Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: f5J0WDUQUtQ9S7/KbQT6/4cTeXmPeXLoae1TrzfLySY=
Subject key identifier: 6E:E1:9D:66:AA:1A:68:9C:4E:F0:64:AC:5F:A3:15:F6:F1:BB:3D:28
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01A0BCF92932448EF6783F112E97BA2CEA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 19DD
Signing time: Sun 20 Sep 2026 04:00:40 +0000
Manifest this update: Sun 20 Sep 2026 04:00:40 +0000
Manifest next update: Mon 21 Sep 2026 04:00:40 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: 777DXdW5zkhhD+pUuWYfpXspsSD3Lm5Lkl15pADURwA=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:29:32:44:8e:f6:78:3f:11:2e:97:ba:2c:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Sep 20 04:00:40 2026 GMT
Not After : Sep 21 04:00:40 2026 GMT
Subject: CN=6ee19d66aa1a689c4ef064ac5fa315f6f1bb3d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:18:9d:cd:13:e9:ae:10:03:de:96:62:bf:
c8:28:39:72:a6:62:09:c3:6c:f5:c0:4f:d6:91:57:
63:98:54:f7:62:ed:25:d4:9c:22:c1:9b:71:a4:40:
22:9f:b2:cf:70:22:e9:d3:ca:9f:fe:b8:12:20:b6:
67:57:47:51:87:a3:50:3e:09:21:b3:57:3b:28:7d:
fd:40:f1:e4:be:4b:ec:ba:5f:50:bf:91:3f:d1:4f:
bd:db:65:ed:6b:38:ad:3e:8b:0d:3d:ae:34:a3:60:
1d:9d:38:d4:a8:0d:cd:a0:ea:25:27:7c:fd:2f:4c:
34:27:2d:bb:bb:cf:49:27:5e:b2:98:56:15:9a:86:
3b:f4:d2:d5:84:37:5f:20:86:d7:66:dd:94:19:e6:
1e:69:5a:6a:6b:3f:75:89:4e:5d:aa:ab:83:4c:65:
e6:cc:ce:ad:f8:56:0d:f5:1a:66:af:fb:31:5d:65:
d8:23:a1:1b:42:c7:4b:27:c4:3e:d4:2e:c0:38:91:
cf:3d:8b:62:99:2b:56:d1:94:04:2b:0b:01:c5:94:
88:49:9b:32:49:75:a5:58:45:e9:25:c1:9f:64:98:
21:96:cc:e7:3c:f3:27:75:97:72:5b:49:e0:5b:ea:
b5:fd:90:e5:b0:ab:ec:17:79:dd:86:d5:c5:55:3f:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:9D:66:AA:1A:68:9C:4E:F0:64:AC:5F:A3:15:F6:F1:BB:3D:28
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9c:2a:dc:ef:5b:d9:0d:11:17:15:8e:09:5d:f8:5b:4f:b8:
11:3c:d0:59:45:ab:c4:8f:16:c9:91:75:5d:14:dd:3e:55:2b:
b9:33:09:05:25:6f:d3:76:7f:55:b2:fd:cd:41:37:d7:71:ba:
04:e8:81:31:aa:70:70:4e:ec:22:00:54:f5:ce:cb:47:85:71:
ec:7c:87:a2:2b:a6:03:63:21:00:98:17:30:eb:28:ff:7b:b7:
13:7f:fb:da:67:ac:d3:e8:d8:d2:5f:f6:4b:90:ec:10:37:38:
b3:81:bc:cc:cd:94:08:4b:44:f4:60:a8:28:c8:50:61:85:c8:
8d:00:55:43:84:e4:7e:f1:0f:d6:59:53:bb:01:a4:a4:56:63:
f2:2e:e5:fb:4b:23:24:78:46:b2:8d:a8:18:d6:d4:28:0e:b6:
70:17:85:fc:b3:25:a4:7a:16:b2:ab:4f:9d:af:91:71:95:b3:
05:f0:46:c8:1e:5c:1a:83:0b:ad:49:4d:93:95:f0:c5:5b:06:
75:0d:9d:a1:77:15:16:12:a3:27:51:76:db:7d:65:e8:46:cf:
c9:8a:0e:8b:00:6e:8a:9a:1d:79:e6:24:06:de:54:90:83:15:
5a:32:e7:bf:9a:c9:0b:05:90:51:4c:22:76:a1:2f:f6:87:52:
3a:48:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:44:26 2026 by rpki-client