Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: 9H9/F7RV6ZKc9roG3vL89E6StDSRfYE3PKZRZxTryi8=
Subject key identifier: F1:61:24:9D:A8:55:CD:1F:6A:07:C0:67:85:F9:46:A7:31:8E:69:F2
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 01A11ED1E5A3BB0F394A194E83CC8CC39D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 1594
Signing time: Fri 09 Oct 2026 04:00:34 +0000
Manifest this update: Fri 09 Oct 2026 04:00:34 +0000
Manifest next update: Sat 10 Oct 2026 04:00:34 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: MKJiwf9twGrJ2qO00T5mBjn/pSRPvSD+NZwavrQyrCs=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d1:e5:a3:bb:0f:39:4a:19:4e:83:cc:8c:c3:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Oct 9 04:00:34 2026 GMT
Not After : Oct 10 04:00:34 2026 GMT
Subject: CN=f161249da855cd1f6a07c06785f946a7318e69f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:5e:f5:aa:48:2a:70:ca:3f:54:66:c0:6b:
12:ae:2e:db:2d:fc:39:36:1d:d0:78:cd:63:81:07:
b7:ea:0b:e9:14:7d:4d:fd:97:ba:4c:02:6d:3b:98:
e8:f0:8b:09:4d:63:62:49:d7:36:1e:2b:c5:33:92:
38:b0:f1:4c:62:f7:ba:30:52:c7:29:ce:52:de:61:
75:6a:34:5a:03:50:70:a9:ef:97:60:d5:28:3b:b0:
60:88:c6:12:c8:7c:84:b4:56:39:cb:ff:88:20:9c:
bb:00:55:04:cc:ce:00:a5:5d:4e:1f:6e:f5:60:0e:
93:c3:3f:3c:70:00:58:92:71:ba:21:1e:38:a9:e8:
b0:33:46:6d:48:b6:b7:1d:e4:65:04:a0:2e:22:2e:
c0:a9:e5:a8:ea:36:e4:5b:56:bf:09:12:98:76:1b:
3d:bd:9a:7f:f7:05:01:13:9b:6e:d1:b1:c9:e0:dd:
e9:2a:d0:86:bc:fa:fc:70:6b:bc:12:91:63:37:8e:
b3:fa:7e:78:d2:eb:cf:45:6c:24:12:e2:b2:1e:3f:
ee:1e:77:d2:f4:d6:ef:58:5e:8b:20:41:57:59:40:
27:24:7e:34:79:10:6a:26:c9:d3:a4:56:f7:1c:24:
20:20:2c:b6:ba:d2:2f:02:63:2a:3f:c3:e2:6b:ab:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:24:9D:A8:55:CD:1F:6A:07:C0:67:85:F9:46:A7:31:8E:69:F2
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:77:a6:e7:eb:ab:a9:4a:90:a6:0b:62:1c:19:79:21:5e:
8c:95:8b:38:10:7a:4d:fd:a8:8a:8f:4d:e6:45:2a:21:e6:9b:
4d:77:18:c7:cf:3e:6d:3a:0d:5c:f5:e8:12:17:ac:31:db:6c:
a1:70:6d:25:46:f6:ac:05:de:bc:e0:3e:ea:8c:6f:e5:4d:c2:
41:d0:41:f2:71:4b:4e:81:a3:e9:81:8d:4e:51:eb:12:af:74:
41:54:23:34:b0:16:5d:28:63:ce:a1:c2:04:12:bc:f6:04:df:
9c:8f:0a:d2:06:cf:0e:07:dd:1b:5e:0e:bc:cf:87:23:52:aa:
4c:af:56:10:19:4e:e7:b4:74:be:8c:36:89:15:b1:05:f0:c8:
8f:41:1c:a5:56:9c:81:c9:f3:b9:23:5e:fb:d5:e0:e7:bb:3b:
0b:21:b8:37:93:60:bb:11:13:b2:f1:0f:77:9f:93:38:52:d8:
51:98:7a:71:1f:df:2b:5b:2e:fa:ab:9f:f5:f5:6c:0a:20:08:
3d:33:fe:dd:71:d7:bc:24:03:77:1f:88:0f:4f:4b:e5:6b:c8:
4b:6c:1e:f9:cb:6b:e4:6b:05:83:0f:d4:fc:64:5d:7f:4f:1b:
72:6f:95:d8:ee:37:cf:16:de:87:4a:c2:43:fa:50:b2:19:80:
1d:34:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 14:38:34 2026 by rpki-client