Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: jsJB9EMmuLDOzwJvZz91woSeRuQ3VrXam/7ggcMw+gk=
Subject key identifier: 3D:C3:EC:D1:E1:88:37:CA:57:A3:F2:A8:1E:95:35:B9:D3:7C:0C:64
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01A11296F9AE83DE8477F57E99BBA2B09BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 19:00:46 +0000
Manifest this update: Tue 06 Oct 2026 19:00:46 +0000
Manifest next update: Wed 07 Oct 2026 19:00:46 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: luYFYVJtL1LgOEx7CjjtFNVhOlAWeXbssjAr5J81/pw=)
2: lF6xMupUMlipMq7GMpM0r0z9I7w.roa (hash: 0Res1n1L0Nd2qqeKb1zoNe5I0Gf7UP1O9DGe+CZxdzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:96:f9:ae:83:de:84:77:f5:7e:99:bb:a2:b0:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Oct 6 19:00:46 2026 GMT
Not After : Oct 7 19:00:46 2026 GMT
Subject: CN=3dc3ecd1e18837ca57a3f2a81e9535b9d37c0c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:d9:68:0d:55:27:a6:65:e3:e4:44:38:03:
b2:01:d8:e9:23:a0:11:64:94:1c:ee:5b:55:b9:ca:
88:e3:c7:ec:2d:57:92:6f:2e:da:45:a0:c4:e3:43:
7a:38:5f:e1:cc:73:b6:b2:80:11:c8:62:f9:b0:4d:
06:8f:3d:e7:53:52:7c:88:ed:6d:76:52:0b:99:44:
c0:1b:bf:d7:48:1a:e1:c5:ee:d1:80:aa:fe:56:a4:
c9:96:7d:5e:b5:2d:77:0a:e7:ca:1a:9e:e7:15:64:
d4:a4:20:42:b7:5b:89:f0:48:65:1a:12:5e:ad:39:
51:e1:d6:97:5d:fd:8a:88:8b:0d:e3:9e:01:0b:eb:
18:22:d7:1f:63:81:47:0b:88:55:5d:e7:37:60:70:
6b:c5:42:40:46:f8:ac:14:e5:1f:9e:2b:bd:0a:92:
d5:0b:59:4d:b0:25:ad:72:7f:a4:ab:42:b7:b0:15:
00:dd:4f:ee:5f:89:17:c9:de:0d:be:26:31:84:86:
28:7d:d8:c0:e6:94:06:6a:8c:0b:2c:bd:0b:95:d9:
ae:0a:57:1a:f1:5f:70:74:67:a2:6b:ad:30:d0:5d:
01:dd:1d:c8:4c:99:66:32:d7:b2:f5:4e:fc:6c:1a:
ab:a3:7b:8d:96:2f:06:35:f8:85:85:f1:1a:25:5d:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:EC:D1:E1:88:37:CA:57:A3:F2:A8:1E:95:35:B9:D3:7C:0C:64
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:43:2a:9e:7c:33:b5:11:bf:c0:1d:90:94:39:23:c9:70:b4:
7a:c0:23:05:f8:09:1f:5f:4d:cd:ef:7f:43:75:8c:47:e9:b5:
dc:a2:45:af:05:ed:98:1e:10:e9:13:d9:63:72:50:11:f1:2b:
91:84:b9:27:83:b2:95:70:ba:c0:c3:3c:39:16:94:13:54:9d:
e2:30:bf:48:1a:15:f1:e9:df:4b:9e:52:2a:6a:5d:bd:3d:40:
89:44:17:e1:b5:66:cd:ef:f1:8c:a1:72:c3:ac:43:40:cf:b8:
8e:66:ad:a1:f6:be:3d:6f:53:6d:93:e6:69:55:1a:99:76:d6:
5c:1e:7e:65:e7:01:63:2e:d2:dc:bc:10:ab:9f:2d:34:fc:3d:
f9:93:9c:5d:2e:b4:32:5a:9a:e1:c7:94:78:65:a1:4c:64:e3:
38:70:a0:7d:ef:bb:ea:80:b9:28:49:6b:d1:5b:e3:ec:59:b9:
42:a8:df:dc:06:e5:a0:e0:ba:d4:e1:3d:02:80:a4:bc:e8:66:
ee:f3:f4:d3:bb:ca:94:8c:1f:45:75:15:ce:08:8e:10:df:07:
f1:99:e7:68:b1:c8:50:38:29:ac:13:d3:7d:6d:29:eb:17:e3:
33:5b:7e:d9:ea:17:15:72:88:85:f3:11:a9:f8:fb:7f:0f:48:
88:0f:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:04:10 2026 by rpki-client