Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: bVCyZ0tYPJe+kF7DeNhrEoCsZUogvCGczTfiZbDzIbg=
Subject key identifier: 41:96:F5:74:29:16:57:D2:1F:F4:AA:B6:15:D8:5D:39:67:75:5C:4E
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 01A0C28D0D66C7C91ECFBA1748CC3ACD0DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 18CE
Signing time: Mon 21 Sep 2026 06:00:18 +0000
Manifest this update: Mon 21 Sep 2026 06:00:18 +0000
Manifest next update: Tue 22 Sep 2026 06:00:18 +0000
Files and hashes: 1: 1-bR6sRmqVUM--gERBLCMb9Ravtw.roa (hash: IEQS2o9NuZUHyISNsWvFCuuFh71uq4ILP2ZvrrGr1Uc=)
2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: UGjdeFyWYgGwLFVTaErm4Z4u/L98un62NPUSAOTcAZk=)
3: vbqC7dnIYforI52OCrB0B1B9v_E.roa (hash: l+1hvAkiSw6p++rx/Ga348Dp115kPP0Bh0QVsqmz+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:0d:66:c7:c9:1e:cf:ba:17:48:cc:3a:cd:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Sep 21 06:00:18 2026 GMT
Not After : Sep 22 06:00:18 2026 GMT
Subject: CN=4196f574291657d21ff4aab615d85d3967755c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:7c:46:e1:e4:eb:e1:fd:a7:95:15:a0:47:
35:34:e9:6f:a7:d8:b7:be:bd:43:7f:ca:5a:4e:f7:
29:19:27:97:e6:30:88:18:64:f9:b1:7d:a7:49:dd:
28:4d:c2:ef:29:28:d6:6b:20:a1:a7:aa:95:58:18:
87:5c:90:7e:ed:7d:c3:bf:8f:c6:4e:f8:fd:b5:70:
f5:f9:d9:7f:9b:70:92:73:b6:fe:9c:8d:ed:6c:7a:
18:13:21:f8:48:29:12:d5:9f:27:7c:7e:60:80:88:
7f:9a:c9:29:2f:36:15:7c:96:b2:c4:3d:11:2b:87:
84:39:f4:6c:ac:dd:83:65:4e:1b:15:64:e1:db:57:
71:6d:de:16:2d:95:e5:5d:ed:69:b9:27:d9:29:6a:
e8:29:ca:f9:60:5c:ce:a6:c0:a2:42:19:9c:41:1d:
bd:3b:fc:c3:f7:3e:1c:d6:eb:16:93:7f:3e:36:5a:
76:7b:36:73:57:35:1b:20:2b:c0:4e:68:b7:55:83:
b1:7c:e8:38:09:63:e2:de:3c:3e:66:39:dd:a9:90:
16:1b:b7:95:13:3e:2c:1a:73:3a:a1:67:71:63:ec:
e9:e8:1d:96:4c:32:2b:3c:52:ce:c1:a8:21:a8:e2:
a1:49:53:27:12:a7:5a:15:eb:e3:c1:d4:d7:c1:41:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:F5:74:29:16:57:D2:1F:F4:AA:B6:15:D8:5D:39:67:75:5C:4E
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:c3:a5:ff:aa:43:f1:b5:83:20:d3:2f:a6:97:65:9a:34:
36:e0:25:cf:f1:35:c9:94:ad:37:12:22:40:fd:34:2f:bc:2f:
bc:4f:78:e6:bd:5f:90:a9:a4:23:0f:f9:cd:02:58:74:38:14:
ef:1e:c5:16:f7:7c:47:ec:d9:35:39:47:12:f0:1e:6d:e7:f3:
fa:c9:ba:e6:a9:d8:8b:b0:98:7b:39:7b:7b:79:50:2a:59:11:
40:b5:3d:74:61:88:31:34:2e:26:99:1d:cb:20:89:42:a3:72:
3d:ba:93:1a:7a:1f:12:08:f0:6b:4f:b1:ba:ac:6d:1f:1d:3a:
cf:41:15:20:26:94:7b:76:ef:ec:bf:f5:3a:21:e0:bc:53:de:
9f:5a:8b:da:7a:97:ec:5b:11:19:66:1e:f1:58:79:97:3f:d8:
e6:29:4a:f9:20:9e:97:e2:c2:3b:29:72:6a:5e:ed:34:16:a6:
42:40:74:80:e6:54:0f:c1:f6:b6:da:d2:7e:1a:8f:a4:87:a4:
db:93:87:32:11:a3:6d:2a:af:82:c7:8f:b8:56:1f:6c:98:6f:
95:c5:ee:8c:fe:c6:0f:36:33:1e:24:8c:ed:4d:4c:60:83:9e:
17:af:f5:9b:f2:41:bf:87:c7:a4:b1:8d:51:8d:1e:01:73:ec:
81:82:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:54:58 2026 by rpki-client