Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: vYW1/OiKsQfgPjh6Bke1oIGsgF3TSYp/hbLHcTzvVbM=
Subject key identifier: C9:FD:0D:D4:AF:63:99:45:A8:CB:EC:6C:F7:1E:75:AF:F5:FE:00:65
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 01A0E4AC8A61777E9FE350CB0C8B90A1DAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 1A7C
Signing time: Sun 27 Sep 2026 21:01:47 +0000
Manifest this update: Sun 27 Sep 2026 21:01:47 +0000
Manifest next update: Mon 28 Sep 2026 21:01:47 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: mkCGvXqGTmFkCD7zaYJqg4q8avhwqi9jL05J2ipBvYQ=)
2: w0HfD9OyluQqly0Onm0X_I_L5yk.roa (hash: Z0gnGoagQr+uA1M5JDoWrnZSUOuqJJgP2N6rVdd6JcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ac:8a:61:77:7e:9f:e3:50:cb:0c:8b:90:a1:da:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Sep 27 21:01:47 2026 GMT
Not After : Sep 28 21:01:47 2026 GMT
Subject: CN=c9fd0dd4af639945a8cbec6cf71e75aff5fe0065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:a5:c4:1c:ee:bc:0f:ac:d5:62:7e:c4:da:
7e:99:fa:c7:10:f6:03:28:1c:c7:fd:4d:15:f8:9b:
99:c2:f3:72:16:a6:0a:ff:c1:80:4f:a4:15:df:26:
40:be:6e:b0:fc:22:55:9f:b1:e8:71:c0:82:35:54:
78:1f:29:be:e9:43:c9:de:17:56:ea:e9:19:e6:07:
06:00:e0:a1:3b:3d:b4:c8:7e:c2:03:3c:b5:57:49:
db:56:71:1b:7c:f0:ae:cb:7c:19:6e:41:46:6f:65:
b3:7f:e0:ad:2f:5c:0b:bd:ac:c0:79:af:97:be:2e:
c0:e9:05:2a:12:d5:7c:30:f9:3b:03:14:c2:4d:6d:
51:45:d1:17:7b:61:52:1c:ee:e0:cf:69:e9:b1:39:
ae:6b:7c:da:61:43:16:e7:3a:f7:4a:33:b4:f1:15:
c0:42:b3:3d:2e:ad:07:6e:5a:2c:0a:08:75:45:a7:
bf:32:c1:b7:d7:b1:1b:27:ad:4e:07:ce:e6:c1:42:
53:41:b2:97:a1:11:5d:0b:bd:24:52:a8:4c:3b:03:
c5:29:dd:a1:96:c7:9a:e7:ab:b1:ab:77:99:55:75:
c7:28:1a:7a:ea:3f:db:12:ba:3b:6c:92:63:2e:47:
96:db:06:52:e3:a3:bb:ad:74:e5:a1:81:5f:c2:bf:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FD:0D:D4:AF:63:99:45:A8:CB:EC:6C:F7:1E:75:AF:F5:FE:00:65
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ef:14:30:aa:f3:9a:a0:a7:95:5f:c5:7d:b8:62:b1:3f:43:
b3:05:de:79:ac:65:43:69:40:44:8c:4c:d5:b6:df:d5:e8:ac:
82:d3:b8:89:25:dd:a2:8d:c3:53:4a:85:20:bf:10:33:7f:b7:
52:dc:5b:8f:cd:e7:5c:90:05:2b:27:b5:40:10:b6:67:3c:65:
3d:ed:e7:4a:b0:66:eb:c2:6a:b9:60:4f:ff:d7:14:9f:7c:16:
f9:25:6a:a3:0b:b4:b9:ba:a3:2b:04:90:8a:95:2b:c5:aa:10:
2a:98:4b:0e:54:12:fe:a4:6d:04:57:14:b4:74:0c:e9:50:49:
5c:87:6a:a2:4e:07:e6:95:e2:71:47:6e:8a:ff:6e:f3:7f:1e:
91:f0:2e:c9:6b:b7:e0:6c:ee:2b:7b:d8:17:93:e2:07:b8:ee:
14:ee:d3:58:88:c7:05:bc:be:0d:98:bf:a3:31:64:0c:39:fe:
b8:43:69:ba:0b:22:4c:02:15:26:67:03:90:f4:d8:be:4a:89:
a6:fe:6a:7f:b8:28:16:1c:c2:76:a9:cf:51:0a:60:3e:c0:58:
29:00:80:e6:a6:dd:b9:06:97:47:f9:5c:28:60:7b:d2:47:68:
16:c4:88:49:7b:79:21:bb:5c:99:32:77:7e:78:1f:54:2f:e6:
ee:78:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:33:47 2026 by rpki-client