
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier: y7sbHU0DZcfiC+qxE08Jw86kqGp1bSDcV6rzyre6De0=
Subject key identifier: 0D:2B:67:50:24:83:59:77:C3:E1:D5:7C:56:37:08:21:61:0B:FF:9B
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer: /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial: 01A0DCF302479CB86BF20BE0404C9993CB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 09:01:48 +0000
Manifest this update: Sat 26 Sep 2026 09:01:48 +0000
Manifest next update: Sun 27 Sep 2026 09:01:48 +0000
Files and hashes: 1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: nRpQyQ0enm/chaDT8epVBg5vbSGWCA84Bl2YdcvnnXI=)
2: idejEcxXsr16g2wp9V8Tc_3IUpE.roa (hash: 2R6v+WJgumF5jKo8h1riFb9sUElHbeJIrHYFIS833YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f3:02:47:9c:b8:6b:f2:0b:e0:40:4c:99:93:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Validity
Not Before: Sep 26 09:01:48 2026 GMT
Not After : Sep 27 09:01:48 2026 GMT
Subject: CN=0d2b675024835977c3e1d57c56370821610bff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:fd:0c:eb:f5:2e:21:5c:d0:df:98:96:d0:
cc:3b:09:cb:fa:87:ae:ca:19:97:8f:ff:23:81:2f:
a9:f6:c1:b4:d9:d6:46:d1:71:c3:09:ff:43:9b:18:
33:fc:ff:15:69:50:2e:d0:26:fb:3f:f8:4d:00:33:
f4:c8:cb:2b:de:4a:ca:52:7c:50:1c:da:81:5c:83:
27:35:49:ca:1b:91:1d:42:ff:7a:af:ff:94:5d:6e:
0f:d5:bf:29:19:e9:44:a6:ed:63:a4:a8:e3:05:1e:
20:a7:e6:1b:79:8a:9f:92:92:e5:83:df:91:e5:53:
53:b2:f9:d4:8c:d0:a7:f3:ae:77:2a:88:24:02:af:
90:0c:c2:2f:3b:c4:c4:b1:c6:43:a2:f4:bf:97:eb:
7b:c9:77:b6:84:54:b7:24:3f:94:e3:f0:32:ce:34:
31:c3:59:49:e3:9d:55:50:60:1f:07:fe:ed:53:1f:
e3:42:dc:2f:a8:bc:8a:36:fe:9c:ce:31:84:02:54:
8a:31:34:07:71:d8:96:10:d1:3a:81:2b:f1:bc:51:
d1:02:19:39:5f:70:a0:52:fd:dc:27:6c:6b:25:77:
dc:18:cd:17:15:0c:8e:f1:7f:34:32:0b:2a:48:3c:
6d:14:f0:5b:a5:94:86:af:94:63:a1:b8:a7:8e:86:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:67:50:24:83:59:77:C3:E1:D5:7C:56:37:08:21:61:0B:FF:9B
X509v3 Authority Key Identifier:
keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3a:07:3c:2a:40:ae:5c:90:52:92:c8:12:5c:d3:e0:36:90:
12:46:3c:2f:7f:0e:ee:e9:79:cb:f0:5c:3a:ea:ee:ac:4e:5b:
77:07:ca:20:b2:8e:a0:ba:f5:58:f2:db:6d:cf:aa:0c:4d:0e:
93:c4:14:47:bf:1f:1d:d2:a0:e8:ae:aa:ad:fa:4b:ed:90:77:
46:6c:c2:a1:b2:91:6c:dc:44:51:62:2c:2e:91:66:6c:24:6c:
d6:8c:7a:1b:aa:04:5e:b1:cd:b6:50:f1:6f:3e:f8:2b:df:d0:
8f:b3:00:f7:bd:40:5f:8f:53:cc:7e:ff:e8:50:71:3b:e6:e1:
f4:06:a1:c6:a2:0b:4e:9a:71:19:1e:b2:f5:d6:95:e8:69:a3:
9f:dd:9d:92:4b:db:a2:17:37:fb:52:72:0f:6c:b6:a8:67:17:
3d:89:9b:33:74:f4:20:46:5a:53:ee:74:ff:bf:77:d5:ba:d7:
2b:29:ef:00:98:1a:36:df:bb:e2:dc:2b:4f:9c:cb:4e:8b:1a:
cc:14:3e:e8:63:d4:3d:66:45:1c:92:69:10:ca:9b:70:30:35:
ae:0b:05:13:95:e1:86:c7:77:76:01:7b:6e:c0:d8:03:b1:08:
24:d1:3a:b2:9b:f9:da:2a:df:ab:bb:57:03:99:0d:55:0f:ab:
c9:2c:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:07:41 2026 by rpki-client