Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: E8vuVAn7ldjFeshFpMpcj/Jr1/EcvvB8iLfjC+gW81A=
Subject key identifier: DF:74:57:06:30:CB:35:9A:2D:AB:D9:3E:D8:66:AD:B4:37:4C:C3:74
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 01A1347F06D1F386314975EBF1020284DAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 11D6
Signing time: Tue 13 Oct 2026 09:01:42 +0000
Manifest this update: Tue 13 Oct 2026 09:01:42 +0000
Manifest next update: Wed 14 Oct 2026 09:01:42 +0000
Files and hashes: 1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: pc9Hv5+7LcnDyVO7r8zB/ry9FV5ijb3DUMrkmKJezRc=)
2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7f:06:d1:f3:86:31:49:75:eb:f1:02:02:84:da:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Oct 13 09:01:42 2026 GMT
Not After : Oct 14 09:01:42 2026 GMT
Subject: CN=df74570630cb359a2dabd93ed866adb4374cc374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:69:98:79:95:a2:2f:72:51:32:c5:0f:da:
cd:28:2e:95:6f:7a:34:6e:f6:ee:1f:d8:2d:1f:ed:
b5:5e:6a:78:a1:e5:ed:48:e9:68:33:68:44:ae:14:
cf:91:57:91:de:67:55:7d:e2:86:40:9b:cf:d8:70:
25:6d:81:8f:f7:8a:c2:e3:62:ee:f1:a5:87:7b:ad:
29:7f:6a:52:f4:57:a4:61:28:71:29:91:03:aa:3b:
d4:e1:3d:48:bb:86:61:18:00:2d:3b:5f:7c:df:89:
53:d8:13:59:af:8d:8a:c7:b9:31:fc:f9:83:34:e3:
b9:eb:61:5a:8f:ee:8e:f2:5c:82:3f:f6:41:f2:70:
4d:66:4d:9f:39:61:c3:1c:03:0c:10:98:ef:38:da:
df:8d:31:50:18:7c:46:b7:ec:57:5e:36:de:18:63:
3a:5c:29:0a:48:d1:be:2b:0e:52:e9:46:de:37:1e:
b4:49:20:8d:a4:b0:da:42:f5:9d:77:06:71:7d:3b:
78:8b:02:31:9d:ef:59:78:3a:de:5d:be:75:98:2c:
83:a6:6a:57:57:be:38:91:dd:e1:f2:af:a1:ef:56:
16:1b:25:8f:fa:6d:13:79:81:8b:cc:ed:ee:55:47:
dd:0f:db:18:c9:41:ec:fe:90:c1:39:64:75:89:25:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:57:06:30:CB:35:9A:2D:AB:D9:3E:D8:66:AD:B4:37:4C:C3:74
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d2:f7:b9:5a:28:a1:93:c0:f7:e8:a9:e0:2a:20:b3:5a:1d:
b2:66:c0:01:71:1e:22:84:b7:23:eb:fa:2a:d6:45:69:5a:7f:
dc:2f:df:b8:32:4e:2f:6e:a8:3e:fc:67:22:71:2d:9e:e7:a8:
a5:a8:5b:bd:84:5b:bd:99:f9:77:cc:d5:49:76:3b:63:5f:3c:
64:31:ee:fc:74:05:b8:c1:86:8c:f1:e4:70:e5:36:98:a5:5f:
d8:42:95:f4:8d:0c:e6:16:e7:d2:74:b0:c7:79:e6:65:dd:4b:
8c:65:0e:3f:61:1a:a3:1f:f1:ec:13:3f:f0:ed:e0:33:83:86:
93:0c:c6:7f:70:b4:59:86:51:c3:91:5d:18:3e:db:5e:99:d0:
21:ed:57:e1:b4:67:30:9d:9f:7b:7e:80:7a:9a:9e:69:6b:13:
f7:89:5b:bb:fa:de:3d:68:66:99:cb:65:0b:81:f5:52:f5:4b:
fb:8c:0b:23:6d:4f:b7:a6:42:2c:f3:81:70:fc:4a:4f:85:32:
1f:84:3d:fd:07:fd:4a:9e:18:da:bb:51:5d:ca:5e:41:80:b2:
e9:98:63:a0:15:3c:a1:dd:39:05:f5:e4:ba:cd:44:c5:60:5a:
5c:12:55:2c:80:ac:45:39:8c:94:8b:d2:5f:e9:1d:3c:77:2f:
99:23:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:09:34 2026 by rpki-client