Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: MFttDyixcg/6myjVw39+AQb//YzOjOlmEe06D7/VWnE=
Subject key identifier: D7:DD:01:83:E0:64:19:55:F9:12:12:A8:76:B2:16:10:EF:A1:6E:F5
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 01A18AF7E754A6F12BE0DE54055C32B44212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0A1B
Signing time: Fri 30 Oct 2026 04:01:04 +0000
Manifest this update: Fri 30 Oct 2026 04:01:04 +0000
Manifest next update: Sat 31 Oct 2026 04:01:04 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: gch2hgRAFVFa1JKeOP/GeNgD9ecqFvneJLDSWOQJJds=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:f7:e7:54:a6:f1:2b:e0:de:54:05:5c:32:b4:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Oct 30 04:01:04 2026 GMT
Not After : Oct 31 04:01:04 2026 GMT
Subject: CN=d7dd0183e0641955f91212a876b21610efa16ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:a2:2a:42:6f:7d:2d:2d:c2:7b:05:87:73:
c6:3e:11:78:97:12:79:a3:15:81:05:e4:cd:d8:d1:
35:ae:13:32:e3:b2:c7:6a:1f:cf:2b:f4:3f:ef:f9:
51:8f:8f:19:d3:49:33:c4:5a:96:60:90:23:a8:d8:
33:c7:d3:44:10:45:96:f5:da:30:6a:32:d3:7d:13:
03:c6:7a:46:ac:86:09:c0:b8:7a:24:08:47:f1:90:
4b:83:a2:11:76:98:9c:db:72:e7:17:02:fd:6b:90:
2f:b6:99:5e:31:92:87:72:45:4f:1e:75:41:91:02:
4d:af:8d:b3:17:a9:95:66:8b:0f:d3:14:12:5b:03:
dd:c0:dd:bc:0e:0d:e8:e6:b4:21:43:23:32:78:4b:
18:6a:81:98:94:f8:bc:a7:c6:ed:bb:de:26:b0:03:
d4:91:78:ae:d7:8d:25:91:75:34:a4:b5:da:44:0b:
8f:ca:8b:bc:e2:ef:a6:d1:9f:f5:77:ac:de:1d:e6:
65:8c:7f:83:9f:3d:6a:af:f8:f0:46:7a:47:03:a1:
80:34:9b:05:e2:47:99:3f:e2:7a:58:8c:74:91:a0:
d0:70:ff:c1:7d:0e:34:ca:79:11:f6:17:62:69:3a:
94:85:d4:b0:6d:b2:80:87:f0:47:77:ee:94:a9:ab:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:01:83:E0:64:19:55:F9:12:12:A8:76:B2:16:10:EF:A1:6E:F5
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:a6:ef:02:df:a1:22:38:0a:71:5d:05:d2:d1:37:82:44:
ac:ed:31:c3:a3:87:c7:f4:6d:33:34:dc:7e:08:ab:64:ec:aa:
9b:5f:a3:7b:35:d1:53:a5:38:c8:ac:40:9a:2a:e0:e8:91:a6:
38:df:12:cc:00:74:c4:d7:70:67:57:de:c9:30:37:3e:7b:73:
9f:07:b7:ef:48:a0:93:0c:86:b2:a4:d1:b0:0d:61:d4:86:51:
37:18:77:0f:2f:32:d9:4a:3f:a1:22:00:85:3a:2e:8e:bc:82:
94:f2:b9:32:4d:b6:12:06:26:f9:d4:38:86:df:65:f7:e4:70:
5d:15:37:cf:c1:f2:e1:f2:d2:8b:9e:4f:59:4f:f2:df:7c:c4:
6c:49:14:0e:93:fd:17:58:87:63:59:f2:43:fb:6c:2d:eb:83:
fa:db:c6:2f:d4:25:e8:d3:26:68:f8:90:68:59:7e:d7:ad:9e:
01:af:c5:72:4e:f0:d6:4d:66:89:6f:6d:14:c8:b1:92:7e:ae:
6e:5b:87:0b:f2:4e:40:83:f2:fd:0b:4a:38:97:85:95:77:31:
da:99:92:ef:49:c4:1d:bd:8d:f4:e1:6c:09:98:1a:c7:e8:73:
f3:fc:9e:fb:b7:68:3d:8d:e6:97:22:ef:5d:a0:4e:f4:f7:90:
61:59:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 11:38:39 2026 by rpki-client