:0c:42:7a:58:51:07:a2:2a:6d:e9:f2:a8:
cb:81:df:3c:66:1b:cc:bf:99:aa:0a:db:3c:0c:4f:5e:a8:a8:
f3:8f:13:d4:40:98:cd:82:3a:cf:2b:c3:23:b2:92:f5:2c:39:
e7:0e:24:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoeoLpMU7s3och6bdDpZqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWRmYjljZmNkYTg0MjYyMTJkZDdkODg3M2I1ZmU0OGI0
MTJmMmEwHhcNMjYxMDExMDEwMTE5WhcNMjYxMDEyMDEwMTE5WjAzMTEwLwYDVQQD
EygwOWQxNDc4Y2YyYjI0OTk2MmM5NzBhN2Y3ZDRkMmJjZWZkY2NhOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4nUeiIB5PC+IoxGjBQiVqpoAiFh
0Pr4gz8SJr5hJ5Pst3dk+wnlpGTnDbXf1n4sqj+UsE242NOCgSzUh9ZoqKXvYdE8
suCLGZy9OqfyeiY71OM6Qz+cuFRiyfmwudJ/arUSo+l766610uaIJDCxfvOP2Aaq
URvXDMGGl0ezTmhaiKw65+IxxbWPrS+BT3MHrE2SdANEkoojIluIP1xP9YDfpT/T
/Gdw2ywZKhlRRqMTFydAQg80ba8GyimsORKN4uBaOicquy9piLbdB4YmcXRvHEa5
SoV154YvBa3/P+38N2aOvyN72GmA8/cUNfCcrs8uS/Pbc4Es+0t/NmA27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnRR4zyskmWLJcKf31NK879zKjKMB8GA1UdIwQY
MBaAFByt+5z82oQmIS3X2Ic7X+SLQS8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEszN25QemFoQ1loTGRmWWh6dGY1SXRCTHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jODQwNmQtYTU2NC00Nzk1LTk4YjAt
ODY4MTYwNjY4MzgyLzEvSEszN25QemFoQ1loTGRmWWh6dGY1SXRCTHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jODQwNmQtYTU2NC00Nzk1LTk4YjAtODY4MTYwNjY4Mzgy
LzEvSEszN25QemFoQ1loTGRmWWh6dGY1SXRCTHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5IYPVOu
xfZXTltUz7b+WNXFq4C788ON8P4w5H0cmY7EpJCkTdylZEhBF5bWB8iYqBm9zkW+
wN1ia7W+8YW8WHuklAmgTMDs3EpaGE/PJ5Czf45MnR6HbjY7Jl555XeLmsMZhwRE
dXrQGg5bzyZYfqnzuIjef/4UWeG2A3uOVp1CmGgadVjmzp5EbIzeP7bd/Pv5usMK
9PZcVhPUIFZvk3McRpmP1VAamiEDPDy/YQgH3FgtaWCWMTqoctfzcUebyU89vfLS
in7X9ivyDEJ6WFEHoipt6fKoy4HfPGYbzL+ZqgrbPAxPXqio848T1ECYzYI6zyvD
I7KS9Sw55w4kyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:01:42 2026 by rpki-client