Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: loUvpowXw9sKdvAr0nf+BwdLGBCzUfy4Urtp1ksHim8=
Subject key identifier: 4A:4A:38:A3:BA:5F:2D:13:5B:87:90:A7:43:1B:64:D9:E6:39:37:2A
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 01A123F93B35CA788D8C79C8920531D0E16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: 019E
Signing time: Sat 10 Oct 2026 04:01:38 +0000
Manifest this update: Sat 10 Oct 2026 04:01:38 +0000
Manifest next update: Sun 11 Oct 2026 04:01:38 +0000
Files and hashes: 1: LrwsLYGATYrWrHHLDkqfghD5lvE.asa (hash: xSUEF8kVB96PvQCwAkm6dj5euHLOM2XZx7Zr4kPkTDE=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: voFMwiBhsmRLf6rXUwHny7ayuTNd4TRxvLpOvsPbwPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f9:3b:35:ca:78:8d:8c:79:c8:92:05:31:d0:e1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: Oct 10 04:01:38 2026 GMT
Not After : Oct 11 04:01:38 2026 GMT
Subject: CN=4a4a38a3ba5f2d135b8790a7431b64d9e639372a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:ae:f7:ea:b8:bf:97:4e:32:13:de:53:26:
ec:73:db:d5:7f:f4:99:43:f8:dd:57:db:93:b6:32:
1d:46:fe:a1:ee:dd:e9:a1:e0:70:06:68:45:5f:00:
38:1d:c1:84:98:23:8d:c1:d2:b6:87:4f:88:ab:6f:
26:8a:4f:80:15:22:f8:ec:7b:9f:ac:60:4b:4b:60:
eb:75:46:52:bd:b0:1e:b3:4b:3f:f0:1e:e0:f3:f3:
36:d7:2a:50:b9:0d:0a:fa:14:82:97:62:ac:52:3a:
71:69:b5:20:e6:48:a1:0e:8d:24:fc:6c:7e:87:fb:
e4:38:8f:9c:6d:a2:c5:21:4c:34:9f:7a:c2:20:c0:
88:79:d3:79:44:83:70:16:15:04:e0:83:1e:5b:a0:
f6:ae:97:e0:b3:de:f7:d4:d4:17:df:6d:37:32:f3:
b8:e3:38:7f:27:c2:77:47:28:7b:fa:c4:c4:26:23:
d1:64:14:e7:2d:59:0b:ad:25:19:39:f2:b7:22:b3:
09:30:15:7f:b1:76:d6:b6:9c:50:fa:fd:f0:87:dc:
dc:1a:97:1a:71:fe:e3:b8:b0:26:e2:96:46:a1:77:
37:1c:f3:2a:03:eb:88:2d:83:ed:fa:ce:bb:bf:c2:
e1:dd:33:f8:4c:c5:a9:7c:e2:c2:a8:80:04:46:8f:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:38:A3:BA:5F:2D:13:5B:87:90:A7:43:1B:64:D9:E6:39:37:2A
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:85:e2:45:62:42:cd:31:a8:29:18:50:ea:50:4a:69:81:76:
45:d8:a7:4c:94:cd:bb:51:d5:e4:c0:bc:08:cf:35:dc:8f:1d:
24:46:ea:e1:be:68:31:81:ea:56:59:85:d6:4c:f7:f3:f8:39:
19:0f:5b:b8:81:14:de:ca:d9:84:3d:ba:9b:2c:67:61:d1:81:
62:0e:c5:13:2f:a0:a3:89:2b:8b:70:3c:3d:a8:7a:bf:b6:ca:
5e:fa:02:d7:24:6a:ec:a6:92:5e:68:87:9b:fe:97:16:1a:30:
bf:65:0d:e7:a8:e6:a1:fc:85:eb:a8:e4:34:5c:71:a8:10:49:
24:cb:b6:dc:e8:77:ab:f1:0c:41:bf:a3:9c:f4:b4:f4:cd:2a:
d1:8d:84:20:2a:aa:e2:f3:86:1f:12:52:cb:69:de:6d:df:dc:
69:21:2c:10:68:2b:36:2e:85:01:34:bf:c3:de:b5:d2:c1:fb:
a9:d7:04:5a:04:a6:ca:67:ed:9f:39:f4:92:ff:65:c2:6a:8a:
c5:fa:29:ff:1e:e7:ec:11:3d:b0:f5:8d:91:80:ed:e2:ec:17:
b5:df:2b:f1:c0:a2:cb:29:fc:31:90:47:02:f8:62:26:fc:f9:
c1:b1:90:bb:32:e6:2b:15:e3:fe:53:db:60:a2:f1:5c:34:91:
71:5e:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:27:22 2026 by rpki-client