Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: SR1Lz3SiBj0AfsLaD+dgq1PBb0Lb+IyVX/KfratB4X0=
Subject key identifier: 7A:2A:C7:3B:E0:81:4D:2F:CD:3D:44:0C:AF:42:FB:16:E9:22:38:38
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01A1A894C04C993965D6D03C2E7529B53A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1A57
Signing time: Wed 04 Nov 2026 22:01:23 +0000
Manifest this update: Wed 04 Nov 2026 22:01:23 +0000
Manifest next update: Thu 05 Nov 2026 22:01:23 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: 1B0sLg2Vl7QzITy+/WtNNXOgLUuKFlq6jSAahXbKkg8=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:94:c0:4c:99:39:65:d6:d0:3c:2e:75:29:b5:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Nov 4 22:01:23 2026 GMT
Not After : Nov 5 22:01:23 2026 GMT
Subject: CN=7a2ac73be0814d2fcd3d440caf42fb16e9223838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:ea:59:c9:50:24:40:48:41:20:4b:85:9c:
03:41:2c:94:6a:b8:9b:c7:23:2c:08:f3:8b:d9:72:
52:53:f4:18:0d:4d:f3:2c:30:2e:79:d5:93:94:7b:
bc:2c:24:7f:ac:84:ee:8e:83:1d:8a:a6:41:e7:f6:
ad:32:48:b5:02:00:ef:cd:8a:89:77:50:13:aa:e6:
2a:31:ac:7d:8f:8a:57:5b:49:12:dc:ff:28:77:07:
7a:34:06:1c:9a:95:9a:05:a3:5e:6a:43:4a:a1:34:
9b:f8:26:cf:13:a6:2c:c6:aa:4f:6a:c5:32:fc:56:
b8:b4:c0:2e:5a:eb:5b:69:fc:fd:0f:83:3b:69:f9:
b3:4b:c7:79:54:71:4f:7f:e6:f5:69:da:ac:68:15:
fa:42:0b:99:2c:ed:b1:e0:1b:00:6c:d9:56:0c:ee:
df:7b:ee:ec:86:e0:a8:12:cc:d4:32:b3:cf:ed:77:
b6:69:dc:21:03:05:c7:18:4f:f8:d6:e8:49:b0:b0:
e4:7b:5a:8c:e0:10:51:78:b6:33:31:ea:3b:e1:03:
38:1b:3b:f9:9b:b6:74:68:2e:33:e6:60:d6:67:0a:
96:9d:8e:b3:5d:e6:08:ee:1f:e4:d5:68:29:59:1c:
00:1f:e3:96:58:bd:ee:84:6d:ab:8c:82:24:67:53:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:C7:3B:E0:81:4D:2F:CD:3D:44:0C:AF:42:FB:16:E9:22:38:38
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:8d:2a:32:13:63:6a:39:a0:da:cd:da:f5:b9:bb:ba:4c:
d2:02:4b:9f:d8:0e:7c:55:63:50:24:1d:e7:94:85:1c:67:f3:
1c:13:12:e2:ca:40:24:19:2d:d7:d7:ee:39:16:fa:18:0f:74:
1c:c9:ad:18:2e:18:3c:27:c9:06:a8:30:f5:56:d4:57:28:44:
10:ef:51:1e:45:ff:78:ed:83:04:a7:02:62:64:4b:fa:4f:ce:
1c:52:e8:5b:2c:0e:b3:94:35:fa:38:33:ac:95:a0:4b:90:26:
9c:ab:95:84:90:cd:4c:7d:aa:48:4f:d5:b7:83:25:42:5a:0b:
fc:25:7b:d8:f0:1f:fa:2b:30:97:fb:4e:61:f3:be:cc:d5:5d:
6b:50:f6:16:56:68:c6:89:fd:22:ba:fe:6f:66:cb:d0:5b:3d:
3f:11:a0:27:0e:be:4b:50:a4:8e:2b:c9:ad:ca:89:83:a9:21:
b5:2d:46:b8:2d:9d:93:9b:8d:9b:c8:82:d4:9d:16:7d:65:df:
60:76:8e:7a:f7:ea:87:9d:3a:4e:f7:7b:dd:76:d7:bb:7a:d3:
08:05:a6:49:94:27:20:75:c3:72:46:70:50:82:8f:52:8e:7c:
43:86:69:e9:f1:a1:d2:46:e3:8b:22:f8:19:09:60:b4:82:cb:
8f:5a:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:10 2026 by rpki-client