Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
File: HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft (raw, json)
Hash identifier: vOzWSo/YrMCV3qMZBVEO6Aj0AkAmA4SQWxe5kRrM7ms=
Subject key identifier: 2D:B2:E2:9E:C8:CC:64:31:53:F5:F6:00:A0:78:7A:DC:8F:EC:52:7E
Authority key identifier: 1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
Certificate issuer: /CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Certificate serial: 01A0DD97EE09994A201E78C801C74548B537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:56 +0000
Manifest this update: Sat 26 Sep 2026 12:01:56 +0000
Manifest next update: Sun 27 Sep 2026 12:01:56 +0000
Files and hashes: 1: HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl (hash: WL9BuUNYENsu/0XnSwKBp7sZgW8WlXdzmMSfhestdlw=)
2: fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa (hash: vnqoM5a+GH/Bcj8OwND/TYSLxt03hi6ZcbKX0HMYzDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:ee:09:99:4a:20:1e:78:c8:01:c7:45:48:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Validity
Not Before: Sep 26 12:01:56 2026 GMT
Not After : Sep 27 12:01:56 2026 GMT
Subject: CN=2db2e29ec8cc643153f5f600a0787adc8fec527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:00:5b:d6:b3:4f:23:0f:60:97:35:16:c0:
0f:7e:d2:00:1b:01:64:1b:c8:65:8c:b9:a4:d4:37:
9e:63:24:0e:5c:71:7c:2d:f9:75:68:d4:0e:90:b3:
d8:d7:b8:80:bc:dd:db:66:aa:1c:d9:88:1f:e9:06:
a4:b9:97:cf:80:63:86:06:9e:62:7d:27:d2:38:7d:
0e:6e:7c:8c:b2:49:db:e1:c3:0d:2a:d6:6c:68:9c:
fb:9b:b1:ee:99:b7:b2:dd:ac:50:e5:34:e3:26:4f:
fc:5f:60:a8:b1:ea:0e:3b:b5:e6:79:82:f1:32:ad:
60:ec:e0:31:af:e1:dd:67:84:ed:fd:94:62:ee:bf:
b9:74:b8:56:20:34:98:49:53:d2:d8:fe:40:e9:26:
24:2c:ca:52:90:00:d8:66:32:af:a7:ca:7b:09:aa:
33:83:ae:22:d6:3a:bf:e0:d7:ec:cf:44:d4:80:49:
c5:49:da:0a:df:33:f5:40:2e:6c:23:7e:d1:42:22:
1e:c8:31:cc:70:2d:64:7d:da:55:70:b7:31:83:f1:
cc:d4:ba:67:d5:14:2c:28:5a:a2:e9:26:10:59:eb:
c7:38:bb:fa:0c:35:14:48:39:b4:99:93:26:cb:f4:
6a:32:85:7d:c8:c5:2d:1c:cd:2c:da:8b:92:03:1e:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:E2:9E:C8:CC:64:31:53:F5:F6:00:A0:78:7A:DC:8F:EC:52:7E
X509v3 Authority Key Identifier:
keyid:1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3d:9d:a1:ca:85:3d:89:68:20:36:d3:ff:55:8a:a8:da:d2:
f8:45:7a:d4:42:5f:ca:14:00:8f:79:3d:e8:f4:dc:db:2e:f9:
71:ba:f4:4b:68:2e:1a:03:7a:df:43:69:1b:d0:69:12:b4:27:
a6:32:68:f7:d5:87:d1:82:a9:b3:6c:ae:2b:19:f4:00:34:aa:
34:c6:a8:0a:db:fe:4b:70:18:4b:6e:a8:65:b6:6e:9a:a7:bb:
79:37:ad:24:04:f7:08:f6:28:85:58:2f:36:ae:0f:c7:0c:13:
26:7e:f0:4a:c1:ed:cb:d6:e9:96:a3:c0:03:88:e3:ea:8f:72:
23:10:c2:14:c8:b0:7b:af:c6:36:dc:a4:0f:ac:71:de:70:d7:
73:0e:66:bd:ca:82:52:0f:ef:d2:cb:97:59:a7:1b:50:15:e8:
30:61:3d:6c:79:7a:e2:6f:5f:54:73:9e:dd:29:34:19:1e:68:
43:b5:a7:41:d8:ea:cf:25:75:56:4c:07:3f:82:2d:93:1e:86:
87:c9:92:5d:8f:e3:37:cc:80:6d:74:2b:47:a7:f3:a3:83:15:
61:88:dd:98:d6:19:74:a8:44:77:8b:97:6d:11:c7:26:b9:06:
50:ee:03:29:2f:57:9d:41:53:bd:c9:50:b0:4d:af:f9:1e:09:
9f:d7:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:44:32 2026 by rpki-client