Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
File: HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft (raw, json)
Hash identifier: Sh0PSB6r8ghFynyYjL194KRUJxlw6SBlp8XVj/O+/eU=
Subject key identifier: 23:DD:AA:6D:1B:72:6D:82:60:05:3C:43:29:80:4A:01:1D:68:9B:31
Authority key identifier: 1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
Certificate issuer: /CN=1c0784053fc866a556234548119416d1bd716980
Certificate serial: 01A0CC6C56A9C951B80A24E459DA4E0DE617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
Manifest number: D4
Signing time: Wed 23 Sep 2026 04:00:47 +0000
Manifest this update: Wed 23 Sep 2026 04:00:47 +0000
Manifest next update: Thu 24 Sep 2026 04:00:47 +0000
Files and hashes: 1: HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl (hash: 6SFnNJwdZu5TMhOinNDeeyCJ6QOR8iFhk9l2RtHRtL0=)
2: Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa (hash: UNgTl0HhH/SBGa8ko1wMjVaJ6tBhwBkcw/5zum00v8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:56:a9:c9:51:b8:0a:24:e4:59:da:4e:0d:e6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0784053fc866a556234548119416d1bd716980
Validity
Not Before: Sep 23 04:00:47 2026 GMT
Not After : Sep 24 04:00:47 2026 GMT
Subject: CN=23ddaa6d1b726d8260053c4329804a011d689b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:09:2b:e1:02:2c:a9:70:06:b0:ee:20:d1:
63:19:9d:3e:ac:0b:39:4c:61:15:ec:19:9e:3d:08:
ef:a5:f6:f7:47:be:1b:25:5e:2d:74:fa:c5:df:28:
91:8d:1b:f4:50:c4:00:f4:71:c4:b2:ac:fc:be:16:
e6:b4:30:6e:56:d6:1d:e1:52:a4:67:6d:63:bf:f9:
88:2a:fe:bb:2c:7c:95:ed:f0:55:d1:b7:ec:83:8e:
be:55:b9:42:78:a7:eb:8c:a3:4d:71:54:71:d6:0a:
83:b1:04:10:16:97:5a:0b:ed:d3:d7:74:52:03:48:
d1:7b:00:78:d1:c3:cb:ad:76:ca:7b:76:eb:e0:06:
d0:3a:7a:90:ed:c1:b8:bd:ae:63:89:76:ba:d9:43:
eb:15:84:6e:27:d5:12:31:9f:de:d8:ec:4d:41:7c:
ab:c0:73:50:7b:48:30:e4:f5:2a:34:50:0f:76:bf:
c1:ba:56:41:e9:60:69:61:ad:19:9f:7c:58:20:a4:
69:d8:6d:2f:81:b1:ca:15:02:24:5f:a7:da:d7:21:
25:69:0c:e0:58:1d:0c:46:bd:10:d5:89:d8:93:46:
76:b4:7b:17:2a:43:c5:c7:d4:70:75:28:cb:79:53:
b5:e9:e9:1a:5b:9b:61:c1:0a:da:d7:f2:df:be:c2:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:AA:6D:1B:72:6D:82:60:05:3C:43:29:80:4A:01:1D:68:9B:31
X509v3 Authority Key Identifier:
keyid:1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:2a:b8:a5:f6:96:52:48:28:ce:72:cd:49:56:55:c9:8e:
18:1b:04:c0:9e:5f:4a:96:d0:a9:d7:cb:b2:c0:b7:ba:6c:36:
25:fd:47:07:46:c1:7e:fb:5c:33:83:58:0e:f3:ff:0a:f3:5f:
13:c9:a1:c9:2b:2a:0c:54:06:4a:e0:40:a8:5d:fb:d3:cf:9a:
d0:3f:f7:f6:26:ce:e7:bb:37:40:a9:2d:74:90:8d:8f:9f:8e:
8e:5f:d7:d3:6a:24:ac:99:f6:f5:58:39:8c:2f:54:f2:20:b6:
f6:e0:f1:d5:c6:17:fc:b3:a1:06:46:1c:4b:76:36:5f:6c:02:
a5:c5:a5:35:b9:39:0a:a3:90:85:87:3e:d8:0b:c9:1f:16:ea:
58:37:f9:44:0d:c2:18:57:d3:de:b5:60:49:1f:e1:db:14:a9:
9b:74:fe:1f:1e:e5:ba:29:db:47:6a:3c:23:f0:c2:54:46:1a:
14:c7:0d:3c:e1:c7:c0:aa:d3:05:44:58:64:77:95:8e:37:c9:
fa:85:31:e7:ec:55:19:97:ed:4f:98:3f:c4:b2:82:9b:76:6c:
ff:29:38:74:8f:b5:f7:0e:8f:37:2b:6b:4e:5d:c9:2a:ee:5f:
83:ec:3b:81:21:86:4d:68:c9:99:b9:11:77:e3:69:66:48:f6:
c6:60:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:57:10 2026 by rpki-client