Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: +LjseGAm+VuP7d+R/zwXvz39lTCr2XviXVcg7u4gaHY=
Subject key identifier: 77:76:63:C5:E3:C6:71:93:1A:0E:A9:32:0F:56:0B:F2:27:66:86:B6
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 01A0E852F583046FA3EC319B5D88705AE8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 1A75
Signing time: Mon 28 Sep 2026 14:02:25 +0000
Manifest this update: Mon 28 Sep 2026 14:02:25 +0000
Manifest next update: Tue 29 Sep 2026 14:02:25 +0000
Files and hashes: 1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: pQMUo6KlFD6olRA3jv9XP3li0OAj/U+cqS3V+vZKVzU=)
3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:52:f5:83:04:6f:a3:ec:31:9b:5d:88:70:5a:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Sep 28 14:02:25 2026 GMT
Not After : Sep 29 14:02:25 2026 GMT
Subject: CN=777663c5e3c671931a0ea9320f560bf2276686b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:d0:4b:8f:50:e1:7c:ba:71:e5:f0:c3:b0:
fe:4f:86:47:1c:84:45:2d:6e:09:47:30:46:6d:72:
10:dd:3f:40:ad:75:ea:55:b0:84:e7:5b:55:56:34:
bf:df:b4:b9:be:91:d9:e0:df:c3:e2:68:7e:7a:76:
64:05:cf:ad:50:c3:05:70:21:46:0e:53:60:f7:f3:
db:62:d9:5d:40:96:f7:f4:2a:d2:b0:cb:bf:35:a2:
a4:9c:cd:73:1a:66:59:dc:39:52:2b:36:e0:57:07:
5f:08:34:19:51:ed:19:36:ff:44:ed:59:ef:d6:58:
b5:6b:cc:af:24:6d:9d:0c:67:bb:75:8e:e0:7f:9d:
6b:77:e0:ef:05:26:00:f8:8c:36:ec:ce:de:f2:dc:
76:83:b6:c3:4c:15:21:7a:7a:d5:37:d5:1d:d8:bc:
d1:c9:d8:ed:13:6c:47:d9:64:b9:20:99:92:ab:2f:
20:c6:d4:0d:6e:de:94:0b:84:56:1c:89:ad:f4:19:
80:5d:12:96:2e:5b:3d:1b:d8:20:79:af:34:c4:9d:
c3:46:ae:7c:f2:02:fb:2d:58:20:93:85:e4:b8:b8:
a7:6e:60:5d:64:c6:b7:ca:b5:b3:a5:ea:98:19:1d:
c5:80:38:cb:57:f3:b2:dd:16:a0:e9:8c:52:31:dc:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:76:63:C5:E3:C6:71:93:1A:0E:A9:32:0F:56:0B:F2:27:66:86:B6
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b0:24:af:72:3b:47:c0:74:06:79:d8:5e:36:98:0f:e3:9f:
48:ec:c1:a8:04:ba:3e:2d:fe:6a:08:e5:0e:00:3f:79:cd:82:
65:0c:ed:2d:74:db:7c:4f:04:24:87:ff:40:a6:9c:c7:92:48:
01:10:fe:26:f0:61:02:b2:a4:3f:25:7c:d4:4b:64:61:1c:71:
a7:ab:83:4d:1d:09:41:4e:2a:5f:c2:41:8b:4f:ea:70:38:a3:
1c:f6:38:6f:b2:df:9e:17:ed:38:21:45:b4:6d:90:6b:9b:4b:
a6:c4:a7:07:bb:5c:8f:6e:51:f2:ca:a8:4d:9d:08:75:1e:38:
4a:3c:8f:59:d5:18:98:62:03:fa:7b:46:1f:ba:d2:c3:55:1e:
c6:28:2b:00:c9:3b:5d:c0:e0:5a:61:8e:ba:64:bb:d2:78:50:
1c:7c:c6:e8:2c:49:b5:0c:32:ed:1e:eb:09:6a:7e:d3:77:36:
95:3b:66:7f:d7:ae:a3:4e:5e:6d:fd:fd:d3:2a:d1:14:32:c0:
8e:d2:2a:b2:35:10:1c:a3:d6:b0:63:48:9e:d7:dc:82:e9:f2:
bf:1a:c6:64:f5:60:f8:e7:d7:fa:e2:1b:af:09:72:2c:dd:26:
bc:77:e7:0b:69:c2:ab:bb:1f:03:f2:c7:a6:57:33:45:b2:44:
da:e3:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:34:56 2026 by rpki-client