Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: X8HyWfKGTnok2KYyTDW46m5id6/EH6NrBpUfkKWL4UA=
Subject key identifier: 35:2A:B7:22:34:EE:E6:3F:2D:44:A5:9A:26:E9:B0:45:F2:DF:36:DE
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 01A10ADE23504F9D60905750A913918438DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 07:01:32 +0000
Manifest this update: Mon 05 Oct 2026 07:01:32 +0000
Manifest next update: Tue 06 Oct 2026 07:01:32 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: 6lzmvliun+cblHon/UebWYxCDLrFguwm5eXF9IwNzEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:de:23:50:4f:9d:60:90:57:50:a9:13:91:84:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Oct 5 07:01:32 2026 GMT
Not After : Oct 6 07:01:32 2026 GMT
Subject: CN=352ab72234eee63f2d44a59a26e9b045f2df36de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:14:3c:51:22:e4:bb:29:d7:65:53:7c:1c:
36:34:83:d9:65:9b:b0:7e:e0:75:dd:e3:70:9a:a1:
8d:e2:7c:28:cb:66:12:c9:b6:64:54:6a:e2:fc:13:
d5:e2:7e:39:e2:42:d0:27:d7:03:cd:94:cd:a6:a4:
bb:79:24:e7:b6:b9:1c:e1:8e:38:98:51:f3:d1:72:
9f:49:48:6b:ae:cd:93:e9:1c:f8:0a:b1:27:6a:69:
97:50:4c:bd:2c:9a:3b:b2:15:00:d6:14:46:eb:37:
38:30:b8:df:b0:9e:b3:a7:03:8e:7b:4f:63:1f:a8:
b2:34:80:32:1c:bf:f1:cc:26:2b:be:20:e3:94:2c:
14:ca:71:93:bf:77:56:14:18:42:3b:36:c4:d1:7b:
99:5b:0a:b1:47:50:d8:70:01:9c:37:3f:fe:67:21:
d3:72:e3:69:11:8b:9b:bc:32:3b:44:bd:48:5e:e0:
9a:d0:7e:2f:47:fb:6d:e7:7b:30:8d:ad:5c:c5:ae:
40:6c:e0:b6:56:5f:51:19:0d:d9:04:5a:b9:f4:b7:
7e:bc:00:9f:40:9e:8f:bc:c5:e2:4e:c4:f3:89:ad:
4a:67:68:df:fd:6f:89:d5:cc:b6:06:ce:16:b5:d2:
cc:5c:55:0a:29:56:72:26:3c:de:67:65:31:b1:0f:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:B7:22:34:EE:E6:3F:2D:44:A5:9A:26:E9:B0:45:F2:DF:36:DE
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:61:50:a3:35:f1:21:41:03:3c:a2:21:5f:23:74:c7:97:
04:c7:3c:53:82:68:08:5d:da:f8:41:d9:7e:46:a5:85:06:46:
4c:18:8d:52:89:85:c8:89:de:96:ac:19:29:fc:36:5b:90:44:
89:95:26:c5:96:1b:d5:ec:16:c4:88:29:fa:58:c1:d3:1a:4f:
53:df:24:1c:3f:91:4d:8d:4c:0e:2f:b5:e6:07:dd:50:55:d9:
3b:0f:b5:69:5d:19:28:11:ea:04:5c:fc:ff:b1:74:bd:70:49:
01:f4:a0:88:be:ae:32:82:e6:3f:d5:67:37:8e:be:8e:a1:09:
32:ff:bc:82:4c:09:a6:ec:de:8c:4a:7f:19:7b:22:3b:26:58:
03:dd:2f:65:94:47:9b:ef:f1:ad:ff:1b:d7:3f:d0:fa:65:63:
e0:31:88:5c:f1:30:38:fe:f3:9d:ca:bf:d3:84:1f:dd:07:ee:
9b:f4:4f:52:32:ed:ae:5b:82:b0:28:95:27:a9:ba:27:c8:b4:
b9:85:af:20:4b:d0:4d:cf:d9:9b:82:66:71:cb:a4:16:9e:2c:
ec:40:a6:64:fe:7d:75:8a:28:d9:68:a7:dc:71:f5:df:37:a5:
75:1c:b3:40:b2:da:3a:be:25:0e:92:11:68:f8:1c:a8:df:ec:
49:aa:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:55:32 2026 by rpki-client