Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: G5+f9f9/V8LX13GmtUmX3a6FjxHV0z6Y8Y7C8PyuflQ=
Subject key identifier: F7:5D:D3:EF:16:74:3D:93:14:F0:09:08:73:B4:A3:A0:2E:1D:28:28
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 01A0C17B19815F3456C7761AC0D74790FD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0BA0
Signing time: Mon 21 Sep 2026 01:01:05 +0000
Manifest this update: Mon 21 Sep 2026 01:01:05 +0000
Manifest next update: Tue 22 Sep 2026 01:01:05 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: ghDuxPjnGUgt/rW0N8EJGlmlZPMWQ1VHkFtJvt/SokY=)
2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:19:81:5f:34:56:c7:76:1a:c0:d7:47:90:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Sep 21 01:01:05 2026 GMT
Not After : Sep 22 01:01:05 2026 GMT
Subject: CN=f75dd3ef16743d9314f0090873b4a3a02e1d2828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:5b:e4:9a:69:ab:ef:60:e8:49:92:04:db:
15:2b:2d:d2:a9:2b:99:5a:77:d9:fc:34:dd:fe:06:
0a:04:56:d7:44:63:88:d7:78:2a:95:68:6a:af:1f:
c8:60:6b:5a:71:93:68:01:01:df:a5:2f:5e:32:cf:
06:a7:34:0e:cf:fa:af:2e:40:82:3e:53:59:2e:c6:
25:a1:3e:f8:09:3b:8b:5e:e0:62:66:35:29:00:b1:
f3:23:63:ca:18:79:87:39:31:c1:be:8c:3f:b9:b5:
6b:2a:18:84:e3:c5:35:e5:7b:43:89:9e:1c:19:c7:
e6:b2:b4:f6:44:f5:c0:33:7b:ed:f4:4c:5a:44:af:
97:c9:f4:99:b0:b6:1e:0b:9d:71:d6:44:55:13:74:
c8:23:c8:ab:c9:9f:ac:ce:f6:f2:ca:fe:ce:0b:0e:
1d:8b:9d:33:53:a8:56:d3:6f:65:f6:96:f6:f3:75:
8a:ae:f5:5f:54:48:39:c8:26:06:d5:be:57:3d:12:
e1:89:e7:37:e6:12:cd:f4:8d:33:78:24:f7:d5:41:
59:f6:0d:23:a9:f9:b0:62:c0:f5:be:cc:e6:e8:d8:
fd:6b:d9:d5:0a:d0:a4:7a:c0:9f:b2:22:c0:95:c5:
f5:58:98:54:6a:80:75:85:f2:e3:c8:37:04:23:a1:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:D3:EF:16:74:3D:93:14:F0:09:08:73:B4:A3:A0:2E:1D:28:28
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:5d:7a:4d:0f:83:81:95:9c:1e:b5:73:8a:02:66:d3:d5:
0c:cb:e9:34:c3:bd:7c:f9:49:00:e8:09:9d:28:61:8d:5e:14:
db:83:60:fd:b9:18:b6:d2:5c:32:93:2c:55:05:02:5c:10:cf:
70:a2:98:06:8f:27:76:79:59:28:dc:ad:dc:e0:b3:ae:3d:de:
11:56:73:01:86:9a:05:bf:c6:57:f3:00:a6:f2:29:37:66:bd:
ef:cb:ba:2c:dd:52:e3:c0:f7:35:03:77:eb:0e:6a:c0:04:c0:
87:0c:38:bd:1c:63:f7:2e:4b:ac:cb:85:d6:89:60:8a:c9:51:
95:3e:60:00:9d:31:19:f7:4e:d0:3d:3a:18:ce:ce:1f:04:d4:
ce:07:ba:78:9d:ce:0c:97:b4:8e:bd:de:d2:d0:2f:62:b4:e4:
bc:c1:b0:98:f2:69:75:21:a8:07:70:fb:5b:64:0f:f2:82:09:
09:ea:1d:f8:d3:1e:e6:3e:44:c3:ae:94:88:80:a7:2a:7e:db:
c5:8a:c1:bd:78:9a:71:52:36:2c:ad:7a:2c:75:09:9f:3c:f9:
28:8a:4f:cf:3e:15:28:70:08:bf:6c:d3:77:90:4c:83:2a:bc:
3a:77:a6:e7:d1:2c:8a:2e:32:e7:38:57:52:e0:42:0e:6e:1b:
24:09:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:19:08 2026 by rpki-client