Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: 2P/8TVIKF79F0a/31QJiyu+DsAUGkbjzcX23H4p0zx8=
Subject key identifier: AD:42:C2:65:92:A3:91:D1:52:99:2F:6E:FF:0B:9E:17:A1:9D:89:5F
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 01A0C96ABFC507A50E885F182ED6FB62FC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 052E
Signing time: Tue 22 Sep 2026 14:00:11 +0000
Manifest this update: Tue 22 Sep 2026 14:00:11 +0000
Manifest next update: Wed 23 Sep 2026 14:00:11 +0000
Files and hashes: 1: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: uUlFr+1hbbwHsD+JPSE4Fxi2Rb68ezBQBPg90fFrg1A=)
2: Iz8b3PrjabpBHcwWEQbWKhXkfHo.asa (hash: xGEPwFDYxWFx/nhH+banTs8anVjbxYCKKFDmVtTVxqo=)
3: dnhblZcylCcbRj12R5ofCpHt7LU.roa (hash: oRIsfhmT16Rl0vK9L5ENWVnifqieHto224vdnp4iUt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:bf:c5:07:a5:0e:88:5f:18:2e:d6:fb:62:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Sep 22 14:00:11 2026 GMT
Not After : Sep 23 14:00:11 2026 GMT
Subject: CN=ad42c26592a391d152992f6eff0b9e17a19d895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:70:90:6b:eb:6a:20:bd:b0:f1:1a:7a:f9:
dc:ad:f0:cf:23:ae:5e:8e:6d:b0:fb:cc:76:95:96:
c8:8f:03:61:e6:4b:6a:1e:8a:db:c2:90:8b:e8:39:
b8:38:f7:42:03:1b:24:21:63:76:c0:66:36:ac:fa:
e2:ae:0e:7a:b7:d9:f2:93:48:84:f2:e7:ce:c4:07:
21:40:b3:89:dd:33:c7:b5:91:f7:02:b6:c1:72:18:
41:73:5c:ad:ad:24:0e:15:6c:98:d3:8d:c5:ad:00:
e5:9e:7d:dc:95:58:e1:e8:d5:ae:c1:2e:0c:f9:9c:
2b:57:e7:8c:40:b5:ca:9b:ac:3f:57:b8:06:a9:75:
0d:1b:61:8a:01:da:57:f7:56:2c:57:8c:42:5f:5a:
e4:05:9a:ac:21:87:bd:45:0d:ee:13:87:75:c8:70:
66:71:45:b3:ff:6d:b8:ca:d7:9a:4a:cc:2c:10:03:
1f:00:98:07:1e:a8:52:17:a9:96:59:03:d2:1c:0a:
d4:9e:f3:ff:e4:b0:bd:20:e5:99:88:af:50:cb:22:
1f:ba:b4:69:62:fd:73:57:1d:59:f5:d5:24:cb:cd:
43:77:56:da:82:8a:d5:f4:82:e3:ab:b5:7d:9e:a8:
25:6c:36:0b:35:29:ae:7e:fa:60:4a:a1:d3:8b:54:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:C2:65:92:A3:91:D1:52:99:2F:6E:FF:0B:9E:17:A1:9D:89:5F
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d0:04:ff:4f:9d:a5:94:8e:d4:a5:be:ad:4b:e7:f5:bf:0d:
5b:a9:04:59:95:48:a1:de:bd:55:81:74:3b:22:10:c8:92:7d:
6d:9c:ee:04:fa:90:72:d6:b9:ae:eb:5e:5d:aa:86:f7:0b:01:
ae:b3:5d:be:d0:e2:7c:f2:45:dd:91:82:95:26:67:38:8d:c4:
3a:b4:ff:3b:05:c9:d4:95:52:6f:a8:b1:4f:4d:c2:93:84:17:
3f:9e:e9:4c:ac:42:94:cf:00:27:45:6e:a9:1f:1b:fa:2f:12:
4c:cf:84:67:00:e6:9f:75:00:d5:9f:ac:01:44:80:c6:cb:24:
63:72:c0:91:67:00:de:57:0a:81:0d:a2:86:23:07:ee:30:0e:
4f:c4:1d:21:c0:e5:e9:60:07:ad:7d:d0:65:d8:29:42:8f:f4:
c6:4c:6b:f0:ba:18:cd:be:d0:61:45:67:3f:cb:5e:fd:54:21:
11:5a:e8:39:7c:89:24:1f:66:32:c6:76:ab:a9:8a:b7:5a:b7:
99:9a:8b:af:e3:8c:0d:c2:a3:13:a3:cd:dd:df:aa:6c:6a:31:
3d:e8:00:da:06:be:85:0b:2a:33:b0:eb:c4:65:be:fe:6f:a7:
9d:b5:60:a9:6f:9f:da:7d:14:52:74:c7:b4:30:f6:b8:bf:90:
5c:ae:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:01:02 2026 by rpki-client