Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: n7gAhIX4Qt+KJ98ucvUAxAD+T3G3xqXJPzArk5j2SYY=
Subject key identifier: D3:26:12:FB:DE:EC:AA:14:A1:41:84:A9:A2:D5:86:16:77:1C:A4:1E
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 01A0FF475BCB83F1C5A906F2BF8FA87674E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 0901
Signing time: Sat 03 Oct 2026 01:01:01 +0000
Manifest this update: Sat 03 Oct 2026 01:01:01 +0000
Manifest next update: Sun 04 Oct 2026 01:01:01 +0000
Files and hashes: 1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: G05X3oI2Pe0NfzSjqTCXiV/HhmYb5h/NEkd7+UsrQpE=)
3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:5b:cb:83:f1:c5:a9:06:f2:bf:8f:a8:76:74:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Oct 3 01:01:01 2026 GMT
Not After : Oct 4 01:01:01 2026 GMT
Subject: CN=d32612fbdeecaa14a14184a9a2d58616771ca41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:b5:d3:3e:7c:82:e1:a9:dd:a7:61:c3:e6:
3e:ba:5e:54:1b:49:96:e1:64:16:d4:60:90:6c:0e:
bc:11:c6:73:e8:7f:01:10:aa:8a:85:ff:c5:a8:63:
6a:5c:50:ec:b9:ad:da:fc:45:d5:4b:7b:fa:58:af:
a4:56:3c:48:70:c7:6a:ba:a5:bf:1a:c5:81:21:7e:
fc:b9:80:ca:24:65:cf:ca:de:93:97:6c:52:c0:0a:
22:a1:02:5c:8c:f0:e9:66:06:a3:5e:25:02:d3:0c:
8e:47:9e:f2:f7:48:e7:aa:c9:0c:51:24:42:6c:ae:
40:a1:d5:65:f3:68:fd:c6:8a:92:22:bf:c2:03:91:
65:92:5d:cc:f9:8e:8a:01:57:05:dd:8f:a6:8a:60:
9f:35:0e:34:d3:77:61:73:df:78:9b:69:14:f5:d7:
e9:f8:f6:46:47:8c:39:be:f5:2b:3e:1c:d7:e9:78:
b2:b4:72:e2:5c:27:8b:52:c9:f0:88:b5:fe:ca:a8:
2b:85:91:56:47:86:48:a5:b5:61:e2:c4:08:90:a9:
48:74:ae:14:de:54:df:bf:45:76:87:9c:ca:01:19:
84:7f:b0:35:bd:9b:e6:c9:6e:3c:91:3f:0f:4e:fc:
80:f6:e3:0f:51:df:2c:a0:c9:2d:9c:3f:3c:e7:09:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:12:FB:DE:EC:AA:14:A1:41:84:A9:A2:D5:86:16:77:1C:A4:1E
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e3:70:73:96:99:28:0c:de:25:c7:60:36:7a:f9:3b:f0:c2:
e9:ba:42:24:ac:02:31:32:2d:98:ea:c6:2d:77:88:eb:39:80:
3a:c2:d5:88:9d:5a:15:87:7e:4f:68:ce:76:52:55:c0:d5:ba:
b3:7d:54:df:fa:3d:3a:13:f3:75:8b:15:56:6a:a2:9d:43:d3:
86:1e:e2:0e:49:e5:7d:fc:78:60:ff:03:ef:5b:80:7b:a9:81:
2b:56:66:05:40:c7:7b:06:fd:c3:23:70:09:c8:57:c1:9c:55:
4f:84:f9:43:29:67:fb:ac:93:34:3d:ec:a7:8d:6c:b9:6d:02:
ba:00:19:c5:1b:48:5c:25:7e:ef:e1:6d:59:70:33:8a:e5:f5:
90:ce:30:7d:7b:d4:e5:dc:c2:5b:a8:5e:c8:27:95:4f:c4:67:
64:62:34:2d:d3:2f:19:e9:ae:36:17:de:95:65:08:a8:73:55:
f3:36:72:18:34:7c:24:0a:c5:58:2f:cf:03:e5:59:40:65:4f:
6d:68:a3:37:bc:e7:50:54:95:b2:6b:16:2f:5d:31:b1:83:b4:
76:3c:a4:f7:9f:f2:c0:7f:a4:e2:b4:8d:75:df:9a:dd:80:3e:
52:c9:4d:93:e4:c8:96:53:86:43:07:9d:a8:8b:87:b4:3b:92:
b0:02:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 04:30:51 2026 by rpki-client