Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: qdPhH3t2Y9P666iSBdfqbNHx3Qx9by7Fh5mTb39gPNQ=
Subject key identifier: 2C:A0:EE:38:36:A3:7E:60:93:C4:0B:69:04:B3:E1:70:85:78:96:41
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 01A137486894149487086EE9171ED9ED1483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 05ED
Signing time: Tue 13 Oct 2026 22:00:54 +0000
Manifest this update: Tue 13 Oct 2026 22:00:54 +0000
Manifest next update: Wed 14 Oct 2026 22:00:54 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: Y9b09sx03ToEX37gyINmQtAZr+36tU1vEoH80RmIL3k=)
3: jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa (hash: 0TxSTCi/XS0O1qfQUziR/iAsNnnvd41KQSzNVhpvgcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:68:94:14:94:87:08:6e:e9:17:1e:d9:ed:14:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Oct 13 22:00:54 2026 GMT
Not After : Oct 14 22:00:54 2026 GMT
Subject: CN=2ca0ee3836a37e6093c40b6904b3e17085789641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:e6:a0:02:e7:56:14:51:a6:f5:bd:f3:ed:
37:a4:dd:a8:49:d3:66:76:4a:ad:8c:e5:04:e8:2d:
9b:b6:6b:8a:52:1a:99:7d:72:11:c0:1f:c5:92:14:
c4:97:76:c4:13:fc:db:7e:7b:c0:f4:8b:16:2c:a9:
43:23:12:83:3f:f3:4c:5c:6b:cb:fd:0a:81:ba:f5:
83:32:31:ce:79:50:80:fd:32:db:35:1a:fb:3c:ec:
b7:46:ea:da:05:20:03:53:43:dd:c6:42:c0:10:5b:
e2:6e:3b:7b:41:aa:f0:b3:73:54:18:ed:20:42:e5:
86:61:5c:cf:76:9c:13:d5:c7:9e:40:6f:dc:bc:d8:
be:64:6b:12:84:1f:e8:0e:21:79:35:16:5d:32:94:
04:7e:fc:f1:0a:e4:4d:77:dd:8f:74:da:a0:15:05:
09:12:6e:20:7d:7c:33:c2:f1:a0:78:75:a0:23:81:
07:ec:18:f3:02:92:1b:e7:58:f9:14:cf:55:90:31:
67:2a:43:f6:e2:b5:8e:d1:1a:c8:76:67:3d:69:e9:
21:f6:cf:e0:34:43:66:64:d0:61:9b:3e:15:51:af:
a2:ef:46:33:9e:38:c4:fb:ff:32:99:79:f0:1f:44:
18:27:01:7e:28:a2:c2:b2:29:24:75:28:2a:ad:6c:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:EE:38:36:A3:7E:60:93:C4:0B:69:04:B3:E1:70:85:78:96:41
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7e:4f:d1:a1:06:50:66:75:89:ab:c5:92:a8:1d:99:fa:00:
fa:54:c6:ad:d4:17:72:d7:fe:7b:8d:a4:04:92:25:25:d6:68:
28:ed:6a:b9:74:f5:2d:fa:3b:8e:b5:f9:22:fe:15:a6:98:17:
2e:df:38:77:b6:52:9a:2c:34:7f:2d:d4:a9:05:d6:a3:49:56:
34:6c:46:db:56:7f:f0:f1:53:fe:8f:9c:fd:76:bb:9b:d8:3b:
d2:27:b4:e6:5b:e7:87:b6:6f:6d:e6:a1:04:51:a1:6f:d2:ca:
cf:3d:76:d3:82:89:44:94:01:8d:49:a6:68:18:c4:37:c3:43:
85:88:94:88:7e:49:11:b8:aa:c5:c3:e2:0a:ea:0b:bb:ac:10:
22:e8:b1:68:fa:6e:04:09:f6:0f:c8:a2:ce:d4:9c:e8:66:a4:
b7:78:22:51:df:af:b9:8c:da:3f:7a:b1:d2:0d:91:4c:0d:f7:
93:e1:66:1b:58:15:79:98:7e:91:07:a3:4d:07:b0:85:cb:ac:
39:1c:40:9e:5b:37:b4:d5:be:2f:1d:2f:5e:b3:57:60:1a:8b:
21:ca:3f:d6:e9:37:6e:11:ce:72:01:48:0c:be:b3:5a:a8:7f:
a9:e2:fd:05:5f:9d:4b:4c:00:59:5f:a5:d1:0a:a3:fb:9f:07:
a7:35:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:57:03 2026 by rpki-client