Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: i5lUYPgtDPcNlwwGbkeY4QEKYiHDzLYrjQjCapj+qT0=
Subject key identifier: 5E:AD:31:4B:B7:41:F4:21:C5:FF:45:9C:DD:BE:56:E9:E6:7C:FB:FD
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 01A1DF83879903E3673750A11B7BDD14A718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0FBC
Signing time: Sun 15 Nov 2026 14:01:41 +0000
Manifest this update: Sun 15 Nov 2026 14:01:41 +0000
Manifest next update: Mon 16 Nov 2026 14:01:41 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: Tr29JAIqdHPRUSbiEgVQj6HXT4CzudpAcW5oSm2y7xg=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:87:99:03:e3:67:37:50:a1:1b:7b:dd:14:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Nov 15 14:01:41 2026 GMT
Not After : Nov 16 14:01:41 2026 GMT
Subject: CN=5ead314bb741f421c5ff459cddbe56e9e67cfbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:d1:0f:8b:7f:36:9e:ad:bc:f1:d0:c1:fa:
c0:5d:21:c0:61:69:96:f0:8c:f0:c8:15:04:de:39:
cf:b2:0e:13:91:16:d8:b3:ea:fc:79:c5:bc:bf:62:
70:27:0c:66:59:97:49:2c:3a:43:d4:50:77:4a:65:
ef:3d:fe:dc:d4:3e:9b:89:05:1c:bb:33:06:c1:dc:
4f:ed:91:27:15:37:2b:60:a9:4e:15:05:83:d9:7e:
6b:58:3a:75:e9:b1:f9:f8:4b:32:8d:bc:ea:d0:b0:
00:f7:e0:36:f1:66:b2:d4:a1:87:97:f6:d4:64:5f:
f6:f8:04:26:9d:be:80:3f:7d:29:1b:60:8a:3b:3f:
a5:cc:e7:17:00:bd:0a:35:1a:2d:d9:31:a0:38:22:
55:d2:e0:56:1f:fa:cb:f3:c0:cb:4c:d0:3b:98:39:
33:0e:b3:0c:35:0a:4a:84:78:39:9a:7d:bc:8f:d6:
ad:8a:fb:5f:19:c7:15:99:f3:23:9a:3b:f0:65:3a:
7b:5e:3d:ac:80:a8:db:ea:2e:be:45:05:ba:d1:26:
31:29:b5:ec:ec:79:57:1a:84:a0:a7:e0:10:91:ed:
6b:2e:06:27:36:9e:a2:dd:81:02:c7:13:81:43:ae:
98:74:ec:4e:68:99:78:af:af:43:09:c2:0f:ec:ce:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:31:4B:B7:41:F4:21:C5:FF:45:9C:DD:BE:56:E9:E6:7C:FB:FD
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:48:9d:c4:b5:0b:08:e3:49:14:63:a4:9f:6f:c4:29:24:05:
25:c1:78:ae:0a:2c:0a:39:72:70:98:02:86:04:67:7f:af:cb:
36:c5:2d:2f:de:d2:ed:0d:9e:9b:82:16:fc:cf:31:1f:55:0d:
dc:cf:18:cc:14:37:27:7e:82:51:a4:ba:1c:e4:c2:d0:12:1d:
09:1b:dc:45:bf:f9:d5:97:10:ce:db:4a:ba:4f:b3:ab:a4:38:
71:1e:f9:fe:47:f7:c5:f4:49:e8:b0:85:12:5b:ef:33:e1:bf:
e7:38:f9:7e:38:ee:78:29:96:c8:ba:e8:e2:c5:be:1c:7a:b2:
53:a2:e0:9f:5b:8d:9e:8d:e6:2f:a5:a3:8d:d5:1f:7d:57:9c:
5a:32:18:df:5e:33:b1:9c:cd:3f:5e:10:ef:be:7a:ba:81:82:
7c:5c:8e:5c:fb:5c:58:03:e5:a1:0c:01:33:45:cd:fb:70:50:
4e:05:9e:8b:49:8f:2f:d2:38:4e:89:cd:78:f6:ba:01:3a:a3:
ea:67:ef:51:8f:fa:15:9e:d1:b3:97:cc:44:18:f1:36:79:04:
c4:71:8e:9e:16:8a:f1:70:43:a8:c4:a0:43:ab:40:0a:7d:5c:
25:ab:82:54:f6:7d:6e:aa:34:a3:c0:8d:4b:42:a1:91:b7:80:
5a:ab:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:19 2026 by rpki-client