Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: 6lB9MQy+8mBr22RbWdXD20hDAvfByC9FdiZgVT7wLgo=
Subject key identifier: 71:9C:A8:C6:21:A4:5E:CC:F6:73:D2:0B:0D:DB:96:FE:2E:DF:BF:24
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 01A113E09458F16BAD25181A9BEA458AB98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 1802
Signing time: Wed 07 Oct 2026 01:00:47 +0000
Manifest this update: Wed 07 Oct 2026 01:00:47 +0000
Manifest next update: Thu 08 Oct 2026 01:00:47 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: ZfE+OP+gymlmUF/rFMFoqdSiOSV6taFhlMFgUYTAi2g=)
2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e0:94:58:f1:6b:ad:25:18:1a:9b:ea:45:8a:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Oct 7 01:00:47 2026 GMT
Not After : Oct 8 01:00:47 2026 GMT
Subject: CN=719ca8c621a45eccf673d20b0ddb96fe2edfbf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:c5:4c:c8:bb:f1:35:fe:f0:eb:86:2a:3a:
5b:81:f8:da:5d:ce:ee:73:20:87:ec:0d:f6:fd:7e:
7d:2e:00:7a:3d:ae:56:96:96:73:ea:c2:d6:15:fa:
ff:b0:7f:fb:bc:bd:76:b6:16:02:ff:17:e1:3a:41:
0a:11:8e:ca:0e:bc:bc:f6:0b:61:8d:ad:43:92:54:
70:ec:15:10:e4:97:9c:a8:2a:e3:cb:ea:f7:24:34:
79:6c:29:87:6b:0e:4b:ef:9f:61:b9:70:51:9f:71:
e6:fa:4a:ad:19:f9:b0:67:43:84:33:ad:c2:24:63:
68:a8:1f:07:4c:2d:4e:09:10:55:cd:3c:ac:ba:d3:
94:28:e1:9a:d3:97:3d:be:a7:c6:6e:e2:ab:1b:c5:
6f:8a:22:8a:db:bf:1b:f6:86:cc:dd:c7:cb:31:fc:
15:bd:60:c3:f7:0a:36:f0:7c:60:f5:52:ed:bd:67:
55:48:7d:85:33:b2:7a:a3:e9:0d:c8:38:07:f0:9f:
6b:5f:49:55:5c:f1:4b:0c:31:61:2f:7d:00:41:56:
b1:af:72:f9:3b:4b:c4:2b:70:ed:2a:4f:86:70:bb:
ca:14:4f:a7:4b:72:29:08:40:50:e4:f6:19:ad:4c:
9a:88:38:d6:16:0e:67:38:49:93:4b:ae:5b:61:2a:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:A8:C6:21:A4:5E:CC:F6:73:D2:0B:0D:DB:96:FE:2E:DF:BF:24
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f1:5b:58:4b:c3:61:a3:d4:30:41:74:de:e6:6b:3c:1c:12:
f8:80:c4:70:73:55:4e:30:c1:78:e1:0c:65:eb:29:99:cf:6d:
94:4d:00:a7:61:a5:a4:ff:5a:68:f2:40:fc:52:5b:92:71:ec:
93:75:aa:22:a5:a5:eb:b4:49:94:f6:1c:89:a6:71:26:49:45:
40:d5:db:9e:cb:33:5e:6a:12:28:29:06:5c:2f:05:69:22:11:
3b:99:7f:2e:6c:e4:50:e7:f0:cc:0e:99:b9:34:d1:53:d6:4d:
c5:e7:9f:09:62:39:df:07:c1:da:ef:44:7e:82:a9:f6:b9:61:
71:5b:bf:cf:be:84:bf:f6:63:61:72:d2:8b:e4:bf:b9:2b:db:
40:00:54:00:81:a0:c7:08:b4:d8:ce:30:b2:eb:a5:5a:98:ef:
01:2e:61:40:6c:a1:ca:8d:ec:b9:25:79:69:7a:31:5a:cb:f8:
3b:d8:bb:39:98:76:2b:38:09:65:c3:45:d2:24:63:60:0c:a4:
3a:d4:bf:0b:57:38:f7:07:a9:8e:8f:e3:e9:86:88:ee:11:36:
f1:10:31:91:d7:b9:3a:89:04:72:d2:b8:d3:dc:fc:63:2b:6c:
9d:b8:fa:14:50:0f:87:b2:93:6e:b7:00:dc:aa:e7:0a:92:7a:
91:21:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:14:24 2026 by rpki-client