Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
File: HfLwyYo1F0lsTGnMiSvv68JYXOw.mft (raw, json)
Hash identifier: x5t2XqS8OwWuVs5/GQmpj3Lw8sKAitRbRpg0UqDaUqg=
Subject key identifier: BD:A3:DC:DF:8C:5D:EE:31:FA:4A:00:3D:69:3F:0F:82:C2:39:38:30
Authority key identifier: 1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
Certificate issuer: /CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Certificate serial: 01A0D87247F97C90CD83D2B7A104640FF4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
Manifest number: 72
Signing time: Fri 25 Sep 2026 12:02:43 +0000
Manifest this update: Fri 25 Sep 2026 12:02:43 +0000
Manifest next update: Sat 26 Sep 2026 12:02:43 +0000
Files and hashes: 1: HfLwyYo1F0lsTGnMiSvv68JYXOw.crl (hash: JyriBbC1oBpwBp38hfR1SF0KaKW1bORle5Il4LeqUpU=)
2: pF9l91nD4u4wuf9MIQZvNcyh7JY.asa (hash: TVK8vGJ0DAiyKHB2yGjjbKMnxxCTa0TY3LOzLh2udVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:47:f9:7c:90:cd:83:d2:b7:a1:04:64:0f:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Validity
Not Before: Sep 25 12:02:43 2026 GMT
Not After : Sep 26 12:02:43 2026 GMT
Subject: CN=bda3dcdf8c5dee31fa4a003d693f0f82c2393830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:0b:fe:06:8c:18:b2:a5:19:97:5c:43:38:
54:ce:22:4d:f2:c7:d2:59:fc:d8:0a:a6:e0:e4:7e:
0e:41:f1:e3:dd:1e:14:21:c1:02:e3:38:8e:eb:e3:
f7:54:19:ab:48:ea:08:25:dc:82:e2:b0:0e:b4:83:
e5:1b:46:02:ce:37:b1:e7:f6:c3:f9:e0:40:5d:8e:
9b:e0:2c:4e:20:0d:26:94:2c:af:86:16:cf:4a:4b:
7c:04:c2:f4:18:32:f8:81:f5:7f:73:cd:87:6c:ab:
88:7b:06:a6:d4:8b:f9:89:8e:d3:a4:e1:75:e2:06:
15:48:29:df:a8:6d:7e:2a:98:41:06:b8:fc:e7:f8:
e1:46:38:00:7c:96:02:ff:69:36:e0:de:ac:94:66:
12:06:b3:15:c9:80:20:8f:ac:a2:f5:05:c5:3a:e2:
f8:85:e9:1b:d6:8c:48:03:74:c1:bc:8a:42:a2:9f:
dc:5e:18:84:55:0d:ce:5e:2c:b3:8d:ae:05:88:c1:
6a:cd:43:13:ee:0b:e5:b1:26:28:d6:50:ca:d7:ac:
65:9b:83:0e:72:0f:ad:ee:c6:9b:64:bb:ca:77:33:
12:ab:d2:65:af:33:05:26:18:20:9e:1c:9b:f6:bc:
aa:3d:8d:d8:da:f6:4b:63:d2:55:cb:ce:95:2c:7b:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:DC:DF:8C:5D:EE:31:FA:4A:00:3D:69:3F:0F:82:C2:39:38:30
X509v3 Authority Key Identifier:
keyid:1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:59:22:2a:1a:95:9a:73:87:57:f1:b4:91:42:e6:33:48:
90:fd:99:55:83:d3:6a:fe:ca:b4:e6:02:fb:35:c7:87:d6:36:
7a:f9:d8:b7:d2:89:cc:62:3d:e5:f2:a8:b5:bc:a8:4b:29:2c:
67:a4:7a:ff:15:e2:a3:6b:df:4e:80:1a:4a:24:92:0e:98:5f:
25:aa:72:d9:17:47:21:30:84:69:1f:76:40:2a:02:e8:df:bc:
6b:46:05:3d:44:1f:13:eb:07:51:77:3a:23:bd:a1:e3:22:e1:
ae:b2:49:40:54:f6:9b:a5:5d:e1:e4:59:8e:57:5a:94:6e:f9:
26:82:75:c9:4a:9b:50:8c:09:b2:2e:7f:28:4b:89:f8:59:dc:
4a:29:61:68:39:b2:6f:f3:c1:e4:9f:3c:6c:1d:e1:e1:f0:87:
80:6d:e4:91:82:1a:a8:9c:54:e8:7c:c7:a6:9e:51:f2:fa:ed:
2f:31:7c:6e:1b:f5:f0:99:a8:f9:e8:69:71:00:70:e1:4a:89:
43:44:58:ce:5c:7d:fe:27:2e:2a:a7:62:d0:24:df:e6:fb:79:
07:21:44:5e:59:57:97:5d:4c:71:92:74:93:16:54:5a:ee:c7:
44:22:f4:1f:58:c3:7a:7d:94:c7:7f:4d:e5:2a:b9:d8:89:8f:
71:e1:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:53:22 2026 by rpki-client