Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: nmwdFiTrr+kYMqJsKLxX1wDnUh4T41mRNRScokxSnHc=
Subject key identifier: 23:3D:7D:12:AB:BA:73:7D:41:D8:AA:42:08:01:E7:70:A2:4B:C0:B5
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 01A0D6B98DF757B400DF90588CB9FF11D487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 04:01:19 +0000
Manifest this update: Fri 25 Sep 2026 04:01:19 +0000
Manifest next update: Sat 26 Sep 2026 04:01:19 +0000
Files and hashes: 1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: rLpyhUX5MKz3eKpO4YKWFeAirq8nOD/BtKtbtxkY8kc=)
2: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
3: h0uAOEUI-ibYSxCIsCByTHYtsZM.roa (hash: 73z7ExdVrQpDFxLXve4S4EigI54vXhrIVOhvporYAcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:8d:f7:57:b4:00:df:90:58:8c:b9:ff:11:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Sep 25 04:01:19 2026 GMT
Not After : Sep 26 04:01:19 2026 GMT
Subject: CN=233d7d12abba737d41d8aa420801e770a24bc0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:a6:55:60:5f:e7:70:2e:9d:d6:6a:6f:6f:
e4:3a:f8:10:b1:9c:ac:2d:31:ef:3e:75:5f:b6:8c:
20:fa:11:93:da:54:ae:eb:25:f6:f5:b2:ee:34:51:
2e:7b:d1:16:2b:17:8a:43:7d:6f:26:5c:dd:e5:46:
15:de:e5:9b:2f:e0:06:a1:65:54:ae:d9:46:0a:eb:
ba:e6:7c:d2:4e:ef:84:5e:e2:46:e1:87:94:cf:2d:
37:c5:90:cc:ed:d3:bf:08:c9:60:0a:6e:e3:f1:9f:
60:2a:48:3d:cb:54:43:3a:07:63:ba:56:65:f3:4d:
df:ad:53:55:e5:15:19:ac:c7:ce:13:97:48:85:f4:
b3:4d:3f:68:74:a7:1d:42:7a:d0:20:66:79:77:2f:
fa:7b:b2:67:04:71:2f:de:8a:a2:67:89:5b:1e:c4:
cb:94:b6:e4:ee:31:51:2f:29:f6:e5:2e:38:bb:4b:
18:81:47:1c:8f:ba:d9:af:b0:8f:58:96:13:98:bd:
39:cc:00:c2:74:db:08:c4:f8:05:69:58:e2:6c:44:
55:11:9b:89:d2:fe:04:31:57:c2:3b:35:a2:a6:c8:
ce:79:29:d8:47:f7:22:75:53:7d:45:42:24:b1:51:
9f:4a:8a:43:c3:6f:2d:27:d9:58:11:d5:ea:c9:1d:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:7D:12:AB:BA:73:7D:41:D8:AA:42:08:01:E7:70:A2:4B:C0:B5
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:84:aa:fe:66:65:88:62:6f:98:eb:81:27:f2:12:07:0a:
b7:19:d0:01:76:28:80:f4:e7:71:1a:c3:08:22:bc:fc:89:1b:
f6:41:71:79:e3:5c:cc:20:3d:27:e2:69:03:37:b1:dd:a1:1c:
e2:c3:3b:7c:b7:d2:ee:92:f2:b0:70:b2:42:e6:4f:15:ff:81:
8b:8c:93:8d:89:15:e3:bd:48:d7:d0:29:45:e4:0e:79:40:24:
d9:56:07:f9:d2:1b:75:75:ad:b5:7a:93:3f:9e:4b:ca:da:eb:
49:79:da:f1:46:b1:44:9b:2e:3e:f7:5d:6a:4c:ac:d0:df:b9:
23:79:e1:04:6f:e2:07:18:d7:6d:92:24:2a:7a:61:d7:3d:82:
2e:f1:ee:87:e0:6f:0e:bf:56:17:e1:e3:ea:1f:81:f2:c1:01:
f9:99:03:09:de:5c:60:09:71:0c:09:7a:58:f6:1f:b3:09:27:
98:c5:b5:ce:38:a2:76:3f:51:47:fa:5f:16:5e:d5:ce:8d:d8:
11:23:46:4c:e1:fa:4d:7d:47:2f:ae:30:69:63:19:61:fb:a6:
7f:e0:87:09:a0:df:ee:34:81:fc:4f:72:58:45:5d:f7:0a:62:
92:76:fc:46:e9:d9:90:f0:69:75:6c:f2:f6:cf:ee:a5:23:3d:
6f:43:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:34:42 2026 by rpki-client