Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: 1VfSd84CL0IqxMm8L69Z9z+hf2MLF7kUUAmtKF0QpWs=
Subject key identifier: DC:40:D5:39:A7:CA:82:7D:8C:34:1C:09:EE:12:8B:67:AA:6B:CE:92
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 01A139DB2A15A8EDAF0A074668F2E38B7423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0936
Signing time: Wed 14 Oct 2026 10:00:26 +0000
Manifest this update: Wed 14 Oct 2026 10:00:26 +0000
Manifest next update: Thu 15 Oct 2026 10:00:26 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: H8naA3I9Apm9QLrVMBKPPXYU9UEqUzg23aNTqmils9Q=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:2a:15:a8:ed:af:0a:07:46:68:f2:e3:8b:74:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Oct 14 10:00:26 2026 GMT
Not After : Oct 15 10:00:26 2026 GMT
Subject: CN=dc40d539a7ca827d8c341c09ee128b67aa6bce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:5b:4c:2b:cb:14:96:82:61:35:2d:19:f0:
10:51:da:9b:78:51:33:18:fb:56:a6:62:d1:e2:ae:
59:82:9d:41:8f:e9:5c:21:c9:75:6d:8e:9e:05:34:
a5:af:45:c2:4c:9a:03:40:a6:da:34:79:c2:3b:d0:
fd:80:0e:56:79:b7:55:ee:d6:53:ff:d7:da:b6:cc:
22:2a:22:a2:91:47:02:04:fd:39:d9:8a:c2:fc:04:
c6:75:6a:a5:d5:39:19:db:98:a6:03:8d:15:61:c9:
36:f8:0d:cf:96:73:9e:20:a6:2e:8a:71:45:3c:bc:
8e:a6:f3:50:fe:99:ee:8b:51:27:ee:11:78:da:92:
d3:5d:d0:bf:ed:83:50:6b:9e:10:5f:9e:49:1a:9e:
29:d0:17:76:41:b9:16:9e:ae:39:40:54:6b:63:c9:
c8:f1:16:77:fc:69:6c:30:81:a0:6e:ec:f3:09:7d:
6e:f8:62:1d:d6:cb:dc:de:28:26:43:c9:0d:ad:b7:
71:58:20:4a:a7:53:45:09:91:ee:c7:b6:dc:c7:f2:
bb:7a:78:9e:7d:1d:fc:13:b8:2a:51:0e:47:b8:bd:
49:cd:c6:18:d7:5b:89:25:8d:e5:39:07:83:55:e9:
a9:7a:6b:d6:d6:cd:ff:0c:7b:63:9b:92:37:8a:92:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:D5:39:A7:CA:82:7D:8C:34:1C:09:EE:12:8B:67:AA:6B:CE:92
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:62:36:4a:24:e8:7b:dd:18:9d:4e:b6:ba:f4:98:95:20:
35:a0:02:95:22:e8:0c:2c:87:c5:39:f6:f8:da:5d:9f:6c:40:
81:93:fc:ba:c7:94:41:2e:56:49:06:bb:d4:06:01:14:f8:97:
ff:6e:ce:19:af:f8:94:0f:c5:3d:df:30:df:5e:62:d4:26:60:
4d:84:aa:1e:f6:57:ea:be:48:f9:3f:d1:f7:e6:86:58:01:ac:
81:01:10:5b:1f:77:fc:95:c2:39:1a:66:41:51:15:51:1b:6e:
e5:7e:f3:46:8a:27:29:60:7a:89:16:28:ef:81:e4:bf:e6:f6:
f9:ef:74:8e:12:5d:27:15:c4:5c:f2:c2:0d:9d:64:c7:04:8c:
84:25:b2:dc:d5:49:69:e7:99:54:b4:a5:6c:34:5c:2e:ed:58:
71:3e:81:89:10:98:02:92:7e:e2:ee:e4:e2:4d:83:8d:f3:30:
1c:70:6e:52:2e:0c:b8:8c:9e:36:ab:c4:fe:fd:15:1d:64:c2:
64:1d:8b:f5:a4:3b:4d:ab:9e:99:53:55:5a:00:2b:8d:d6:77:
ad:f1:3f:d3:a4:7b:30:50:57:36:b0:d0:5c:a4:71:aa:71:29:
96:4f:c4:5a:32:af:59:57:cc:ce:be:a2:92:54:2a:d6:ab:78:
5c:3d:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:40:41 2026 by rpki-client