Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: XbgUIJbFj6d1qvC19TaGnKO997/RHv2fwdoc+U6zpYs=
Subject key identifier: 49:CB:05:C4:6C:E3:D7:F0:09:4D:03:6A:43:7A:FE:92:B6:D8:FA:87
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 01A1317D9517CE80330CC24AF32B6FC7E686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0A5E
Signing time: Mon 12 Oct 2026 19:01:16 +0000
Manifest this update: Mon 12 Oct 2026 19:01:16 +0000
Manifest next update: Tue 13 Oct 2026 19:01:16 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: /9oboBDF3epFUlmtPUlKCPRHb595bjn7UwEz58ROEDE=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:95:17:ce:80:33:0c:c2:4a:f3:2b:6f:c7:e6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Oct 12 19:01:16 2026 GMT
Not After : Oct 13 19:01:16 2026 GMT
Subject: CN=49cb05c46ce3d7f0094d036a437afe92b6d8fa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:3b:9e:b8:6f:42:a7:7e:30:38:fa:20:fb:
23:f0:03:50:f9:69:a9:9a:1e:f7:43:21:28:b5:7a:
91:a1:26:77:bc:d0:f7:ed:3f:a3:1f:d6:ba:68:bf:
9e:98:fb:a1:30:aa:1a:6a:4e:21:ff:0b:b0:3f:0a:
72:32:8a:d6:a7:fb:ea:e7:67:2b:4c:b2:3e:44:19:
8e:97:fa:bd:b4:54:52:7d:15:61:8d:f9:d1:f9:f9:
2e:9d:8a:57:b1:38:c6:3b:c1:d8:ef:bd:a8:b0:f4:
89:dd:cf:77:79:b0:c9:d9:b1:e1:65:5f:84:61:e7:
29:ba:fd:be:3f:25:31:e5:56:2f:9b:f1:3c:79:66:
72:1e:33:5b:3d:a3:45:33:9a:42:0c:b4:df:30:e3:
0f:31:a1:9c:3b:c6:6e:00:aa:ec:71:be:cf:55:8f:
72:92:ce:4c:7b:17:a8:23:25:df:1c:6d:c2:c9:29:
9e:9a:ff:3d:0e:8d:48:81:44:4a:d3:9d:dd:97:04:
6c:2b:6f:88:d8:6b:04:79:44:14:f7:6d:2b:b7:90:
78:f0:d9:b8:df:fb:b1:6b:21:b4:4c:f2:31:b4:05:
b3:af:61:b6:13:91:84:f6:c6:dd:aa:00:fa:7c:cf:
b3:13:89:a6:e6:79:59:57:92:db:69:ae:b1:2c:94:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:05:C4:6C:E3:D7:F0:09:4D:03:6A:43:7A:FE:92:B6:D8:FA:87
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:37:d8:37:c1:81:5a:e3:b0:9b:8c:2e:d7:c2:dd:31:20:70:
9d:ed:4c:d2:43:47:56:2d:6f:77:45:ec:0d:c1:a0:fc:65:13:
0a:14:b9:db:dc:a1:16:3e:3c:49:f1:9b:b7:b7:13:cb:55:53:
84:8d:f6:49:7c:ed:91:8c:8c:04:e7:ee:65:f1:9e:89:49:f2:
c2:7b:06:05:f4:69:22:70:41:7d:bd:8a:c1:c7:5b:2f:14:99:
f5:59:76:5c:f7:81:85:9b:aa:50:06:9f:5a:5d:82:05:f5:15:
9e:6e:39:8d:6c:22:fd:8d:ca:04:41:da:ee:ee:77:39:68:64:
87:e4:c8:91:fe:bc:24:ef:2d:db:1e:8c:17:58:75:cd:1a:5a:
24:32:60:3b:2d:bb:40:65:f5:12:5b:5d:34:18:56:4a:ed:74:
c4:d3:17:a2:16:6d:a2:a7:26:70:ca:51:49:41:b0:5c:d0:7d:
e4:63:7a:f7:29:39:bf:96:73:59:6f:af:3b:7d:aa:75:0b:9e:
c0:02:fb:6f:2c:4c:ba:d8:74:e9:40:4f:59:69:6b:67:37:5f:
83:78:cf:fb:cb:b3:de:94:73:5e:c1:6b:aa:f3:f1:bc:0c:08:
d9:cd:0f:bb:b6:18:88:c7:f1:c5:f3:5a:65:4e:fb:e9:cd:dd:
2d:c3:77:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExfZUXzoAzDMJK8ytvx+aGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh
NzY2OTMwHhcNMjYxMDEyMTkwMTE2WhcNMjYxMDEzMTkwMTE2WjAzMTEwLwYDVQQD
Eyg0OWNiMDVjNDZjZTNkN2YwMDk0ZDAzNmE0MzdhZmU5MmI2ZDhmYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntg7nrhvQqd+MDj6IPsj8ANQ+Wmp
mh73QyEotXqRoSZ3vND37T+jH9a6aL+emPuhMKoaak4h/wuwPwpyMorWp/vq52cr
TLI+RBmOl/q9tFRSfRVhjfnR+fkunYpXsTjGO8HY772osPSJ3c93ebDJ2bHhZV+E
Yecpuv2+PyUx5VYvm/E8eWZyHjNbPaNFM5pCDLTfMOMPMaGcO8ZuAKrscb7PVY9y
ks5MexeoIyXfHG3CySmemv89Do1IgURK053dlwRsK2+I2GsEeUQU920rt5B48Nm4
3/uxayG0TPIxtAWzr2G2E5GE9sbdqgD6fM+zE4mm5nlZV5Lbaa6xLJR6KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnLBcRs49fwCU0DakN6/pK22PqHMB8GA1UdIwQY
MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt
ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh
LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzfYN8GB
WuOwm4wu18LdMSBwne1M0kNHVi1vd0XsDcGg/GUTChS529yhFj48SfGbt7cTy1VT
hI32SXztkYyMBOfuZfGeiUnywnsGBfRpInBBfb2KwcdbLxSZ9Vl2XPeBhZuqUAaf
Wl2CBfUVnm45jWwi/Y3KBEHa7u53OWhkh+TIkf68JO8t2x6MF1h1zRpaJDJgOy27
QGX1EltdNBhWSu10xNMXohZtoqcmcMpRSUGwXNB95GN69yk5v5ZzWW+vO32qdQue
wAL7byxMuth06UBPWWlrZzdfg3jP+8uz3pRzXsFrqvPxvAwI2c0Pu7YYiMfxxfNa
ZU776c3dLcN3dw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:50:06 2026 by rpki-client