Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File: HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier: t1Vokng5hOSaJ5PSf5X1/Lyj0nJ5aeOBeqK22RELiec=
Subject key identifier: 7A:D1:8B:C0:8C:6E:D9:B7:A8:35:DD:24:BF:C2:A0:DF:F6:B6:B9:F6
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 01A0F7FB8F9F2F8A8CA6A0145B71FA602AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number: 1533
Signing time: Thu 01 Oct 2026 15:00:53 +0000
Manifest this update: Thu 01 Oct 2026 15:00:53 +0000
Manifest next update: Fri 02 Oct 2026 15:00:53 +0000
Files and hashes: 1: H3ycH91yvh6gTQF7PN84eh0wxVE.asa (hash: viJh9vysgmp/mmNfkMmx2GxNg5QYqXsyklY6TiNnHKs=)
2: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: XSUFZ5kP12tcxKVzKDBIIB6urtkjcp4qmqcLYDPHKAg=)
3: dAblp8vp-pMAwa1_Vthxc2gt8k8.roa (hash: wEmjefANEUzkZ5hvuYtJ5mos9QLC+6Qw68fr7kd+5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fb:8f:9f:2f:8a:8c:a6:a0:14:5b:71:fa:60:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Oct 1 15:00:53 2026 GMT
Not After : Oct 2 15:00:53 2026 GMT
Subject: CN=7ad18bc08c6ed9b7a835dd24bfc2a0dff6b6b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:54:83:ef:d1:5b:22:a3:f9:49:8b:a7:37:
fe:74:11:08:a1:80:70:ef:0d:a6:24:3c:f4:d6:d5:
97:00:98:cd:bc:fc:4d:98:0f:28:62:6b:9e:54:ca:
f4:46:17:3d:c3:11:d7:22:35:14:aa:76:ef:d9:02:
11:96:ac:69:10:61:c6:68:6c:8a:ac:9a:c3:77:58:
da:47:16:77:57:a6:36:e8:67:09:e5:c0:36:85:92:
da:43:9f:35:5b:70:db:f4:83:4b:b6:5d:2e:bd:77:
60:e9:db:ac:b3:39:f5:c4:fb:7d:e7:9f:c4:12:c9:
7f:69:38:e4:77:20:f1:d8:c1:92:e5:a2:e6:f5:9f:
b3:0d:66:0b:46:1f:af:85:6f:4f:de:2d:ac:36:4d:
d5:87:79:35:11:20:84:66:0f:b7:dd:68:f4:fe:1f:
60:fd:4e:97:fa:51:51:f7:95:44:24:58:75:39:3a:
30:0e:32:dc:26:52:55:05:5a:d5:ee:82:f7:43:40:
c8:de:17:fb:58:1c:23:81:42:36:41:c7:22:be:82:
8b:d5:45:0b:fa:48:b6:3c:9a:cd:6d:9c:44:2d:b9:
cd:b9:6d:49:2c:7e:12:a4:4b:ed:9c:aa:49:53:6e:
3d:5d:5f:30:af:58:11:2f:3d:56:8e:38:a0:59:fd:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:8B:C0:8C:6E:D9:B7:A8:35:DD:24:BF:C2:A0:DF:F6:B6:B9:F6
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9b:19:05:f5:2a:d0:5c:15:0b:8c:2b:78:9f:d5:9d:a6:c1:
f6:d7:c9:86:06:1d:54:a8:0c:64:78:57:eb:c2:3d:4a:2f:73:
2f:cf:bb:79:ce:48:36:b1:0c:a7:5c:45:dd:7e:f7:d7:62:7c:
1c:0a:a6:b4:06:1a:80:e8:20:cb:66:87:a0:b5:b3:99:b3:7b:
70:5f:41:31:45:70:80:ca:0f:a8:fe:7d:b3:78:43:9b:bf:b1:
1d:74:d9:22:56:54:8c:ee:82:44:2b:da:3c:b6:28:66:7a:83:
8f:a9:5a:fc:7a:f6:d9:b2:ea:06:79:78:25:d9:5f:1d:1d:72:
2a:67:b7:c6:25:e9:5f:11:42:33:ec:3e:0a:82:ee:b8:83:91:
9e:4b:1b:df:ba:f2:a0:aa:58:2b:ae:6b:35:98:1b:de:a7:3e:
23:bf:17:a4:f6:28:c5:d8:27:1e:12:17:30:f6:42:16:b5:23:
67:ff:9a:96:a9:7d:9a:1c:59:4e:92:be:a7:88:9c:48:99:f2:
eb:b1:1c:7e:29:83:2b:a1:2d:07:3a:ba:53:38:b8:3b:ec:09:
7d:b0:70:ae:95:35:d2:bf:28:a7:48:a7:b1:b3:93:ff:fd:4b:
2a:bf:45:60:f2:cf:e3:76:3d:38:0d:7e:e4:01:1f:90:4e:b3:
fe:0f:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:39:55 2026 by rpki-client