Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
File: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft (raw, json)
Hash identifier: oKwcEDnflE0uNMPb+zBXj769ba5chTP2VkXC1kp44hw=
Subject key identifier: FE:3D:AA:E4:58:4D:2C:D5:D5:B6:F8:80:F6:03:A5:0A:EB:33:6F:9B
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 01A0CE244D103191BAA10172D23D43BD2BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:20 +0000
Manifest this update: Wed 23 Sep 2026 12:01:20 +0000
Manifest next update: Thu 24 Sep 2026 12:01:20 +0000
Files and hashes: 1: 9SQHdV4usxyMqovhsLIv6zEJKOI.roa (hash: V7h4PGYhMzOyOwfIi9SAwhnF0KbbWgTo2Xo5jHPZgNM=)
2: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl (hash: sdGIoq4teYg+hkFZ+zxvmjb0R7CR0CMGl4Caz5cZB54=)
3: MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa (hash: wZoNEK1Oa0UDZZCLahAs4WaxNSizyefTF0zT149zqEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:4d:10:31:91:ba:a1:01:72:d2:3d:43:bd:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Sep 23 12:01:20 2026 GMT
Not After : Sep 24 12:01:20 2026 GMT
Subject: CN=fe3daae4584d2cd5d5b6f880f603a50aeb336f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:02:54:e2:d5:53:94:b2:6b:96:7a:c5:8f:
3c:65:23:49:b8:59:54:f8:06:af:b1:13:a8:b2:44:
e6:1a:a2:c2:4c:a4:1d:c2:a6:99:f0:94:c4:3b:95:
ca:6a:70:6b:66:6a:88:d3:b2:89:5a:1d:b1:3a:d0:
ed:36:d8:f9:ba:e6:d2:02:e8:5a:c8:8d:4e:5e:19:
08:09:a6:5b:e2:db:33:4e:25:0d:51:f8:cc:c5:06:
86:6b:9b:61:8d:8f:8d:f2:bf:29:4b:ce:5c:68:67:
e8:35:22:eb:a1:8a:14:43:e6:8a:7b:97:e8:9b:a2:
b2:c3:98:b8:c9:51:da:a9:8e:c0:b4:96:16:87:60:
81:b7:e7:b6:5f:39:fd:b1:df:b9:75:95:63:4f:6d:
e5:de:87:e4:68:33:46:bc:8f:e4:dc:9a:64:44:45:
bf:b3:2a:1c:e7:3f:c1:cf:c1:65:94:50:11:15:c9:
01:26:93:a9:07:36:f9:9b:9c:31:07:ec:4e:67:c5:
b5:e0:4f:31:c8:8a:11:49:6a:5f:0e:7e:1a:1f:74:
52:5c:23:b5:92:e0:6e:f9:45:02:3e:75:6e:86:0b:
c2:16:4d:97:89:74:52:04:97:27:96:99:8d:b5:f7:
82:4a:b0:0c:45:8d:dd:69:5f:a8:b5:b0:7c:6b:b8:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:AA:E4:58:4D:2C:D5:D5:B6:F8:80:F6:03:A5:0A:EB:33:6F:9B
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:bc:ef:d2:42:74:da:a8:ae:7f:3f:57:46:cf:4d:c5:90:
93:46:40:64:44:1f:07:fd:08:b1:e2:fa:17:2a:9a:1d:19:61:
20:f8:33:a5:6a:eb:13:45:3f:9b:00:9e:5c:15:6b:35:05:f0:
43:88:41:ee:98:a7:87:7f:10:23:4b:44:aa:4c:33:ee:27:6b:
c6:c6:d6:bc:1d:94:e3:12:8f:cc:4d:8b:37:b1:e8:21:d6:cc:
94:9a:ac:45:04:4b:bd:a0:4c:e0:86:9f:c2:4a:ad:4a:3c:2f:
6a:44:1c:80:a2:bd:87:90:98:83:9a:5e:b2:d4:db:60:b2:77:
6f:71:94:16:c6:2c:40:a2:35:66:eb:a2:82:d7:66:f1:e3:4d:
94:b3:e7:54:e6:e6:ab:6b:79:a6:17:8d:64:39:46:db:c2:cd:
58:39:8a:73:7f:36:b6:4b:8e:55:b9:95:b4:6c:93:f9:7d:fe:
e8:6e:38:3d:c8:b3:45:c1:9d:d4:12:07:fa:39:cd:bd:63:3c:
96:e8:5b:5c:6c:63:12:38:89:12:af:b2:a4:32:a2:32:d1:51:
8e:07:51:9e:80:12:45:88:29:14:95:42:6b:49:1f:5f:f3:e6:
93:a1:0d:0f:e9:26:da:5d:96:66:44:9b:74:c2:02:a6:81:6b:
5d:9f:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:15:58 2026 by rpki-client