Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: hqcBqzR4U9e/eib/SdGx3k/ja0fSzY7pCbdEx1V+CME=
Subject key identifier: A5:5C:09:40:6A:40:32:EC:E3:7A:67:F9:E9:F5:5F:24:29:B3:DF:CF
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 01A1DB704CC810A4C4A00FB766F514FECAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 1A8B
Signing time: Sat 14 Nov 2026 19:02:12 +0000
Manifest this update: Sat 14 Nov 2026 19:02:12 +0000
Manifest next update: Sun 15 Nov 2026 19:02:12 +0000
Files and hashes: 1: 2bI3Qmws3XXES10TrMjiduJ0YjM.roa (hash: bcVf9v+MOeXBf4uPxEXPoMaoEkIH2++T0r9Amvk7Lz4=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: 8OTmTbUZKxkJL+neU5cA9nAkZuOgqC9x/RBL4nxE9iQ=)
3: qDBYly1bPJHEWzf3KSh4kbAKoSE.roa (hash: /dEPY4ISho5+pizHQhcr05+1Nz5OQLhHQjUo3iw6R2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:70:4c:c8:10:a4:c4:a0:0f:b7:66:f5:14:fe:ca:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Nov 14 19:02:12 2026 GMT
Not After : Nov 15 19:02:12 2026 GMT
Subject: CN=a55c09406a4032ece37a67f9e9f55f2429b3dfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:94:0f:fa:1e:ca:7b:c9:63:99:d3:b7:dd:
69:17:1f:c2:f5:8c:6a:81:c6:65:33:ea:a8:2e:6f:
dd:12:d5:6e:ed:37:0c:e3:df:62:a2:d5:8e:63:f3:
d0:a2:6c:ae:de:bf:06:4f:85:24:00:87:a5:fc:89:
79:53:2b:cd:39:f1:c5:66:17:60:96:2a:84:79:c4:
d7:c7:9d:bf:d8:1b:0c:b2:91:8d:00:85:0e:12:d2:
fb:ae:4a:75:cf:7f:de:cf:ff:33:45:94:5f:46:5e:
90:33:da:4e:c6:2a:04:a6:67:9f:0f:e7:bf:e1:c5:
42:55:b5:02:a8:d9:a2:05:1c:24:32:c1:c1:76:5d:
a5:89:c6:fa:a8:b4:8a:19:bf:e4:ba:b9:82:d7:3d:
8e:5e:59:03:d1:c5:94:91:87:a4:a7:65:8a:16:6c:
8e:50:27:32:de:6c:04:ec:e3:8a:40:3a:34:cc:88:
a2:33:88:2d:e6:cd:cd:a5:60:f4:48:86:35:7b:f6:
24:14:ae:63:6a:30:13:56:8b:6b:f8:db:b0:ee:0a:
1e:58:f0:f6:06:85:86:90:e7:1a:32:dd:20:91:41:
2b:58:a5:79:9f:f0:e9:bc:a3:d4:e1:2c:ea:0a:7e:
d9:9f:8e:d7:b4:73:a5:7d:3b:2e:c7:57:04:dc:23:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:09:40:6A:40:32:EC:E3:7A:67:F9:E9:F5:5F:24:29:B3:DF:CF
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:f7:65:b3:a3:af:ae:f0:39:7c:7a:e3:a5:8a:f7:33:87:
f6:ff:4a:f8:27:77:f8:1f:83:89:1c:c4:95:09:94:71:e0:19:
6f:dc:1c:b5:9f:98:1a:2b:21:8e:de:8b:09:65:a3:9e:99:a3:
da:06:48:c4:c5:ad:26:22:91:b2:30:7d:50:34:c0:da:0e:bc:
74:a7:f9:51:9c:c3:02:4a:3a:2c:8f:8e:72:19:03:7d:fd:af:
43:2f:7c:fd:7d:6f:7c:8f:fc:68:dc:f8:ce:c8:22:eb:dd:a9:
51:5b:e1:e7:6c:4a:ab:26:2a:e7:a7:da:d1:20:62:d2:2e:98:
24:45:5c:85:2c:21:b8:20:ad:ba:96:87:21:59:96:e5:51:70:
6e:4b:a2:0d:d1:c4:6e:33:fd:85:d6:f0:eb:f9:55:96:19:d5:
36:0d:c1:99:ca:93:dd:da:de:46:54:1a:58:97:44:61:8c:58:
71:a5:4b:8f:53:5e:18:2d:ac:b5:77:f5:a9:d4:1a:43:9f:cd:
f4:04:b5:fb:8f:f2:f7:36:4c:5c:b6:4d:76:52:53:a8:be:72:
d9:df:26:b5:55:d5:f7:d2:ad:26:28:28:6a:0f:10:25:e8:ec:
14:b7:3e:f4:a7:88:2a:37:ec:69:8c:6b:d5:08:15:ea:4b:16:
42:5b:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:29:36 2026 by rpki-client