Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: Zha6gqAeONLKnM6xoNEcvCeXz2BbpqP3dFxGWCoRluQ=
Subject key identifier: EB:66:72:CF:92:45:19:E5:8F:61:AA:00:C8:8C:8C:16:73:6E:2D:02
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 01A110A93970FD7694C74B6C5A49029E1542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1A21
Signing time: Tue 06 Oct 2026 10:01:27 +0000
Manifest this update: Tue 06 Oct 2026 10:01:27 +0000
Manifest next update: Wed 07 Oct 2026 10:01:27 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: 7PXf+xPA9uw0crYK7M1FBM+UnmRUZgsEDCm89NHrqPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:39:70:fd:76:94:c7:4b:6c:5a:49:02:9e:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Oct 6 10:01:27 2026 GMT
Not After : Oct 7 10:01:27 2026 GMT
Subject: CN=eb6672cf924519e58f61aa00c88c8c16736e2d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:96:95:2c:cc:f1:32:bb:ad:66:1a:29:03:3e:
a3:e9:55:ca:b5:bd:3f:58:30:fa:36:83:e8:93:cf:
7b:8f:a0:82:c3:32:82:6d:a1:2f:db:5a:7b:cb:d5:
b8:15:70:31:35:14:d6:b1:2d:0c:33:69:d9:87:01:
26:fa:a7:f7:4d:ff:7e:47:d6:16:81:cb:d7:c1:4c:
cf:eb:4d:cf:70:74:40:f3:1a:ee:ca:81:5d:eb:22:
3b:5b:9e:ed:7a:f4:4a:6e:ef:b8:7c:8e:6d:2e:fc:
17:b5:7a:4a:12:dd:62:4b:5b:c4:c8:87:99:d3:d7:
2d:61:4e:cc:79:6d:ac:d5:9e:02:ba:cd:79:84:ed:
b6:b9:17:70:ac:5b:11:21:b9:3f:88:21:d0:49:11:
65:1d:37:90:32:4a:4c:50:3b:ef:10:b4:87:2f:7b:
bc:c4:d7:81:60:1e:ba:04:d0:97:95:75:28:55:1c:
15:28:89:47:19:b1:8f:c6:7c:7a:58:9e:eb:4e:1a:
b1:dc:00:0d:cd:e1:b1:6f:5f:15:30:e9:f7:7d:70:
f7:47:c4:15:a3:45:05:e4:5b:e9:1f:7e:10:d4:08:
76:db:ac:00:8d:36:b0:11:93:31:02:8d:16:f7:85:
7c:76:75:35:f1:10:10:7d:65:34:64:58:06:f2:8d:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:72:CF:92:45:19:E5:8F:61:AA:00:C8:8C:8C:16:73:6E:2D:02
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fb:58:b8:f4:01:0c:db:b7:e0:6b:38:86:d3:a9:57:1b:15:
0a:f4:d7:c3:56:da:df:d3:37:8c:31:ce:f3:d2:3d:fc:0d:93:
49:d0:24:a4:de:66:c9:2d:31:76:ce:20:dc:b5:e2:0a:12:7f:
ce:b5:71:2d:5b:6f:7c:73:7d:d7:e9:e3:8f:6b:06:6a:6e:e1:
62:d4:b6:44:46:40:e4:70:53:4b:5b:70:31:8e:9b:2c:84:77:
6d:aa:f5:ba:7c:22:6b:78:c3:29:d1:62:fb:9f:3e:40:8c:dd:
c9:a2:69:61:ed:aa:22:8d:49:f9:26:59:42:f7:af:71:66:aa:
75:d6:9c:97:9c:9b:f1:75:2b:28:ae:79:72:8e:79:64:d5:74:
06:3d:1b:a4:a1:ad:87:fa:3b:55:ec:51:f6:04:21:cb:10:ab:
78:67:51:ca:71:8c:a7:41:b9:1c:8e:2c:dd:03:3a:0e:83:81:
6e:de:4a:07:a7:39:1c:0b:61:94:c8:9b:43:a7:57:3a:26:39:
b1:63:49:87:26:3f:72:fb:f2:ad:1c:95:e9:74:37:cc:5d:38:
dc:8c:14:74:d6:2c:c1:39:5f:53:a0:c8:46:44:2d:fe:2a:c2:
5e:b0:43:df:ac:5f:b3:95:a5:d6:c9:d4:6a:7f:36:4f:b8:fa:
28:cb:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:40:56 2026 by rpki-client