Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File: HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier: 23TkKucj6t5CBlDoTHX265wLe0FBPOOTeqRhYk23KjI=
Subject key identifier: EA:A3:BD:58:1F:DE:59:A7:09:D7:CC:74:05:61:0D:80:B4:30:A4:09
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01A0D539326970FD2AFB09255C16FAF33894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number: 15BA
Signing time: Thu 24 Sep 2026 21:01:30 +0000
Manifest this update: Thu 24 Sep 2026 21:01:30 +0000
Manifest next update: Fri 25 Sep 2026 21:01:30 +0000
Files and hashes: 1: BX-wklLdDD8XzxHJksQRCy4pE1o.roa (hash: uIUm6XT6o4/miIBu0V3ZQSH97iCpXkbo1bhxbJYRoCE=)
2: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: XL9ZJANt2tyj9uQ4ZqgIh17RPKND+q0oTWCokinF1qI=)
3: il3y8Onxh5fLAIfmtOQN8b7m1WY.roa (hash: ZV1R7FC5O8+fdS5U8RdGxw7AX7F0UkiAYpEfs6LZIkI=)
4: p-OtpG7NAZq6sk3lKJLX_TdhJx0.roa (hash: 6ANbLODWbSBjq2JK8gNSvCXV+On0WKNrg0hi8XNLiSM=)
5: zqqNdPd2jN90nFzH_xKr7SBp6k0.roa (hash: 4bJ5x444099qNpfBFVyMLNFC0y78xdbHZoBQBCBD0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:32:69:70:fd:2a:fb:09:25:5c:16:fa:f3:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Sep 24 21:01:30 2026 GMT
Not After : Sep 25 21:01:30 2026 GMT
Subject: CN=eaa3bd581fde59a709d7cc7405610d80b430a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:bf:40:15:60:72:56:34:18:7d:8a:d6:6c:
13:cd:c6:6b:13:f9:a4:a5:53:73:24:b4:44:b7:d3:
2a:f1:55:0b:6d:b6:d6:4c:f9:37:5b:e9:e2:57:98:
e1:0c:7f:b4:66:08:dc:bd:82:4c:17:5b:32:e7:bc:
b8:2b:1e:0a:3b:ae:95:f0:ce:d8:c9:6d:e7:e8:fd:
90:90:95:4b:e2:84:9d:16:41:c5:9b:22:a4:7b:f0:
6c:e9:c5:63:2c:2f:f9:8a:ca:5d:09:20:a5:9a:47:
90:c2:77:c5:98:b5:10:2d:88:f1:46:e9:af:c0:c7:
61:22:b8:bd:b1:02:ed:98:66:72:55:b1:3c:0a:93:
86:ab:9c:8b:bf:c7:ea:a6:ee:0b:1d:df:f7:f0:7e:
04:79:97:2a:dc:42:47:b2:51:77:46:55:ec:9b:a9:
a4:fa:b6:40:c7:c0:28:ef:8e:3f:47:2b:ca:b1:70:
fd:c0:dd:f5:59:0e:1b:1a:4f:43:bc:10:54:bf:5b:
58:57:c6:8b:c2:71:60:aa:e8:30:f7:8e:e7:8d:15:
11:4e:e1:0f:3e:b6:c6:8e:ff:78:0d:34:2a:6f:ef:
59:07:ff:00:0e:f2:b0:5d:63:ad:f9:cf:26:be:68:
69:dc:2c:e0:a2:23:08:81:2b:a6:d8:9c:9f:b9:ec:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:BD:58:1F:DE:59:A7:09:D7:CC:74:05:61:0D:80:B4:30:A4:09
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3c:b6:03:47:be:d3:70:30:0f:43:c3:01:d0:4c:a4:17:a0:
df:2e:f4:3c:85:8b:32:99:5c:3e:93:38:65:6f:19:4e:96:bb:
d2:27:a8:d1:ce:81:70:0b:cf:4a:bf:87:d7:55:14:b4:17:c1:
70:c3:11:4b:70:70:d3:28:0d:57:fb:74:2c:e1:b1:28:39:7e:
7e:fd:76:ee:46:c2:71:06:48:10:e2:63:0e:a1:c0:1d:3c:7b:
2a:d4:33:e0:3f:a0:ff:15:00:64:27:23:77:4e:dc:19:37:0d:
ba:c6:bd:62:d7:7d:64:f6:b1:a7:d1:5a:ce:0a:5b:de:9d:e3:
da:0b:89:96:eb:f3:ce:b7:2b:7e:8b:03:75:74:8f:08:1e:6d:
a5:d7:b5:29:c5:f3:0d:2f:15:b3:f1:1f:4a:bd:19:b8:1f:29:
34:dd:6e:aa:33:bb:25:16:c9:b4:4e:e1:0a:61:03:29:c0:ad:
5b:5d:f1:83:66:8f:bc:ac:ba:74:bb:6e:9a:67:81:5d:ae:72:
04:b7:45:9c:ea:9c:ef:da:96:b9:39:44:72:54:ff:d7:01:57:
28:e3:69:31:58:db:e5:32:e2:f4:cc:9b:ad:c4:24:86:6d:a7:
f0:62:54:b0:7b:ca:e8:32:3a:02:4b:5f:ee:55:6a:c5:2d:6b:
c2:e6:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:01:34 2026 by rpki-client