Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
File: HaNLZnNvDOLx8BzL9o-POcWTsUo.mft (raw, json)
Hash identifier: eSzE8bveouxTwIBtrr0sTf+EfpbocEVwGz8O5rZHyhU=
Subject key identifier: 59:EF:E3:2B:76:26:73:4C:66:AE:BF:37:02:AD:46:35:DD:43:FC:48
Authority key identifier: 1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
Certificate issuer: /CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Certificate serial: 01A0C9A1B7E7D65AFEA660263B0BB28D6837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
Manifest number: 6B
Signing time: Tue 22 Sep 2026 15:00:13 +0000
Manifest this update: Tue 22 Sep 2026 15:00:13 +0000
Manifest next update: Wed 23 Sep 2026 15:00:13 +0000
Files and hashes: 1: HaNLZnNvDOLx8BzL9o-POcWTsUo.crl (hash: KUHsWo/EJj7igZJaPb9CHEdQfg/8G5D8lxtUejgsEaM=)
2: HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa (hash: TluwUtP/kelzS2bBdGIVZTA/Ws/ztuwX5Nxy5OsnNB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:b7:e7:d6:5a:fe:a6:60:26:3b:0b:b2:8d:68:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Validity
Not Before: Sep 22 15:00:13 2026 GMT
Not After : Sep 23 15:00:13 2026 GMT
Subject: CN=59efe32b7626734c66aebf3702ad4635dd43fc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:89:07:97:aa:5a:6e:d0:4d:65:e2:0b:07:
3d:a4:29:7b:29:83:d8:6a:ff:ae:20:b8:6c:72:ce:
92:c2:c4:f8:ac:b7:0d:b0:a7:a3:ba:0f:2a:51:28:
e1:ac:d8:42:78:e6:5c:b9:1c:f0:7d:e6:7a:d8:88:
7c:5d:19:4e:b2:c1:26:66:04:8d:e7:da:51:e5:12:
db:d1:d3:e4:52:cf:27:79:df:6a:96:82:a6:d9:8c:
6f:54:c7:7e:7e:38:46:59:66:9b:8b:1f:2b:2a:7e:
63:4d:97:a8:ed:c5:66:b6:a3:63:b6:fd:d1:9d:e2:
1c:52:4b:30:46:30:86:8e:d5:39:e0:3e:01:d9:78:
71:c4:02:40:49:2c:ab:66:4c:b4:94:4f:77:a4:80:
36:e1:59:7d:39:de:40:48:ec:4a:42:1e:14:5c:3e:
34:39:39:93:e8:04:66:62:52:99:66:84:d8:94:48:
91:92:a1:27:e3:ae:70:65:6e:a8:42:1e:7d:93:ff:
f8:f0:ec:ab:b9:c3:13:2e:c4:1f:2e:0f:a3:e9:47:
03:be:67:14:94:4b:7f:ca:ee:b8:2b:30:73:f0:94:
0d:63:60:08:2e:d7:20:72:7c:f0:70:ac:ce:d9:16:
d4:08:26:0b:37:a9:57:d4:a2:de:cf:2f:e7:a8:20:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:E3:2B:76:26:73:4C:66:AE:BF:37:02:AD:46:35:DD:43:FC:48
X509v3 Authority Key Identifier:
keyid:1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6b:93:9e:92:de:77:3f:b6:c5:50:2a:80:9f:f2:25:03:db:
f1:88:4b:42:d9:8e:44:b8:d2:7b:96:48:d0:a6:f2:ff:fb:43:
c4:b7:32:f2:2e:ac:50:2c:db:60:62:b6:e5:8c:ee:1e:ba:76:
00:31:e2:78:69:60:97:a7:5e:21:5e:49:79:73:be:22:21:bb:
e4:13:e2:fe:19:56:3f:da:02:6d:b5:88:07:8e:01:32:f8:55:
4e:cc:19:55:18:78:35:15:b3:ab:ac:67:6a:9b:54:e8:91:02:
dc:79:ab:cf:2a:c9:bc:09:9a:c7:d8:0d:cc:b8:40:c7:07:db:
dc:6d:f3:3e:d3:2c:14:19:06:18:87:fe:12:fe:d8:23:29:bd:
50:0b:0e:89:ca:65:98:79:a4:1b:cf:45:43:f7:50:e6:11:fa:
35:27:d2:53:6c:db:0d:fa:43:4e:57:f7:9e:c0:1e:ff:5a:dd:
b5:d5:93:3b:50:48:a3:7c:16:ce:6b:91:e1:8c:5a:f9:9c:58:
83:c3:fd:0d:47:ec:f0:9d:9c:df:4d:f9:32:16:2a:6e:b5:8b:
49:cd:46:af:ac:b9:0b:66:38:76:35:47:e0:69:c3:1d:ab:ad:
ca:6f:62:cc:e5:63:25:1b:a9:8b:d5:0a:43:e1:c4:2a:12:ee:
5c:d8:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:12 2026 by rpki-client