Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: Gy6zf2Tl3cT0qdwNdw0OrP2/dZlTUIAbghRmeJyNabk=
Subject key identifier: 06:C7:82:15:14:F9:56:7A:81:DB:DA:5E:D8:16:46:FB:E1:B6:4E:C5
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 01A1027FB06B6A1B2AA0C82622F7B1BCB97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 1648
Signing time: Sat 03 Oct 2026 16:01:25 +0000
Manifest this update: Sat 03 Oct 2026 16:01:25 +0000
Manifest next update: Sun 04 Oct 2026 16:01:25 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: 0HI7v1u4kyO53+Y8SEEQhuakjFPBC3Z4cCB+w7e/fQI=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:b0:6b:6a:1b:2a:a0:c8:26:22:f7:b1:bc:b9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Oct 3 16:01:25 2026 GMT
Not After : Oct 4 16:01:25 2026 GMT
Subject: CN=06c7821514f9567a81dbda5ed81646fbe1b64ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:fc:66:ab:56:ce:78:3b:96:78:37:3a:7e:
c2:42:3d:fa:f8:0c:6f:53:3b:85:78:be:a9:e3:f7:
0e:44:b4:a5:d7:bf:74:06:eb:d2:16:36:07:02:30:
7b:a0:b1:e3:6e:01:39:f1:f4:85:a9:27:db:e7:76:
6f:2e:fa:61:52:9b:27:a2:42:83:c8:2e:6e:a1:46:
6c:79:3c:7d:64:2e:e6:bb:da:0e:06:3b:76:42:c9:
5f:4d:db:59:22:aa:bc:2d:0f:ee:87:95:01:a4:d9:
48:52:d8:63:a3:2e:11:5a:e1:f6:3a:12:9d:8c:87:
32:8f:b0:7b:50:66:fd:41:83:39:fb:90:57:ab:74:
11:3c:20:9a:7c:2e:36:a5:2d:f2:d7:36:0b:43:04:
6e:04:00:8d:cb:b1:19:11:b3:d3:42:51:15:7e:62:
a3:97:5f:7d:6e:37:60:df:73:59:50:43:8d:b8:b9:
8f:a4:4b:27:a8:d2:0b:c4:d7:e6:e4:d9:7e:21:cd:
d7:9c:71:24:9a:11:6a:6a:d9:53:3e:d9:1e:3b:26:
20:31:23:d2:24:50:7d:98:f1:0e:73:70:de:a4:12:
9d:02:6f:7f:f9:7e:16:15:27:7e:c8:b5:bb:9a:59:
ad:6b:9b:7f:db:b0:a2:e5:a4:c0:71:b4:8a:a4:51:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:82:15:14:F9:56:7A:81:DB:DA:5E:D8:16:46:FB:E1:B6:4E:C5
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:79:cb:13:3e:71:16:64:7f:e4:e1:91:6d:a5:ed:3b:b7:74:
c3:ac:e0:0b:58:b0:d5:8c:46:80:dd:5f:37:c5:27:83:47:c2:
92:f7:2f:93:14:ec:b4:ad:e4:38:e3:44:f4:bc:18:46:c2:37:
35:e3:a2:19:50:2e:de:ce:66:30:fe:f9:8f:59:06:28:83:57:
3e:50:7a:25:a0:2d:ee:02:a2:eb:b7:e4:f8:08:8a:82:12:cd:
0c:5e:db:0a:8e:94:b6:88:d1:ef:78:be:fe:33:b0:47:d6:e7:
db:20:37:1e:c0:52:d2:7d:01:93:41:e3:e6:c6:d1:a4:8f:c1:
38:d2:c9:e0:9c:36:9e:43:02:25:f1:df:1a:2f:9e:29:b4:13:
25:8d:a5:94:cb:67:38:d8:28:ae:b3:91:73:de:99:80:01:f0:
74:3c:9a:cb:ac:f6:8e:23:d4:38:11:fa:c7:18:ea:8b:a3:ff:
ef:12:e6:2f:48:28:21:36:80:db:8a:e9:fa:e4:36:98:f6:6f:
31:bc:c1:31:e7:dc:5c:7f:af:ac:55:5a:35:b2:96:ed:cb:b2:
83:6a:8c:e9:f0:8e:24:2c:30:28:1e:b5:3b:49:8a:a5:5a:0e:
1b:48:24:2b:79:7b:30:79:31:38:b7:cf:c7:d0:0a:bf:cc:2a:
40:14:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:06:30 2026 by rpki-client