Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: JjrULS2bBU0MEa/47zrqyYqboSBYHzHhVhbhZoYDPrI=
Subject key identifier: 68:1B:33:51:0E:3B:CE:AA:A8:CF:9F:9A:0B:C3:37:7E:49:F0:EA:5B
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 01A13033848BEE7B624E1471A68772BA9B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 159D
Signing time: Mon 12 Oct 2026 13:00:44 +0000
Manifest this update: Mon 12 Oct 2026 13:00:44 +0000
Manifest next update: Tue 13 Oct 2026 13:00:44 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: 26Jgd0FkGAAaicuuKJenlL4VTpaAVGaXkbuqy2NDVYw=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:33:84:8b:ee:7b:62:4e:14:71:a6:87:72:ba:9b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Oct 12 13:00:44 2026 GMT
Not After : Oct 13 13:00:44 2026 GMT
Subject: CN=681b33510e3bceaaa8cf9f9a0bc3377e49f0ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:e5:3d:a2:6e:b9:b1:aa:14:16:10:b0:64:
b6:24:0f:15:52:60:49:b2:b7:19:35:83:b0:48:92:
8b:5a:7a:f7:27:dd:23:1f:b9:39:42:4c:c8:7e:de:
9d:3c:6a:d8:f7:bd:16:a5:f5:69:ec:39:94:c2:d4:
d7:ca:d5:d2:0e:b0:6a:e7:43:97:ee:d4:b8:76:1c:
2b:bb:29:8c:05:11:ce:ea:9d:85:95:74:15:56:0d:
88:0f:a3:70:55:38:48:2c:80:38:ba:49:ca:0a:7a:
bf:59:71:e3:e4:64:0d:e7:f5:b7:dd:a4:44:98:54:
ae:b7:6c:e4:01:89:77:d0:f8:eb:06:aa:bd:ee:15:
19:b9:ac:de:cf:23:5e:6d:55:ba:50:c6:4b:2e:90:
85:77:bb:9c:98:68:ee:c1:07:99:0f:14:96:3d:d2:
7e:b9:bd:b3:49:1e:0b:d6:a2:3c:c0:ba:3f:a2:8a:
5c:a6:a0:99:c2:14:b9:a9:ae:3b:fa:29:2d:b7:a6:
f4:ff:8e:98:01:6e:e0:61:ae:4e:b9:a1:e5:24:98:
1c:3b:30:8e:60:09:58:4d:5f:6f:a3:ae:90:86:c3:
18:a2:3c:3f:96:b6:71:8c:35:06:b2:61:58:1b:2a:
a3:ed:12:e6:c8:ec:8d:6f:0d:27:e0:e3:75:de:15:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:33:51:0E:3B:CE:AA:A8:CF:9F:9A:0B:C3:37:7E:49:F0:EA:5B
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:89:6a:78:b5:98:fb:d5:36:7d:1a:81:86:53:8e:4d:49:
b9:00:01:aa:c6:19:f0:ac:b3:7b:b2:24:11:f9:d0:c2:e5:62:
d1:9d:ce:d2:a1:11:f3:d9:fb:31:df:49:4f:aa:dd:07:30:c1:
c0:0f:02:27:3b:54:7f:7a:f9:96:41:f3:51:d7:6d:3f:d3:c0:
e8:26:29:b8:e5:35:22:7b:bd:08:69:71:a7:0f:04:f0:73:27:
1d:e6:2d:1f:e0:00:37:f9:b8:74:35:bc:c3:70:af:f4:42:41:
1f:83:1f:19:09:5d:6b:80:f2:a1:84:ce:5e:7c:20:67:5e:7b:
49:59:b8:0f:2e:65:3c:62:09:74:a9:ca:1a:59:2f:ec:a3:e7:
42:d5:3e:ad:73:c5:9a:a4:a9:65:f3:0c:b9:5f:37:00:8a:66:
68:31:f8:6e:2e:ce:15:f4:54:bf:d8:fa:9a:ea:a1:11:72:72:
ef:15:c6:61:b5:8e:5e:ab:c8:1b:76:41:32:d3:ce:db:4b:4c:
c2:02:f4:45:89:b3:3b:c9:74:b0:b2:84:19:c4:45:f8:7f:39:
c3:8d:03:8f:56:a1:dd:c5:30:d6:4a:2b:11:6b:26:d7:f0:0e:
d4:9d:1e:80:af:f3:66:9f:58:7a:27:2c:5f:1d:12:ed:d8:ad:
62:fe:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:44:03 2026 by rpki-client