Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: T+BlziimoiNHdOI9porU4puh+2qLDOuTDbluBhY2S1g=
Subject key identifier: 92:35:4C:BC:40:BF:77:80:27:0C:56:9A:5D:83:FE:A3:0E:47:F6:89
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 01A130A1F15730D3242F936BC29A4210FBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 1A04
Signing time: Mon 12 Oct 2026 15:01:21 +0000
Manifest this update: Mon 12 Oct 2026 15:01:21 +0000
Manifest next update: Tue 13 Oct 2026 15:01:21 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: kmQEHYE37iNjSm+GJg7fvTOHQ9s5uQ97itsnyENLYxA=)
2: J-Al8qEAjQvOqUSJW7LJw04Fukc.roa (hash: nPb+yknouPfoljMRTiffVRamSXybT5BjPnR3oDRUAko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:f1:57:30:d3:24:2f:93:6b:c2:9a:42:10:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Oct 12 15:01:21 2026 GMT
Not After : Oct 13 15:01:21 2026 GMT
Subject: CN=92354cbc40bf7780270c569a5d83fea30e47f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:36:a8:30:53:a3:0c:54:cd:e9:cb:5c:0f:
30:bb:18:fa:17:3f:16:2b:a0:dd:60:11:df:be:7a:
cc:81:db:70:15:27:78:32:be:89:69:38:dc:4b:1e:
69:44:b5:ac:70:d0:c5:e2:9f:a6:61:dc:56:6b:0f:
28:a1:01:bf:85:a2:48:bb:d5:a5:05:f4:80:a8:29:
71:67:5e:a5:d4:3a:b8:ec:83:f7:17:e1:4c:03:c6:
a3:bd:60:41:98:c7:26:28:72:37:3f:0f:13:b9:d7:
02:22:e8:fa:d5:9b:35:c9:94:1a:5e:44:f2:20:2b:
b3:a9:85:9c:f3:c2:fe:9a:9a:18:95:b4:6c:3c:23:
32:b9:c1:eb:dc:fd:79:39:a4:a6:95:5c:70:9f:4d:
f5:f4:fb:b5:5e:81:bb:2d:0e:a6:0c:3d:67:b6:b0:
a0:00:76:1a:60:5d:42:f0:af:7d:19:82:be:1b:aa:
18:88:5c:cc:36:e4:e2:94:6d:26:ba:e5:60:c7:c1:
87:76:62:a5:3e:b1:a8:14:0d:b9:ce:6d:a5:77:0a:
bf:4a:aa:f8:7f:6b:e8:fe:9f:98:60:7f:e0:27:6a:
17:1a:bd:21:00:21:53:4d:f3:39:98:cc:22:29:3f:
bb:9e:08:eb:0c:94:e9:e9:bb:2b:44:98:f6:f0:91:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:35:4C:BC:40:BF:77:80:27:0C:56:9A:5D:83:FE:A3:0E:47:F6:89
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:4b:03:be:fa:ed:cc:a8:17:a7:bb:78:70:05:f6:b4:82:
26:6c:ec:9b:89:6a:c6:0d:9a:ff:f1:81:c3:71:6a:a6:13:5a:
b4:78:a1:90:51:93:9c:97:50:cc:31:ed:fc:67:84:e9:d1:8e:
26:71:62:42:81:96:3c:48:1f:c8:fa:50:34:52:22:38:31:2c:
48:4e:6f:93:58:53:c5:c6:f5:b6:09:ab:7f:80:19:6a:41:c0:
38:f0:da:f7:b7:bc:2e:53:7e:06:14:5b:6f:df:20:9b:5f:ee:
19:67:d7:30:69:96:34:33:7a:24:17:c6:55:e0:0c:8e:ea:94:
ce:c2:ab:a7:5f:78:8a:1b:a2:09:7a:e8:1d:e4:52:8f:da:e9:
85:b3:8f:60:ce:63:bd:11:ae:c0:04:6e:0e:10:67:ac:b1:9b:
72:53:74:1c:de:3a:45:05:d2:14:c2:98:f1:a8:df:db:e4:c5:
da:75:da:77:86:02:66:ee:c5:00:11:76:3f:07:9b:e0:1a:09:
89:00:e5:f4:fb:96:86:40:0d:3a:c4:8f:5c:8d:1b:0b:e7:82:
0d:62:96:00:1b:6c:4c:c0:44:98:14:75:c8:04:59:79:97:b3:
8f:8f:04:42:8c:db:58:bc:4b:e6:ae:17:d2:be:85:b8:ee:bd:
ed:3e:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:40:14 2026 by rpki-client