Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: 1Ea/LR7S7ELZKwenNDF8sfCZsSpdVxeEa4ch7+AJxwM=
Subject key identifier: 05:3E:BA:06:2B:41:38:82:AB:9C:84:EF:4D:1B:D9:7D:3D:31:C8:CD
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 01A0D5A6B47F0021677644D91CE3A31C787E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 23:01:07 +0000
Manifest this update: Thu 24 Sep 2026 23:01:07 +0000
Manifest next update: Fri 25 Sep 2026 23:01:07 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: PAshUpLZz9yk2o9vScIqrr47GpJ+LLqQUcAFiisSJXQ=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:b4:7f:00:21:67:76:44:d9:1c:e3:a3:1c:78:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Sep 24 23:01:07 2026 GMT
Not After : Sep 25 23:01:07 2026 GMT
Subject: CN=053eba062b413882ab9c84ef4d1bd97d3d31c8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:42:03:72:9c:9b:05:6e:bc:ae:42:48:de:
17:85:8d:cb:7f:56:2b:e3:ec:ce:df:14:cd:f8:80:
3c:95:34:4b:bb:ce:0e:27:49:2d:0b:c5:3d:d2:27:
08:3f:51:79:ed:a6:35:19:0c:8e:aa:d1:63:1a:5f:
a1:ef:79:37:cd:38:68:bf:a5:dc:d2:3a:d2:1e:87:
e0:db:b7:b5:b0:56:6e:b4:73:bd:62:5d:e4:2d:cc:
04:8b:d9:e1:ea:dd:12:46:ce:4e:8c:68:d2:b5:dc:
6a:20:f1:6d:14:03:61:35:39:a8:11:e6:93:b8:62:
7f:91:0f:ce:cf:9a:2f:9d:f9:c6:45:7f:2d:06:54:
17:8e:07:47:29:4a:10:06:b4:c9:ee:ba:54:74:39:
50:ee:3a:cf:b5:45:a9:90:20:c8:74:23:d9:65:f1:
50:b2:10:81:70:1e:72:66:57:a1:17:d5:01:0d:21:
89:58:cb:06:f3:5b:02:61:0d:f1:e7:de:ef:c7:b7:
26:3c:9a:0c:06:63:f2:00:03:49:85:8e:dc:12:a2:
4e:56:8c:41:06:c9:15:a5:a5:ff:e9:61:c5:7a:14:
33:7e:3c:ea:ce:dd:e1:1b:9c:b8:1e:98:a1:73:a2:
21:fb:1a:e5:08:c3:84:4b:a1:a8:1e:1b:8c:f2:cc:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:BA:06:2B:41:38:82:AB:9C:84:EF:4D:1B:D9:7D:3D:31:C8:CD
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:8e:73:66:b1:5f:66:8c:84:a7:fc:57:49:09:f1:dc:fb:
12:6e:eb:11:c1:6f:f4:0e:6f:67:3b:35:86:b5:7f:12:90:e2:
59:ec:2b:1c:ca:74:18:39:48:49:e3:18:93:58:e6:73:12:e0:
61:77:61:bf:91:9b:aa:19:be:bd:5b:0e:e6:29:04:00:41:50:
d1:fd:04:c2:d9:25:7d:f1:73:0e:27:a3:5f:45:31:a7:9b:90:
0e:b1:18:ae:a3:64:99:d6:64:b3:40:05:97:fc:8d:32:1d:a1:
01:bc:f3:a8:3a:3d:78:5e:f5:a4:c8:c8:65:1a:b6:75:91:6b:
ca:cd:6c:a2:8b:15:e4:54:b0:9a:a8:7c:c0:32:fa:f7:93:af:
5c:8d:68:c6:b5:75:4a:16:9a:99:12:ca:93:f6:cd:b1:61:41:
d5:40:ee:8b:36:48:b4:46:fc:d2:47:23:9c:77:6b:d2:6f:b3:
34:f9:ac:99:49:83:4c:6d:ae:48:71:52:de:3b:0e:41:91:c3:
3f:e2:ea:e2:cb:2f:84:68:13:68:37:2c:f6:f1:a1:c1:9f:8a:
55:1b:1b:9e:54:03:92:b1:15:08:1d:96:ae:b5:19:6c:be:aa:
2b:0c:78:b0:d0:05:00:f1:35:e4:07:17:61:3f:4c:1c:64:e8:
50:7d:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:37:34 2026 by rpki-client