Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
File: HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft (raw, json)
Hash identifier: Zyuj9eTrDj8kUZHr7IqH0Ztqr4PBy+ULxKxtpDXuPmk=
Subject key identifier: 11:D6:9A:DB:2B:06:F4:B2:C4:10:35:70:B6:B1:1A:75:D3:87:65:9B
Authority key identifier: 1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
Certificate issuer: /CN=1c0784053fc866a556234548119416d1bd716980
Certificate serial: 01A0D049543255C63825DBB12C6654054CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
Manifest number: D6
Signing time: Wed 23 Sep 2026 22:01:01 +0000
Manifest this update: Wed 23 Sep 2026 22:01:01 +0000
Manifest next update: Thu 24 Sep 2026 22:01:01 +0000
Files and hashes: 1: HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl (hash: pCSuBa+SdFAk0KRMxxoRH1BlIOD883smAd67ihcKY9I=)
2: Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa (hash: UNgTl0HhH/SBGa8ko1wMjVaJ6tBhwBkcw/5zum00v8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:54:32:55:c6:38:25:db:b1:2c:66:54:05:4c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0784053fc866a556234548119416d1bd716980
Validity
Not Before: Sep 23 22:01:01 2026 GMT
Not After : Sep 24 22:01:01 2026 GMT
Subject: CN=11d69adb2b06f4b2c4103570b6b11a75d387659b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:83:b9:e5:f0:58:ad:63:bb:64:f3:ed:7c:
09:71:e7:0d:69:0d:79:7b:f8:d5:6f:90:87:cf:9a:
5c:4b:53:39:d1:21:27:69:0f:ce:26:38:10:26:58:
53:22:eb:ae:6e:96:26:49:7f:f8:cf:e8:1d:d9:b8:
d1:8a:e4:5b:fc:ac:5a:d6:bb:1b:ac:39:56:d0:6c:
6e:e0:6c:90:77:b3:03:e9:aa:5b:12:f5:46:24:67:
eb:ac:c4:7e:e8:23:02:d5:e4:b2:9e:c9:83:7f:b9:
0c:01:db:49:78:47:93:f6:b4:db:9c:f5:a6:53:d2:
d8:cb:9d:b3:5b:15:09:54:fa:4c:2f:5f:0a:90:1d:
08:db:0e:dc:07:cb:ce:21:6b:01:35:fe:8c:1e:0b:
15:98:ea:a7:66:26:1e:24:a4:39:64:bc:9e:6a:5d:
bc:72:03:84:25:5f:fa:ee:a1:25:5f:7e:7c:0e:97:
87:9a:77:aa:35:9e:bd:3a:37:9e:fa:18:38:81:06:
23:f2:6e:36:1f:36:3b:49:5a:19:f9:31:47:da:25:
29:da:2f:fd:f5:32:4a:3d:ae:44:ee:5c:32:dc:91:
58:4f:3d:bb:cc:58:6a:fd:67:25:ec:b7:77:2c:33:
68:ea:79:a0:06:3b:9f:46:50:33:74:ec:7d:b3:2e:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:9A:DB:2B:06:F4:B2:C4:10:35:70:B6:B1:1A:75:D3:87:65:9B
X509v3 Authority Key Identifier:
keyid:1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:8c:b1:e1:bc:99:60:05:c5:9f:5e:61:e1:e1:b9:68:80:
65:7c:60:53:f5:c3:3e:ca:ff:30:09:6e:63:5d:7e:a3:6e:3a:
9f:ee:e1:ce:4f:c1:2e:22:e4:2f:81:34:d5:56:22:57:fb:95:
2f:c7:27:0b:6c:84:c7:22:08:34:e2:28:8a:4b:58:3d:b8:0a:
6d:2b:e3:9f:89:c3:ed:6a:0e:d5:d9:1a:17:0e:59:05:37:2f:
9d:29:3b:0e:87:7a:12:b1:9f:65:72:d4:24:9e:1d:80:08:7f:
0e:37:17:42:47:75:ce:a1:24:93:bc:79:f9:a0:b7:b8:4d:be:
60:a9:31:a4:9b:ba:88:93:c8:a4:15:ef:2e:f0:48:96:eb:97:
35:f1:01:f1:6a:9c:a9:e5:00:99:0c:97:c9:a8:2b:90:6a:c0:
56:fb:90:3b:96:3c:53:ee:cb:52:3b:91:b8:31:63:47:7c:4b:
0a:87:f7:c3:f3:10:af:2b:86:82:1e:4e:b9:42:67:d2:27:48:
cb:af:b6:d0:c8:63:28:2f:3d:7f:7f:c8:78:e4:a5:70:ab:64:
14:ed:31:9b:a0:7e:a5:e9:92:db:63:06:30:95:b5:61:b0:93:
a8:80:2e:67:7b:52:78:fb:1a:7b:d2:ef:63:3d:c6:c2:d4:7b:
50:f1:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:55:33 2026 by rpki-client