Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: nukTVEY6K8N9gFEK7hJQ+dUYNEm4vQ3EN1HA0Lbf5Zk=
Subject key identifier: 0E:43:EE:9F:40:F5:5B:60:9C:DF:8D:12:96:6D:DF:1A:F4:20:6E:E5
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 01A10737D0093B294D82EEF0A17A01104148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 1131
Signing time: Sun 04 Oct 2026 14:01:00 +0000
Manifest this update: Sun 04 Oct 2026 14:01:00 +0000
Manifest next update: Mon 05 Oct 2026 14:01:00 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: lU/7gznp+PPKjHRG6i2pXsukIbt/AgHzzWgDISz5ku8=)
2: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (hash: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:d0:09:3b:29:4d:82:ee:f0:a1:7a:01:10:41:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Oct 4 14:01:00 2026 GMT
Not After : Oct 5 14:01:00 2026 GMT
Subject: CN=0e43ee9f40f55b609cdf8d12966ddf1af4206ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:08:69:11:89:b6:8b:75:c0:27:36:c6:22:
e0:81:fd:3f:71:fa:08:80:3a:c9:de:3a:f6:a5:2d:
43:5c:fe:ae:5e:a4:74:88:74:64:60:2e:62:d9:53:
b9:d2:bf:a6:22:49:85:c0:75:ea:14:3b:d1:9b:7d:
31:2d:15:c6:c5:06:11:e7:e5:f9:82:62:a7:40:b1:
1c:8c:58:d7:44:a4:e8:b8:fc:e0:82:dd:e1:bf:bd:
8f:f9:13:93:94:e2:f9:08:5b:75:89:dd:6a:b8:f1:
16:1d:37:60:68:bc:58:c5:d4:70:6a:00:63:e3:93:
30:dc:f5:c5:32:a1:8c:70:88:ca:8a:b2:48:65:55:
60:82:97:a8:e6:c7:e7:2b:dd:31:10:1b:70:31:25:
82:18:61:0b:99:3d:d4:11:9a:7c:54:20:60:5b:d7:
5f:b2:3d:19:d5:b7:06:54:ae:f9:43:74:c8:49:20:
b3:af:c7:1a:3b:0c:04:07:3e:a1:fc:5c:6c:fb:93:
30:b6:a3:d1:e4:53:70:cb:36:85:da:ca:b2:52:6b:
65:0a:f8:4f:0e:68:75:7b:58:1b:96:a7:37:e8:8a:
a4:2d:a2:c3:fe:fc:21:a9:45:e9:2c:9f:e8:e9:80:
42:28:86:03:da:d6:ed:15:77:0e:ea:00:40:ef:d5:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:EE:9F:40:F5:5B:60:9C:DF:8D:12:96:6D:DF:1A:F4:20:6E:E5
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:3e:3f:24:fe:32:46:5b:2e:4e:94:b7:d7:f8:66:3b:69:
10:7e:20:59:46:fc:02:71:f0:50:62:a7:ad:ed:ef:14:95:c4:
40:78:1a:ae:77:e5:de:39:45:a0:2f:3f:7e:b5:f5:3c:4b:db:
6b:97:87:ce:7d:a1:43:29:b6:f5:48:5d:d2:5e:50:93:b9:dd:
63:10:92:f3:e9:a6:3d:0e:33:ff:f2:6b:fb:1a:f1:f7:ec:d7:
9d:58:5d:82:d0:c5:1f:60:9f:17:be:19:b1:6a:b6:39:6c:47:
7a:9e:66:d2:90:e1:14:3a:6a:06:5f:0c:ac:91:34:86:e1:a2:
0f:57:c5:eb:48:15:4e:12:e1:3d:d0:1a:05:51:81:22:e0:b9:
89:ba:88:78:23:bf:87:1f:50:46:1c:1e:a5:af:57:dd:9d:0e:
09:59:0a:e3:e3:17:93:46:41:88:87:f5:36:bd:0c:94:48:5b:
7b:9d:36:9e:5d:ac:e1:78:07:7e:91:40:06:20:12:1a:eb:93:
8e:9d:79:31:bb:37:9b:20:f1:4d:b9:39:9c:bf:2a:bb:1c:85:
7f:09:40:6b:78:1f:3b:79:57:6f:bb:4a:e7:a6:eb:c4:35:14:
d1:4f:f8:c1:fe:0c:c6:e4:b6:b0:53:9c:26:9e:c9:07:92:df:
d6:5b:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:10:05 2026 by rpki-client