Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: cxd1GNQ63QSOXGb7Ji4M+9BVtu2+GIlPWmyckxArzo4=
Subject key identifier: 4E:7C:26:E4:1C:F8:37:C6:EC:E2:A4:9E:26:20:B9:AD:F5:AE:BB:E6
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01A0E3623C018555189BEF725A7C03DD3EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1702
Signing time: Sun 27 Sep 2026 15:01:00 +0000
Manifest this update: Sun 27 Sep 2026 15:01:00 +0000
Manifest next update: Mon 28 Sep 2026 15:01:00 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: +HB6fuoM/lGESmEvlxummZ2qpm85I/R7HGqPG2Ey2TA=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:3c:01:85:55:18:9b:ef:72:5a:7c:03:dd:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Sep 27 15:01:00 2026 GMT
Not After : Sep 28 15:01:00 2026 GMT
Subject: CN=4e7c26e41cf837c6ece2a49e2620b9adf5aebbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:30:96:97:59:e9:bc:29:ed:b3:82:fd:04:
ce:e7:d4:85:64:32:e1:f7:d0:e5:e7:c8:67:49:0d:
eb:4d:4b:0e:5c:9b:45:6a:f0:78:5a:6b:6d:37:1b:
c4:2c:1a:3c:e7:51:22:ee:3a:76:34:c0:92:e9:5f:
6f:a1:94:64:b5:32:e6:ab:9e:d4:f2:9f:54:af:6a:
61:f6:ff:dd:e2:2b:95:c3:5f:7b:e4:93:e9:1f:35:
94:d6:ce:d2:f9:19:50:6b:63:5b:3e:fb:6f:f0:17:
1b:78:e2:91:a1:f1:9f:ad:1e:50:c2:61:ea:db:05:
00:ce:db:1d:b3:12:cb:81:ff:e2:16:28:b5:9c:d5:
4b:05:10:25:93:b6:2a:79:d4:49:a6:14:24:8f:4d:
a0:6a:b9:3d:8d:14:67:a3:ba:57:27:31:a7:41:e7:
5b:03:35:24:d0:e2:9a:11:d7:b7:7a:46:fc:55:b4:
76:c0:7e:06:c7:1d:58:77:9f:5b:97:8c:80:95:6d:
37:a0:63:66:36:dd:a7:ad:22:c9:d2:5c:0e:69:d9:
db:27:9e:85:5f:c1:ed:ee:e6:b6:58:6f:64:57:cf:
ed:db:43:67:6b:f0:53:4e:e5:0b:68:7c:94:49:4c:
48:ff:4b:b7:70:20:99:b5:7d:5d:1e:5d:78:7b:6f:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:26:E4:1C:F8:37:C6:EC:E2:A4:9E:26:20:B9:AD:F5:AE:BB:E6
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:18:db:12:a7:01:ec:64:70:59:ac:ec:43:e6:c6:f4:d7:d5:
51:b3:a6:eb:02:e3:d6:49:54:4b:3e:57:29:a0:64:d1:63:b1:
63:c7:50:a5:d1:36:09:26:6b:8f:ba:d6:a4:14:75:c8:64:11:
0c:63:08:6f:ab:12:5d:8e:3d:14:7b:32:1d:3b:ce:50:d2:14:
2a:17:84:78:0a:94:bb:c9:76:b2:6a:89:4c:74:d2:12:00:2b:
ea:df:d4:01:1e:22:49:4d:b4:cc:81:75:1a:9e:b7:7f:c1:9f:
fd:50:bc:ed:87:c4:12:c8:f1:2e:a7:08:40:24:94:52:d8:05:
9f:c9:07:52:21:24:69:30:9c:ad:c9:05:f7:3c:92:cc:8d:aa:
54:02:bb:1f:9a:8b:17:21:35:ab:86:1f:33:b1:a0:71:73:a4:
21:5a:16:c3:de:c8:cd:66:cd:ea:75:e3:ec:08:0b:ae:13:f1:
03:89:bf:93:85:0d:58:d4:f2:97:a0:bb:67:77:f8:06:24:f1:
b8:42:11:ec:bf:88:1e:4d:00:be:2c:f3:a7:b2:4a:6b:e8:82:
ce:58:bc:da:1b:7c:3e:d0:61:3e:61:f0:86:40:8e:28:15:8f:
d7:c9:5d:1e:c0:17:d9:85:7c:e5:3c:86:f3:72:87:b6:bd:e1:
66:40:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:35:55 2026 by rpki-client