Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
File: HIomETq5OUUuR1b21T9XcRRQYpA.mft (raw, json)
Hash identifier: Ye1qUNDHqfiXTEi/wg5nlTKSQjnCKKmA5kMp3gkSbmk=
Subject key identifier: 22:FB:00:74:5E:2D:B3:28:05:2A:68:4C:C3:F0:98:93:1C:54:D8:53
Authority key identifier: 1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
Certificate issuer: /CN=1c8a26113ab939452e4756f6d53f577114506290
Certificate serial: 01A130A28D7B116E1DE26AA12DA9F92531EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
Manifest number: 01DC
Signing time: Mon 12 Oct 2026 15:02:01 +0000
Manifest this update: Mon 12 Oct 2026 15:02:01 +0000
Manifest next update: Tue 13 Oct 2026 15:02:01 +0000
Files and hashes: 1: HIomETq5OUUuR1b21T9XcRRQYpA.crl (hash: fE+h74KuXxs+fjoIYvQ9tmJgNpXDpF7LQxTBudkERzA=)
2: kfHOguahwmoMsyRaQw8pUo9cNfU.roa (hash: 9xDfD3+rs0UdeCP8bqBepaOJdTPshbSNDRJXUgbGRxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:8d:7b:11:6e:1d:e2:6a:a1:2d:a9:f9:25:31:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8a26113ab939452e4756f6d53f577114506290
Validity
Not Before: Oct 12 15:02:01 2026 GMT
Not After : Oct 13 15:02:01 2026 GMT
Subject: CN=22fb00745e2db328052a684cc3f098931c54d853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:f4:73:51:fc:0a:55:eb:a5:2d:f5:3f:9e:
40:48:a4:e4:80:56:85:b5:90:45:25:01:84:7b:9e:
9b:97:07:3e:3d:b5:47:92:2c:82:84:9c:46:30:fd:
d9:b7:e8:6a:1f:7f:46:74:a5:52:b7:a7:04:95:91:
81:8e:5a:a1:86:e8:89:83:ee:ed:af:f8:a7:68:51:
de:67:3b:6f:45:57:58:0b:11:1f:b4:6f:21:3f:08:
35:29:33:a1:1e:ac:b8:77:81:08:b8:9c:77:53:7c:
76:0a:01:ef:fa:23:f0:f6:59:7a:11:85:ac:28:c8:
5b:8d:de:8f:57:f7:10:d9:93:31:88:04:df:c7:5b:
5a:ff:79:db:ca:39:bc:ed:9c:90:28:f5:fa:55:4f:
4e:ac:2c:a2:96:dd:2d:63:a8:55:d4:40:6c:f8:48:
8b:85:b6:13:3e:af:58:8f:9e:2b:75:fe:c4:9f:7c:
5d:ae:37:a8:60:5b:1a:d1:c2:82:ea:c7:f0:7e:ab:
f4:1b:6e:ff:a1:f3:cf:97:e1:ef:ed:4b:9d:7a:b4:
31:66:0a:1c:cd:44:00:a0:fc:e3:23:47:3d:2b:76:
83:16:0b:a2:ac:f8:98:2b:fc:ff:7f:63:dc:58:e5:
b3:55:be:a7:92:eb:e1:9f:46:93:c4:3c:eb:ff:fc:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:00:74:5E:2D:B3:28:05:2A:68:4C:C3:F0:98:93:1C:54:D8:53
X509v3 Authority Key Identifier:
keyid:1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2b:e9:0a:cc:60:b5:f0:30:0a:8d:4a:e4:ce:50:cb:64:f2:
60:0f:84:3b:26:a8:d1:ae:3d:63:02:c6:78:9b:9f:db:f0:62:
a9:07:32:69:dc:8d:7f:5e:0d:62:3c:6d:d9:d6:0b:f2:b4:67:
24:08:28:ab:bb:af:3b:29:d4:6c:b8:1d:0b:0e:0d:ad:90:a4:
13:7c:4b:30:fd:4a:fc:d4:70:fc:36:ed:0b:5e:0c:e9:47:34:
8a:25:48:62:0a:bc:00:cb:f9:70:8f:1c:a2:b8:64:9b:0b:e9:
88:3b:c3:79:b5:5c:ec:30:6d:a8:68:f8:b6:2d:24:2a:6b:70:
73:34:c6:57:c4:95:e8:c3:ee:7a:f4:04:c5:73:71:0f:4d:95:
97:4b:75:96:ea:bd:6b:82:9c:c9:a2:c4:78:5d:1d:1e:8e:bd:
3e:38:4e:d5:c7:a4:83:9f:a2:0a:d8:df:67:20:e5:08:32:1d:
8a:c2:01:38:e6:bc:c4:eb:d1:e9:92:f9:0c:34:1f:77:f8:04:
ad:a6:4b:cd:4e:4e:d3:03:49:4b:e1:02:0a:da:ea:c5:a1:a2:
55:41:8f:73:e9:fd:c5:b2:19:e1:33:75:77:fc:24:48:e4:bb:
74:84:ff:4f:7f:a0:bd:2b:18:69:d3:57:38:ac:37:5b:88:e7:
b1:f5:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:00:46 2026 by rpki-client