Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: t3MgMX1ylhe4S+jG0O6SoOAtwp0tVF+vY3nj18slWEY=
Subject key identifier: 17:19:6C:8B:F9:A5:E8:C6:88:35:3C:F3:DD:2D:4F:17:56:62:69:3D
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01A0D237B636574A4FA24CE020101F91EA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 19E8
Signing time: Thu 24 Sep 2026 07:01:01 +0000
Manifest this update: Thu 24 Sep 2026 07:01:01 +0000
Manifest next update: Fri 25 Sep 2026 07:01:01 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: M3R0Gu22mvv6O35PCnLKai/Gt7s2Wz43ACAGFhXQNwk=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:b6:36:57:4a:4f:a2:4c:e0:20:10:1f:91:ea:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Sep 24 07:01:01 2026 GMT
Not After : Sep 25 07:01:01 2026 GMT
Subject: CN=17196c8bf9a5e8c688353cf3dd2d4f175662693d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:aa:57:22:ba:0e:b4:0d:0e:3b:25:d8:ca:
e0:85:93:fd:0d:67:9e:b2:0e:4b:4e:fb:3c:30:ab:
f9:da:f9:f4:71:00:a0:1c:dd:2b:c1:28:a2:35:d1:
cf:5b:13:0c:ce:67:fd:d4:d2:66:91:39:8f:2e:f2:
e9:e2:2c:cf:72:43:d9:c2:38:43:c3:23:1b:9c:ce:
1e:ef:b6:10:40:74:f9:b6:84:16:b8:bb:6a:50:f9:
d0:13:91:d4:93:97:d6:68:20:fe:82:d7:2e:d8:32:
dc:46:e9:40:a4:0f:a4:23:0d:6b:fb:09:e5:7f:c2:
bb:5a:4c:04:4a:36:2f:45:ee:76:55:eb:9d:ed:68:
2d:64:96:bf:aa:29:b3:c1:31:c5:84:36:19:2c:a4:
2c:16:60:45:6e:26:3a:24:be:4e:d9:82:b5:4c:dc:
fa:49:fd:b7:f7:eb:ee:52:45:25:1c:27:60:b7:74:
53:70:dd:5d:ce:81:01:0c:07:14:ab:66:27:eb:8f:
7d:06:5c:2f:00:e3:9f:2a:b0:61:44:23:db:67:4d:
e9:88:9c:32:75:47:f7:e0:c4:ff:6b:37:a3:c6:c8:
21:bd:a7:4d:0c:ec:9c:94:f7:02:af:6f:0c:70:2c:
47:4e:5e:2d:cc:41:52:11:9a:0c:a0:cb:14:a3:d4:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:6C:8B:F9:A5:E8:C6:88:35:3C:F3:DD:2D:4F:17:56:62:69:3D
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ff:97:a9:cd:c4:46:93:af:7c:49:dd:71:4d:79:03:ea:63:
75:e9:50:f9:98:82:19:0d:ea:4b:ab:b5:26:a1:e1:fe:68:bb:
4e:c8:fa:dd:be:1a:49:71:15:1f:e6:e0:b0:41:a4:1d:40:ba:
74:b3:fa:d9:dc:e0:06:c7:95:23:7e:c1:3b:43:06:02:29:80:
39:ba:4b:32:03:5b:fb:b0:5a:ea:c5:c5:69:cb:66:60:02:85:
2f:16:c6:30:1a:cd:fd:63:17:84:de:ab:5d:4d:da:ae:c5:b8:
fc:55:0d:be:63:d4:ce:0a:37:11:b2:47:83:77:70:1e:bd:47:
95:58:33:ac:7e:b2:ff:28:fb:92:a9:28:4d:35:12:ab:6a:fe:
bb:10:55:98:71:c6:f3:cc:7a:13:e7:93:4e:a8:2a:4a:6f:fd:
8d:b7:ff:65:5a:8e:7f:4f:97:f4:4e:cc:e6:57:37:a0:7d:fd:
7f:64:c0:21:76:e5:c7:98:a6:7a:fa:d9:bf:2a:53:39:33:9a:
7a:b1:e4:b9:35:97:48:a9:7c:bf:c5:72:0c:bf:fd:07:cd:30:
2a:e7:28:5b:a0:a8:af:07:f3:d1:58:73:a3:57:4f:d4:1c:dc:
fb:64:d6:0e:66:1b:4d:d8:de:87:15:f4:ef:60:6f:88:2f:55:
fb:3d:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:24:50 2026 by rpki-client