Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: JfW68ND60HIc6QAE0+SR017SJFZBhbPziDSI5edxFjI=
Subject key identifier: EA:F8:D0:C8:16:AF:D2:5C:42:EA:A4:C5:2A:80:CD:E1:3B:D0:3C:26
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01A0D9F20B41A2C4913AB471F92E19E6293C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 19EC
Signing time: Fri 25 Sep 2026 19:01:53 +0000
Manifest this update: Fri 25 Sep 2026 19:01:53 +0000
Manifest next update: Sat 26 Sep 2026 19:01:53 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: gqXztSDlFIUXlTglZ5nO5faxz6EBFjT2LYccIue2En8=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:0b:41:a2:c4:91:3a:b4:71:f9:2e:19:e6:29:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Sep 25 19:01:53 2026 GMT
Not After : Sep 26 19:01:53 2026 GMT
Subject: CN=eaf8d0c816afd25c42eaa4c52a80cde13bd03c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:38:e3:8e:1b:3d:48:2e:84:b6:20:33:a3:
9b:e3:6f:ad:b8:8a:0d:62:30:03:24:25:18:79:d9:
16:d5:6e:7a:50:f4:a8:61:d3:88:9d:f9:2a:e9:17:
af:f1:1e:f5:74:a9:86:f7:58:83:52:94:80:02:6a:
27:b5:a8:91:5b:46:bd:f9:a4:78:e3:49:a7:ca:99:
99:63:6d:12:1c:11:e6:fb:8b:67:87:d7:df:ed:3b:
20:91:38:5e:7f:ec:f8:d0:be:13:d7:aa:cc:27:fd:
8f:20:c0:bb:ce:a1:51:f3:2e:59:00:f8:2e:92:6f:
c2:32:7c:53:25:16:2d:f3:4c:94:4e:42:2f:08:5d:
af:ce:c4:5c:b7:ed:05:af:26:c3:40:64:4f:e6:2a:
0b:c5:4e:d0:c9:3a:ad:f1:f9:12:b1:ff:fd:c4:55:
e3:9c:00:a5:2d:90:44:5a:ae:80:c4:6e:e7:47:93:
aa:3d:2a:d1:a7:a6:81:d1:c1:12:5e:19:3f:4a:2f:
82:c3:07:7a:1a:a4:fe:d7:6e:2e:8c:11:b9:c5:3d:
08:f1:13:19:aa:f7:d2:2c:46:77:a1:e9:b2:81:10:
33:57:e1:07:81:00:97:07:b9:f1:ba:e0:8f:e7:ce:
9a:c5:cf:10:01:f3:97:44:2d:ce:b0:d0:cd:9b:ea:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:D0:C8:16:AF:D2:5C:42:EA:A4:C5:2A:80:CD:E1:3B:D0:3C:26
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:7a:5d:35:a8:f1:03:ff:72:98:68:4d:5b:12:77:fc:89:
bc:8a:b0:c4:cd:06:f5:ff:d3:06:fc:ef:4d:1d:9d:ed:7a:0e:
11:e6:34:d5:a6:5a:61:7d:b6:7a:16:35:bf:8b:52:9f:72:26:
01:4b:a0:6b:dd:e0:97:ef:f5:37:f1:91:b0:77:65:df:58:b1:
42:3a:39:31:95:95:a6:25:37:48:e2:b0:6b:00:1d:fd:9c:21:
68:95:c5:3e:e1:64:c1:31:2f:f1:7e:ad:90:d0:d4:de:22:3f:
6b:71:fe:49:71:b7:88:3b:01:71:d6:a5:b5:a3:06:21:91:fd:
97:39:04:56:6d:2a:b2:d2:1c:12:de:5b:13:ae:ca:c8:8f:a1:
da:ca:2d:7b:72:dc:53:41:55:40:d9:9f:25:9e:c0:1b:a1:c4:
ef:e3:cc:26:97:51:b5:65:99:2d:7e:5d:f4:bc:c9:32:57:41:
c2:59:5e:56:cc:b1:0e:12:a6:15:b1:15:c3:9e:61:cf:9b:b2:
4e:58:e2:51:d8:dc:f4:c6:2e:84:14:6a:48:13:6e:f7:02:35:
21:18:a7:fc:96:d2:06:e5:50:3d:aa:a5:28:4c:68:a5:8d:fd:
9b:75:88:0c:ec:57:49:5b:e9:b8:dd:9d:ec:8e:ee:78:7d:75:
82:86:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:42 2026 by rpki-client