Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: u/TfE8uAj+AAeFXRI+cYwoKKZ2k0dWAnYA62ZOsMj4w=
Subject key identifier: F1:57:82:CB:00:E9:4D:CE:D9:FA:D3:F2:B6:92:4B:1D:B7:AE:07:14
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 01A12CFC1DEB6CEA27CCA001C815147266FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 22:01:22 +0000
Manifest this update: Sun 11 Oct 2026 22:01:22 +0000
Manifest next update: Mon 12 Oct 2026 22:01:22 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: n9sm07jmtqM+3wbHkQ6mWW+x7M1TiFqJSA2J8otMbSk=)
2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fc:1d:eb:6c:ea:27:cc:a0:01:c8:15:14:72:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Oct 11 22:01:22 2026 GMT
Not After : Oct 12 22:01:22 2026 GMT
Subject: CN=f15782cb00e94dced9fad3f2b6924b1db7ae0714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:71:d5:42:1b:73:79:6f:b1:a3:66:81:3f:
29:1c:75:c4:3e:00:77:db:18:a4:b8:70:7b:ae:04:
23:bd:09:95:f5:e2:3c:cf:4d:fc:6e:06:ef:55:85:
3b:84:da:23:5c:14:b1:a9:5a:a5:25:74:10:26:f5:
b8:d9:6b:a1:bd:9b:fc:35:c9:b5:8d:5f:34:1b:f2:
08:2e:b6:a7:bb:9e:38:6d:a6:22:4c:0b:ed:3d:1a:
23:8c:b6:5f:4e:a2:9b:cc:a2:96:b8:56:d0:82:01:
64:42:e9:00:e4:91:b7:f7:52:cf:c0:84:fe:6c:29:
28:a1:65:95:fd:01:89:86:77:ba:e8:fd:ea:43:ed:
cd:95:df:41:23:1f:20:d9:94:85:11:8a:44:fa:02:
6c:ff:a1:e8:ef:23:d4:e7:99:64:90:fe:cb:7c:48:
d4:77:83:30:11:f7:99:f0:e8:e1:89:2f:80:f2:df:
16:23:8a:ca:9c:dc:6c:55:f3:60:99:6c:e7:9f:0d:
e5:a2:de:25:d7:bf:af:eb:9e:f4:ae:cd:99:31:b7:
a9:4e:80:d4:8c:8a:fa:67:d3:2d:90:43:b8:fd:4b:
d8:ae:c3:aa:31:25:8c:2b:c0:20:89:9f:a9:93:52:
da:46:b2:cf:71:87:04:0d:90:28:0b:bc:9b:16:ba:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:82:CB:00:E9:4D:CE:D9:FA:D3:F2:B6:92:4B:1D:B7:AE:07:14
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e4:20:e1:15:28:81:0e:b0:70:79:f5:e9:30:c3:75:1d:5a:
b4:b2:12:3d:4e:ac:58:3b:1f:f7:c9:25:6f:c8:fb:ca:22:db:
44:ec:64:a3:28:6c:d8:5e:87:dd:e8:79:71:1d:70:94:a3:49:
aa:91:8f:d3:3b:51:98:c8:09:e5:e7:24:83:7a:2c:11:19:f7:
7b:e8:dd:29:40:79:b1:e8:78:0e:96:31:98:33:59:7b:cf:4c:
70:fe:55:25:3a:fd:35:b5:b3:b0:c4:2c:f8:ac:7f:9e:13:58:
34:48:fb:8c:fa:2f:35:cd:a3:de:d7:87:4c:31:ac:ff:50:14:
3f:a5:cd:24:d2:cc:a9:1b:6a:33:d7:b8:3b:73:ef:f9:95:61:
dc:05:4f:41:46:6a:dc:3c:72:f5:75:81:c1:e6:6a:f5:a1:87:
e9:8d:26:91:79:01:da:54:f4:6f:b7:f7:d2:58:a7:f2:85:c4:
76:5e:90:61:a8:bb:36:f3:58:de:f3:88:b1:44:54:77:65:b1:
46:b8:c8:7a:44:15:a4:22:2c:7c:99:33:3f:b1:7f:f3:5c:a1:
89:91:ad:f1:15:8b:0f:2b:47:47:df:bc:c4:3b:8e:df:26:35:
bb:26:b5:dd:43:af:36:a3:28:e1:51:80:d6:bc:ee:7e:6d:5d:
3a:cc:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:04:16 2026 by rpki-client