Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: BmF+b3mIMqohn31iJiyBnIjQ/KzezGRaQQctB9QyRI0=
Subject key identifier: D0:2C:9C:05:5C:11:C0:56:A1:3E:1D:CC:9D:77:42:A5:AF:94:F8:22
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01A125E6D386BF068A3BFA63360457E5C15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1A9F
Signing time: Sat 10 Oct 2026 13:00:46 +0000
Manifest this update: Sat 10 Oct 2026 13:00:46 +0000
Manifest next update: Sun 11 Oct 2026 13:00:46 +0000
Files and hashes: 1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: 49UFjyO2wm1jg1wb6qkFpPdQvuUfBMJ16ZQcTpr9E/0=)
2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
4: hx13qeZvMZ7CkgtNj_PPPv78xFY.roa (hash: CRsLACP7NSVDuxBm9D3SK9UIt5ALRDRxl1uvehhLfs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e6:d3:86:bf:06:8a:3b:fa:63:36:04:57:e5:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Oct 10 13:00:46 2026 GMT
Not After : Oct 11 13:00:46 2026 GMT
Subject: CN=d02c9c055c11c056a13e1dcc9d7742a5af94f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:49:07:4f:ff:b7:2b:37:ca:35:ae:2b:c2:
32:53:02:09:4a:42:66:5c:81:4d:bc:dd:2a:ac:2e:
00:2e:7f:fc:02:46:ba:bc:dc:1c:6d:9d:bd:2d:1d:
58:9f:84:38:a2:46:41:eb:b7:ba:a1:fd:33:83:d3:
66:d2:4d:43:14:6f:ff:99:20:bd:58:d9:16:15:e1:
49:2f:93:5f:7c:65:85:82:8c:74:5e:31:85:90:9b:
23:f5:a4:b6:02:b8:5b:e1:e7:62:be:f5:c8:7a:2a:
1c:f3:f9:d5:df:70:bc:db:97:d8:a2:c4:41:88:6c:
94:0c:cc:f0:ca:8d:3e:c0:13:6e:da:cd:0f:07:3d:
e3:db:d3:57:2b:2a:e5:62:52:47:ff:f7:92:77:37:
4f:f0:5d:19:79:ab:a3:53:ce:1e:cd:28:6f:48:6d:
dc:3e:c8:c7:da:59:a3:1c:32:0a:85:59:e2:a2:46:
6f:31:90:d8:19:a0:9a:f8:e5:4b:e2:ee:31:47:fa:
db:0c:c6:80:38:e9:a3:f0:46:d4:42:1e:94:e6:93:
a1:f2:8b:05:f7:84:09:b7:ec:55:ff:8c:2a:84:58:
0b:bb:c6:05:18:c9:fe:89:9f:8d:e5:77:12:89:b4:
56:96:d8:28:1a:d2:52:2d:cf:d5:f5:36:1b:2e:1a:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:9C:05:5C:11:C0:56:A1:3E:1D:CC:9D:77:42:A5:AF:94:F8:22
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:45:2f:e7:e8:0a:01:31:e7:44:4e:30:e1:57:24:b3:ed:c1:
fc:0b:15:f7:2b:7a:44:6b:d2:ce:e0:17:bb:23:0e:df:ca:03:
43:ab:b4:98:f9:ff:bd:09:c2:ce:5c:b4:ad:42:9c:81:c1:f4:
04:ce:2b:e2:8b:2b:e3:7d:b3:ff:bf:a2:b0:06:90:7a:a8:68:
30:e4:01:03:23:90:7a:ba:a0:65:5e:77:8d:e1:97:b9:b5:06:
73:40:ec:69:d5:4b:cc:26:43:2f:12:c1:4f:2c:6d:ce:41:ad:
63:27:67:b3:cf:e3:56:4b:fd:eb:18:53:58:b6:6e:85:27:d3:
50:4e:a5:90:18:39:91:40:2e:7d:ab:3c:a0:08:13:5e:74:73:
8d:4f:41:6d:24:86:4f:75:ba:06:c5:a4:87:34:ec:46:d7:f5:
ed:ff:cc:5f:71:4a:b7:86:51:d1:7e:7e:22:23:a5:2a:17:e5:
cb:df:5f:9e:cb:51:7b:9f:e8:b9:8f:fe:98:05:54:ad:42:9d:
a3:38:8b:82:9e:27:1e:8b:e6:0b:d5:16:7f:b5:f2:ab:0c:e6:
1c:6f:27:8f:6d:4f:87:6d:9a:6c:7a:a1:0d:22:a6:a0:f1:4b:
75:31:77:c9:ff:3a:52:d5:e6:f9:51:be:33:fc:8c:ec:5d:e5:
b0:7b:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:26 2026 by rpki-client