Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: NgT/SgIn/uQfaE/Mx1OOtTx+QYEu/xi/sWQ6Z6/erY0=
Subject key identifier: 68:DE:BE:B7:80:77:A7:7F:20:13:08:6F:21:45:47:4E:AB:6E:4D:71
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 01A1DCEFBFB0460FC9E27E6349D67CAD122A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 07CB
Signing time: Sun 15 Nov 2026 02:01:01 +0000
Manifest this update: Sun 15 Nov 2026 02:01:01 +0000
Manifest next update: Mon 16 Nov 2026 02:01:01 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: FdMnMLNz3I1dugfKanvdYaSMDY6O/F2TXk5HZrF/RvA=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:bf:b0:46:0f:c9:e2:7e:63:49:d6:7c:ad:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Nov 15 02:01:01 2026 GMT
Not After : Nov 16 02:01:01 2026 GMT
Subject: CN=68debeb78077a77f2013086f2145474eab6e4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:49:eb:48:79:89:f0:28:0a:64:32:4c:1d:
7c:eb:96:6e:1f:54:df:86:58:74:68:42:09:fd:17:
29:b2:85:a9:b2:63:29:c6:22:17:ac:9b:fd:a5:36:
e2:c7:c0:75:69:0f:62:5a:d1:ea:19:bf:37:11:f8:
e5:d6:d0:ff:7b:36:db:17:02:b7:d3:d9:33:58:b4:
c1:02:a8:29:1d:6f:4e:fc:20:5a:50:f9:df:a4:cf:
4f:e1:10:3d:d1:a0:a7:e4:62:c5:63:1d:62:c5:c3:
94:a6:12:9e:22:27:47:42:d9:53:ea:74:0c:3c:20:
9c:54:ae:f3:f4:f7:22:6a:53:0a:c7:e7:00:b4:fa:
c2:17:62:77:f9:e0:bd:84:6a:34:45:d3:b9:7b:ab:
ba:98:ea:85:5b:da:49:a4:b8:37:6e:cc:45:c5:33:
c5:72:26:d0:bd:aa:68:ad:41:64:d5:20:9b:de:b3:
7f:9b:de:f4:5f:4d:27:aa:69:58:d3:f7:21:0a:07:
cd:69:b5:23:c8:a8:93:a6:84:57:27:5b:15:96:94:
5a:cf:db:db:89:e1:c5:2a:e8:60:29:09:0f:83:db:
f8:c5:8d:1e:fe:3d:49:6b:20:69:84:23:9f:d1:b8:
50:46:ff:bb:77:5a:cc:21:53:96:84:c2:58:8b:27:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:BE:B7:80:77:A7:7F:20:13:08:6F:21:45:47:4E:AB:6E:4D:71
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bb:55:26:34:c5:98:4c:e1:3c:68:fb:05:ef:7d:5d:57:0f:
bd:dd:35:fc:01:74:15:a0:46:50:24:b1:66:1e:a3:bb:e9:60:
d4:e3:fb:36:8b:60:0a:6c:22:51:cf:61:b4:9f:4d:8a:51:bf:
d8:c2:96:22:f6:c4:b5:bd:28:c4:9c:aa:b5:eb:72:97:ed:80:
f7:94:1b:2c:df:86:2c:36:54:96:4f:09:64:bf:0e:39:96:b3:
72:d5:a5:fe:75:57:5d:5b:77:61:a2:92:aa:3c:c0:c7:32:a2:
ee:93:56:a7:af:ae:cc:1c:18:af:82:fd:7a:5b:71:61:6a:bd:
a4:d5:3e:dc:f0:9f:29:98:ba:b1:93:e6:ef:a6:e8:9d:bd:4c:
65:d9:3f:85:2b:6a:5a:b0:1e:75:0d:5c:7b:a4:26:f1:f9:1b:
69:ad:94:d5:f5:dd:ab:5a:45:bf:fb:e2:44:8a:6f:dc:2e:7a:
e4:b4:ca:0c:92:00:ad:a5:35:50:a2:4d:1e:c1:ae:f9:b9:b9:
4a:e5:b9:4d:bd:c0:4d:bf:f3:4e:5c:86:98:1d:46:1f:69:55:
29:0a:52:6b:59:ef:50:e3:05:85:3f:16:84:c0:cb:a7:c5:1a:
b0:48:0b:a0:38:32:c5:49:69:d3:09:ee:e5:ff:78:f5:22:54:
47:25:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:38 2026 by rpki-client