Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
File: HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft (raw, json)
Hash identifier: ihtIGXhaFaXVg0tq3FhMp3iy7gDDkqAIosuTQHsSVA4=
Subject key identifier: 51:13:3D:BE:6F:78:12:D0:F2:22:C0:1C:D4:0A:6F:39:24:8F:55:16
Authority key identifier: 1C:12:EE:F1:42:90:4C:C6:27:DE:F8:69:7F:08:09:F9:20:F8:7C:AF
Certificate issuer: /CN=1c12eef142904cc627def8697f0809f920f87caf
Certificate serial: 01A0DD97791BDC7132122DA9DE7D88A798F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:26 +0000
Manifest this update: Sat 26 Sep 2026 12:01:26 +0000
Manifest next update: Sun 27 Sep 2026 12:01:26 +0000
Files and hashes: 1: H8PUqURRSX7Ko7yZjSMsmWRZP3Q.roa (hash: HFsd/3BZ4kIENJQs4l9bz42cWMnzn7tWXz7RhsMqBaE=)
2: HBLu8UKQTMYn3vhpfwgJ-SD4fK8.crl (hash: 4ImeJMbrXJhvsWar4Gw1QOI1ISTyhNLfDouIOSEXPMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:79:1b:dc:71:32:12:2d:a9:de:7d:88:a7:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c12eef142904cc627def8697f0809f920f87caf
Validity
Not Before: Sep 26 12:01:26 2026 GMT
Not After : Sep 27 12:01:26 2026 GMT
Subject: CN=51133dbe6f7812d0f222c01cd40a6f39248f5516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:bf:2d:b5:6b:87:d7:bc:df:83:3b:4f:9d:
22:89:2e:0b:2a:b6:ac:9d:cb:94:f4:62:8f:9a:d4:
d3:01:86:48:c5:e7:0c:09:12:3c:c8:6a:12:59:9a:
1a:0e:01:07:dd:4a:cc:2d:b7:27:f8:b2:f4:36:32:
8d:76:4a:1d:98:1d:03:a0:6e:71:1c:c1:6b:f7:db:
93:2e:0c:b9:48:b1:f7:fe:2d:5e:bf:92:19:50:6b:
67:84:2d:a1:85:84:98:ed:6d:47:bf:a3:32:67:97:
c6:70:fb:98:bc:1c:fe:db:fa:5e:22:1a:8c:a6:4c:
0d:56:a7:3a:82:c8:59:ac:ee:e2:c7:15:3a:b6:b5:
1a:b9:7b:e6:e7:bf:3e:e8:77:5d:07:42:ed:59:4c:
34:ed:02:58:9a:53:a8:76:aa:46:8a:25:12:11:bb:
2e:6f:77:49:14:dd:71:e6:75:2f:62:a5:b8:5a:d9:
67:76:67:3d:3c:cf:b3:59:93:9e:b2:1e:ca:cb:79:
39:a5:cd:a5:10:dc:51:b8:a1:e9:4e:c9:e5:db:6b:
b1:8f:64:5b:b7:0c:2f:76:e3:28:c2:6f:38:08:ce:
4b:27:2c:f8:5a:e0:8d:11:96:06:68:a8:ae:44:d5:
93:4d:a7:7b:e0:e8:d2:c0:98:d9:ba:d7:44:b7:cf:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:3D:BE:6F:78:12:D0:F2:22:C0:1C:D4:0A:6F:39:24:8F:55:16
X509v3 Authority Key Identifier:
keyid:1C:12:EE:F1:42:90:4C:C6:27:DE:F8:69:7F:08:09:F9:20:F8:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:f3:ec:59:58:52:17:ef:ed:2e:6c:36:a7:38:6b:df:d8:
5c:e6:b2:d3:be:85:91:e4:06:ee:d3:79:d7:0e:84:46:ea:b9:
ce:c0:8d:0f:54:09:ed:bc:28:7b:a4:f0:39:19:31:26:b8:ae:
b4:68:08:76:c7:7e:1e:59:16:2e:60:e2:d6:a7:73:b4:7b:09:
45:38:6f:8a:6e:c9:e5:c3:eb:3a:4f:b7:aa:58:81:03:ce:06:
c4:3d:a5:66:dd:b2:d1:89:b2:a9:f0:46:c5:00:22:7b:85:fa:
de:2d:22:c6:00:2e:3f:7e:98:d5:9a:ee:76:af:8b:ba:b0:1b:
b0:c6:05:43:ba:5b:85:eb:8c:5c:9b:21:a2:dd:96:a2:63:99:
53:11:15:ea:1a:4b:ee:63:62:f4:98:34:73:30:42:0e:4a:6b:
3b:d7:bf:65:d5:e2:7b:2e:dd:e1:8c:08:26:05:42:b9:18:68:
3c:bd:48:e4:c9:6c:a1:07:8b:73:ef:73:4d:fb:21:aa:5a:51:
12:d3:0b:3f:75:48:00:c9:ba:db:53:af:c5:78:bd:cf:bb:79:
04:a4:ee:9e:57:cd:39:51:93:86:dc:55:3c:e1:9b:a5:08:18:
80:44:d9:b1:07:f2:80:1f:bd:e9:73:74:b3:a0:a4:7c:e7:ab:
42:fb:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:40:35 2026 by rpki-client