Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: iP/36c9MNudh2N2kYriRCalxgF2pd5Yt3Y15jL4wQww=
Subject key identifier: 6E:64:E4:E0:47:CC:CD:68:C5:65:AD:9F:E8:7C:89:D2:FC:F0:94:19
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01A1DE708BBDA154AAF2AE55647A216C1770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 06FB
Signing time: Sun 15 Nov 2026 09:01:20 +0000
Manifest this update: Sun 15 Nov 2026 09:01:20 +0000
Manifest next update: Mon 16 Nov 2026 09:01:20 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: F9g7pSQpfdVS+P3ivKXjugKID/Ic+wYAd82MW+8UhJs=)
2: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (hash: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=)
3: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (hash: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:8b:bd:a1:54:aa:f2:ae:55:64:7a:21:6c:17:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Nov 15 09:01:20 2026 GMT
Not After : Nov 16 09:01:20 2026 GMT
Subject: CN=6e64e4e047cccd68c565ad9fe87c89d2fcf09419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:22:ab:a3:2c:36:84:32:15:bf:17:c1:89:
25:cb:80:0a:c9:a4:b3:93:da:b6:f6:9d:a1:dc:e2:
6d:9f:ac:b2:55:7e:c9:ef:50:c4:d6:a5:2e:18:b6:
d0:9e:fa:a5:12:5b:dc:f2:05:48:e7:59:09:04:f0:
ab:1d:64:75:c1:1c:b0:b6:46:34:90:cb:85:19:95:
ec:6c:65:45:df:d6:51:04:3c:4f:78:57:03:c0:d9:
60:10:5d:58:fc:b1:d0:09:ca:74:00:98:fc:2e:91:
f8:03:24:06:59:79:b9:47:77:e4:0b:45:56:46:d4:
3a:1a:4a:b7:64:7c:59:2a:bc:20:c6:9a:6b:35:bc:
59:9e:e9:b2:a0:85:da:e1:ef:15:3d:c4:9f:ed:5b:
b7:bd:fb:01:de:f5:f4:9b:43:0b:4f:54:d2:ef:40:
3a:34:81:76:7d:c5:dc:c2:56:ab:b2:94:15:dd:84:
20:cc:7c:1d:16:de:73:45:a7:57:80:d6:6d:9b:3b:
d6:16:ae:b2:74:23:0c:67:58:d4:21:bb:4c:80:40:
c4:53:e4:d4:d7:a2:85:a2:82:35:00:51:a8:fe:33:
5d:c4:6b:10:3e:19:a5:d5:b9:7a:63:be:03:18:01:
06:67:2b:4d:4d:a5:a1:ff:85:21:43:c2:53:d4:db:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:E4:E0:47:CC:CD:68:C5:65:AD:9F:E8:7C:89:D2:FC:F0:94:19
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:ed:8d:e4:e7:6a:82:c9:ea:55:68:9c:84:f2:98:10:ea:
38:69:e4:67:9b:33:e4:e6:ee:36:24:ea:a6:2b:bc:b1:78:29:
e3:6c:78:e1:b9:c5:53:88:15:cb:b9:2f:d7:1d:49:cb:70:c8:
06:cc:3f:21:c0:a0:7e:0b:6e:c3:c5:0d:07:65:c0:d6:2f:f5:
6e:bc:56:31:fb:8f:0c:41:7e:05:c6:e8:db:4f:f9:16:89:74:
01:1f:42:9b:15:b6:b1:88:4a:22:40:e8:89:f9:f1:e9:ec:50:
79:d7:b4:76:55:b3:44:b0:c4:d7:00:b3:da:8a:28:49:43:e1:
51:96:05:b5:f6:fa:b9:1b:1e:5e:a4:e4:c7:45:a5:a5:c5:b8:
64:7b:41:cc:05:6d:9a:d6:e5:ba:6d:d7:0e:20:9e:58:ee:ef:
3f:59:1c:74:21:44:19:2e:b7:e5:ad:94:7a:a3:29:3e:67:cb:
56:4c:d8:85:fb:06:b1:88:98:55:20:16:46:a2:9b:91:41:d9:
cf:48:6d:a8:74:3b:68:c2:5d:e2:a9:97:72:3c:88:dd:c9:1c:
9c:ae:07:21:75:7d:cb:3e:b8:27:57:31:cb:63:32:dd:b7:17:
12:6a:17:78:b8:24:08:51:18:bd:53:58:96:17:a7:a5:a8:e6:
30:2d:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:29 2026 by rpki-client