Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: uKOykHbw6Ow8hONAZLP3djDWT9c9ELXnCZo77eFaCA8=
Subject key identifier: DF:CE:86:39:8D:44:E5:CD:39:20:12:41:05:D9:46:94:F8:86:EE:05
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 01A0CD483CC2BACAC6F75483833CC989C5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0F2E
Signing time: Wed 23 Sep 2026 08:00:58 +0000
Manifest this update: Wed 23 Sep 2026 08:00:58 +0000
Manifest next update: Thu 24 Sep 2026 08:00:58 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: S9LRlNngkwVuiyWoAEasPK5BcLbJ/RMc2/FtMVKjsNg=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:3c:c2:ba:ca:c6:f7:54:83:83:3c:c9:89:c5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Sep 23 08:00:58 2026 GMT
Not After : Sep 24 08:00:58 2026 GMT
Subject: CN=dfce86398d44e5cd3920124105d94694f886ee05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:3b:8d:f3:c0:ec:3c:af:dc:98:11:12:56:
af:f0:5e:b1:19:94:7f:10:d0:c0:f4:c7:47:80:b8:
bd:14:19:53:b0:e6:3b:47:7b:30:a1:6e:ee:72:4c:
11:22:6b:88:99:47:21:89:66:13:13:d1:a3:6f:84:
ef:17:d5:41:a5:67:f3:85:8f:0d:81:4a:6b:0b:4d:
69:79:f7:91:51:25:c4:47:c1:63:d3:0d:44:b8:92:
91:af:3b:f1:66:06:0b:40:95:9a:9a:14:11:c1:f9:
ab:83:9c:dc:4e:fd:11:65:41:36:18:dd:44:a3:92:
70:8f:19:5b:01:c5:15:d8:5a:a2:e4:f8:7e:f6:8f:
0f:90:af:f0:ad:fa:1e:a8:b0:5d:97:c4:dc:80:d4:
e1:99:d6:da:51:ef:ba:ec:ac:c9:51:7f:61:1a:0e:
c9:d2:6d:bb:b3:ba:e5:a1:d9:74:7f:48:ff:d6:52:
ae:cf:36:48:7c:eb:db:0b:3f:bb:5d:05:3c:87:8b:
f3:72:56:6c:07:e2:a4:1f:50:4f:ba:08:64:2e:2b:
51:ae:cc:47:fc:57:20:1c:39:c1:cd:c2:76:67:77:
7a:d9:5c:08:5c:e5:cf:e7:ac:46:de:c3:20:1a:6c:
71:5e:73:20:7e:56:2c:35:1b:b9:97:67:98:ae:98:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:86:39:8D:44:E5:CD:39:20:12:41:05:D9:46:94:F8:86:EE:05
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:24:b3:a9:04:cf:82:20:03:3c:c0:d8:55:b6:cc:80:13:74:
87:9d:4f:bc:86:62:e7:bb:f5:16:8d:16:2d:12:b1:89:d2:40:
5b:d5:95:e6:c5:d4:8b:c5:df:22:13:3d:78:ae:b1:19:2e:83:
f7:96:29:c7:0a:65:82:6d:e3:9c:23:b1:e2:5f:08:11:eb:97:
13:af:38:71:09:0f:a9:4f:1d:d3:f3:22:df:54:3b:86:7e:46:
55:38:9f:ef:aa:cb:76:cc:1f:e6:6e:85:df:99:30:58:c8:47:
89:60:f9:aa:2e:9c:a7:81:42:d4:dd:b8:22:f2:38:af:1c:86:
82:87:da:ad:b1:39:19:97:9c:81:2e:82:60:e6:00:ee:c6:d3:
b7:f4:03:04:66:b8:3b:8b:7a:a8:09:03:f2:6b:3b:b6:1a:65:
6a:4f:33:10:6c:d6:9d:c2:8e:f6:dc:e9:01:eb:f7:8f:a2:68:
d8:c8:e7:cf:34:98:0c:89:41:9d:95:9f:07:95:c0:ab:1d:7c:
2b:32:12:db:27:a2:fe:a8:56:1a:02:95:b1:40:c4:5c:93:7b:
93:15:f1:e5:17:93:94:16:2d:63:7f:f0:9b:f9:01:17:26:62:
60:c2:32:e2:5e:a7:a9:6e:f9:ea:58:ae:1b:de:f8:ec:95:cc:
d7:f5:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:01:24 2026 by rpki-client