Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
File: HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft (raw, json)
Hash identifier: KXplXxBM9FCvLjbgJ+inM4g60ORcuk+MiE+3qyQ4t5M=
Subject key identifier: 0D:28:9F:CC:DE:A5:2D:01:49:92:68:85:2D:A0:EC:80:10:AB:11:D2
Authority key identifier: 1C:87:7E:C4:28:2D:12:D8:C8:FE:60:CB:99:E1:B6:F9:68:FD:35:2F
Certificate issuer: /CN=1c877ec4282d12d8c8fe60cb99e1b6f968fd352f
Certificate serial: 01A0DBA8C066444B5676141FFEA8D6C44DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
Manifest number: 1F
Signing time: Sat 26 Sep 2026 03:01:04 +0000
Manifest this update: Sat 26 Sep 2026 03:01:04 +0000
Manifest next update: Sun 27 Sep 2026 03:01:04 +0000
Files and hashes: 1: GwFP20MnHcDLa889Vr0NRpN1jKw.roa (hash: ydzsTAHTZRTqP3ydi4ynQMZ0OrFyWwXpXzSvfKX7KaI=)
2: HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl (hash: qnd1eoHxqB4tIlslVxeL/FLoOWJbbT+05faqvFXhvzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:c0:66:44:4b:56:76:14:1f:fe:a8:d6:c4:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c877ec4282d12d8c8fe60cb99e1b6f968fd352f
Validity
Not Before: Sep 26 03:01:04 2026 GMT
Not After : Sep 27 03:01:04 2026 GMT
Subject: CN=0d289fccdea52d01499268852da0ec8010ab11d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:d2:b9:27:e1:48:a1:3c:d3:62:e9:48:e2:
0c:94:fc:5f:82:39:bb:40:5d:ab:55:0c:15:d7:ba:
ce:ed:8e:c3:08:67:22:5a:d5:a4:2f:27:7f:c9:65:
fb:78:9c:92:25:2a:c8:1f:aa:91:de:5e:4e:7d:a7:
19:12:ce:57:0d:e6:cc:88:e8:85:fb:51:cd:cc:c4:
b9:75:0a:65:50:28:f4:49:33:95:dd:6d:f7:2a:24:
cf:50:69:20:c6:ab:f2:9d:55:8a:d9:73:d3:dc:c5:
eb:5a:3c:99:39:32:38:e1:e9:9a:e8:54:18:55:55:
0d:9a:38:ea:d4:c9:1e:2b:72:13:6d:0a:ec:40:70:
2b:8a:25:51:d6:de:8e:4d:04:7b:49:20:22:8d:35:
3d:f6:b8:53:2c:12:27:9e:f4:8d:8c:cc:b5:d9:29:
82:93:15:59:15:79:ae:cc:15:4b:9f:f3:71:b0:92:
da:db:26:3a:ef:0f:ae:c8:f3:30:0d:35:85:f3:0d:
45:cf:60:b6:8a:f4:d9:a1:42:00:b4:2d:60:64:d3:
26:06:93:d7:54:98:c7:f0:24:ba:a1:a3:be:93:a1:
ef:16:ea:18:78:22:c2:69:d4:ab:9d:5e:9d:70:8a:
39:bb:91:0c:9a:24:1e:41:a6:22:42:64:a5:59:2a:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:9F:CC:DE:A5:2D:01:49:92:68:85:2D:A0:EC:80:10:AB:11:D2
X509v3 Authority Key Identifier:
keyid:1C:87:7E:C4:28:2D:12:D8:C8:FE:60:CB:99:E1:B6:F9:68:FD:35:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ad:5e:36:e6:0b:59:31:a5:74:e8:ec:6b:23:94:77:fc:82:
9d:9b:9e:d4:a3:1a:44:1c:a0:e5:ea:81:ad:55:37:98:e4:75:
26:81:50:a2:15:0c:56:34:7e:01:11:e1:f7:23:1f:ca:da:d8:
fc:41:4f:27:f8:b2:3e:3b:38:75:74:54:c3:3d:de:18:12:8f:
62:af:38:79:d7:7f:36:c4:05:87:62:e2:ed:d2:a9:39:7c:61:
7a:3b:25:60:ee:17:c5:89:35:a0:85:83:99:11:94:96:ec:c0:
dc:37:5d:4c:f5:bd:05:0f:12:eb:6d:c5:31:66:6c:3b:f4:13:
fd:2d:e0:4a:2b:12:5c:39:69:74:0a:3a:9f:1d:71:3e:00:2d:
73:f5:ed:1f:6c:b6:82:e3:93:e7:90:c6:5b:bc:09:71:83:9f:
61:79:1a:68:98:99:74:01:c5:fd:5d:ef:dc:60:70:cc:39:0a:
30:28:f4:d9:e2:16:c5:b7:e9:16:d7:f5:67:d4:54:a9:dd:1a:
71:6d:0b:ec:d9:f0:22:84:42:9d:6a:e4:72:a2:d2:a4:30:a3:
d4:aa:3c:3a:cb:1a:c3:6c:7c:41:5b:b5:e3:0c:a8:22:29:62:
40:ce:8c:ab:f7:9c:1f:87:2d:89:ee:95:99:05:e2:b7:dc:fd:
3b:65:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:11 2026 by rpki-client