Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: FLWkfXBJgd3q5WqGD3VqPbNpBmLvqwh22POm468TxGA=
Subject key identifier: EA:05:8D:C9:55:F7:F0:E8:E7:FC:68:FE:88:95:1C:FC:EC:DB:12:5B
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 01A10A38B7C20DBB34F4B54EC30B32CC1CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 046B
Signing time: Mon 05 Oct 2026 04:00:51 +0000
Manifest this update: Mon 05 Oct 2026 04:00:51 +0000
Manifest next update: Tue 06 Oct 2026 04:00:51 +0000
Files and hashes: 1: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (hash: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: YDCB76otM/QdjEVzLTCMxZlw7yil8Wry+YD/7J+5Ppw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:38:b7:c2:0d:bb:34:f4:b5:4e:c3:0b:32:cc:1c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Oct 5 04:00:51 2026 GMT
Not After : Oct 6 04:00:51 2026 GMT
Subject: CN=ea058dc955f7f0e8e7fc68fe88951cfcecdb125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:30:24:ec:a5:59:af:23:3b:97:fc:d7:eb:
d8:e4:bb:57:fa:7f:53:d6:5f:03:05:3a:ad:f9:1f:
eb:d0:f8:51:3a:f3:b8:da:67:a0:bb:d9:84:1f:eb:
78:d5:0e:f6:d8:12:04:af:fd:b3:99:83:59:e0:1c:
a7:f9:5e:2f:f1:66:0b:6e:80:fe:68:7a:56:04:86:
dd:61:ee:01:46:1d:aa:b9:2d:2e:64:85:3d:94:4c:
dc:2a:35:a2:02:c3:b7:cf:31:3d:e2:15:dd:bc:88:
5d:94:2d:24:4c:c2:87:0f:55:6a:f1:0f:18:df:c7:
e6:7a:32:a4:fd:23:85:19:dd:9c:55:68:bd:73:5f:
51:59:c9:35:d4:e7:06:a9:f7:b1:9c:2e:16:c5:29:
3d:87:f8:d1:b3:66:c4:19:10:db:5e:85:3d:e3:87:
3a:52:1f:18:f3:c9:8f:3f:96:c5:ed:b8:d1:05:dd:
aa:2f:bc:fa:6d:8b:cc:a4:e3:0d:a4:49:e7:44:2e:
dd:08:fe:4a:89:97:14:80:fd:5c:3f:2a:37:63:ef:
5f:57:4c:3e:a4:b0:f1:b8:b0:26:6c:02:af:ed:ec:
eb:64:28:df:a2:5e:f6:41:0e:31:61:56:a6:3e:6c:
32:f1:dc:bc:5c:3f:9a:1a:5c:e8:52:41:5b:31:2f:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:05:8D:C9:55:F7:F0:E8:E7:FC:68:FE:88:95:1C:FC:EC:DB:12:5B
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:af:4e:c9:cb:63:aa:db:86:9e:4d:d0:3f:a7:8e:81:f0:de:
5d:b2:e8:b1:1b:ae:53:b9:17:2d:90:10:14:30:64:9f:9e:de:
70:30:e8:87:83:25:7b:a9:eb:b2:38:6b:70:fc:ea:90:55:c2:
27:11:84:e7:71:54:dc:64:2b:88:98:7f:91:6b:fc:97:1a:e0:
3b:90:fe:0e:69:1b:70:bf:79:37:9e:92:f1:76:f3:9d:be:19:
38:67:de:2f:f5:ba:53:82:3c:3b:f5:bd:77:ed:da:7a:b4:7b:
3e:c1:fd:4b:72:80:02:6f:39:1b:0d:99:12:1c:ad:1c:44:94:
83:b5:df:c2:ff:d6:9e:b4:46:b7:00:d3:08:90:8f:5f:5e:38:
6a:af:e1:20:fb:28:57:2b:9b:1b:a5:92:d7:3b:61:64:da:0b:
83:17:ec:2c:07:d2:f3:3b:72:15:b8:26:e1:26:b8:c8:e4:b9:
ab:06:f0:a8:8c:4a:3f:4a:07:65:3f:be:4a:91:21:70:66:d5:
c9:0a:55:da:87:8f:d3:57:31:5e:4e:3e:a4:a0:a2:be:f8:d6:
59:cb:68:2d:e7:7a:06:54:77:6e:85:4a:e0:ef:40:0e:dd:13:
69:29:78:a6:75:b5:89:88:d9:af:09:5c:29:7c:4a:6c:ad:f7:
34:84:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:33:21 2026 by rpki-client