Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: Hf3WbqHolkmQGvEI0UBDNVuVMaZI49kMCwU+8wcG994=
Subject key identifier: E4:3C:EC:43:17:5F:14:8A:4E:7D:7F:03:3F:EC:64:82:28:6D:A9:BC
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01A0D7CCB61DFE6FA228B49E0565D5A2F07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0673
Signing time: Fri 25 Sep 2026 09:01:52 +0000
Manifest this update: Fri 25 Sep 2026 09:01:52 +0000
Manifest next update: Sat 26 Sep 2026 09:01:52 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: SNciDdGNLEuw/6xcGn7kOiDC4qvP3lLQWboQ594skrI=)
2: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (hash: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=)
3: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (hash: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:b6:1d:fe:6f:a2:28:b4:9e:05:65:d5:a2:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Sep 25 09:01:52 2026 GMT
Not After : Sep 26 09:01:52 2026 GMT
Subject: CN=e43cec43175f148a4e7d7f033fec6482286da9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:98:c5:b9:2c:b1:85:8f:7f:c2:e0:60:fe:
5b:7d:b0:f1:a8:8e:79:63:1b:38:cf:58:e0:82:db:
b6:67:a1:71:4c:72:c0:1d:11:67:9b:b6:16:6b:f9:
73:13:e6:66:5a:29:a3:00:23:dd:cb:a0:d9:d7:48:
b3:c5:32:27:7e:f7:39:75:e1:9f:db:1a:24:f5:d0:
5f:93:bb:ea:40:7f:11:37:a3:ec:05:92:d8:9c:2f:
d6:35:eb:7f:27:e6:80:e0:96:f6:56:25:20:f2:98:
6c:62:ea:6b:fd:72:f9:f4:64:14:d7:76:d6:40:ab:
fa:28:e8:94:3c:38:7c:48:b6:c4:23:e6:00:90:65:
bc:cf:7b:c2:ef:5a:4a:1e:9f:5d:ff:86:40:9a:22:
f4:b7:b5:a8:80:dc:d5:e5:d1:ae:08:cf:ad:de:99:
a1:48:e7:0e:09:e9:64:8b:4a:a3:88:74:1f:28:41:
f3:89:de:31:dc:47:7e:47:72:61:16:52:7b:50:23:
59:08:db:eb:fc:4d:e7:73:ec:b4:45:2d:57:79:de:
16:10:89:3b:55:00:b5:38:65:86:42:df:4a:76:36:
83:a5:dc:de:b8:6d:2a:0e:60:2f:43:81:59:28:14:
de:10:4c:b8:54:99:ff:dd:90:6d:9c:6c:6e:53:ce:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:EC:43:17:5F:14:8A:4E:7D:7F:03:3F:EC:64:82:28:6D:A9:BC
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ee:ac:90:49:b3:71:f4:40:a2:1a:71:95:90:0d:98:3c:55:
4e:1a:bf:8c:c7:f9:01:ff:20:53:8a:32:19:d3:73:aa:e4:8b:
ba:56:da:46:07:17:50:8e:41:d9:f2:ae:f9:02:60:7d:af:b7:
38:2e:7c:e2:f1:05:c4:d6:e9:f2:51:b3:43:0f:ef:5e:0b:40:
7f:a8:e2:2b:20:79:67:62:07:33:c4:a7:72:8f:9a:c3:3a:bc:
67:ca:fc:95:8d:d3:bb:5a:99:73:a0:a3:58:76:81:a6:a4:e8:
87:e0:5a:73:24:fa:80:59:d5:e6:4e:d6:4a:89:b8:01:90:d8:
87:03:f1:9c:3a:4a:d1:ad:44:b6:19:0c:04:90:98:08:84:ac:
0d:33:9b:3d:ed:f5:fc:90:ab:84:9a:e0:36:72:06:0a:49:f7:
fe:61:22:8a:38:69:33:af:a5:ca:4d:68:36:7e:ce:af:48:65:
3d:17:d9:5d:1b:82:f0:85:78:25:2a:eb:c0:ef:1e:62:f0:68:
b9:9f:fa:a7:43:6a:bd:d7:fa:4c:c0:c0:af:67:65:df:6a:e3:
d6:42:7b:aa:04:5f:d2:97:04:5d:ef:f8:87:7a:85:ae:b1:9b:
34:9e:a4:5f:5d:96:80:92:25:36:43:1a:e2:25:3c:00:82:c1:
58:b1:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:35:26 2026 by rpki-client