Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
File: HIomETq5OUUuR1b21T9XcRRQYpA.mft (raw, json)
Hash identifier: 8JMHEL3dP0st910XJbD9M13GGmtsu3JcioBYD21zo70=
Subject key identifier: AC:76:30:F3:85:A2:EE:41:C2:53:FC:1F:4C:63:EA:FF:79:A8:1B:86
Authority key identifier: 1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
Certificate issuer: /CN=1c8a26113ab939452e4756f6d53f577114506290
Certificate serial: 019FAC76A7642D389F017AEE37FEC66FBFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
Manifest number: 0113
Signing time: Wed 29 Jul 2026 06:01:24 +0000
Manifest this update: Wed 29 Jul 2026 06:01:24 +0000
Manifest next update: Thu 30 Jul 2026 06:01:24 +0000
Files and hashes: 1: HIomETq5OUUuR1b21T9XcRRQYpA.crl (hash: RtZtGetaCR2N2Ysiabz+/sxarYBmb8AZRhcpq6VTMbU=)
2: kfHOguahwmoMsyRaQw8pUo9cNfU.roa (hash: 9xDfD3+rs0UdeCP8bqBepaOJdTPshbSNDRJXUgbGRxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:a7:64:2d:38:9f:01:7a:ee:37:fe:c6:6f:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8a26113ab939452e4756f6d53f577114506290
Validity
Not Before: Jul 29 06:01:24 2026 GMT
Not After : Jul 30 06:01:24 2026 GMT
Subject: CN=ac7630f385a2ee41c253fc1f4c63eaff79a81b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:fa:b5:cf:f1:15:c2:62:ee:6c:97:c8:06:
36:32:7b:16:d1:81:cb:fd:a9:99:3f:da:be:59:18:
6b:74:7d:28:8b:98:3a:f2:9b:d4:44:e9:19:2e:ae:
1e:70:ad:f0:fa:14:09:dc:fa:d9:18:fd:18:ae:c6:
1b:47:0f:78:df:32:a0:d0:cc:7d:b1:b2:03:ec:0b:
6f:38:f7:25:01:1a:e3:10:b2:4e:23:22:67:5d:e8:
63:b1:d5:5b:46:89:7f:4a:07:31:5f:2c:a4:3b:ed:
2f:08:74:4b:0b:59:ac:0a:3d:f9:0a:1c:9d:d5:b3:
e1:6b:ec:ff:e6:de:de:cd:09:5e:5a:1a:cc:c0:e6:
69:67:84:9a:89:04:4f:30:c0:5b:17:48:6a:2c:e1:
38:45:04:42:eb:f1:d9:2e:5a:26:f3:4e:c0:ea:fb:
60:8f:02:44:f8:d7:7a:8e:2c:44:8a:c3:ee:7b:c2:
71:32:34:a5:e5:11:7c:9e:2e:d8:28:00:2d:cb:bc:
ff:15:41:44:86:3d:5b:46:35:31:a9:62:52:85:dc:
db:ff:8e:ce:aa:0f:97:0a:c7:7f:5f:6f:ab:dd:32:
12:1e:8d:f4:cc:dd:84:d8:5a:0a:82:63:38:6e:00:
a8:42:7d:3b:33:18:d0:80:b0:9c:24:df:a5:e2:41:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:30:F3:85:A2:EE:41:C2:53:FC:1F:4C:63:EA:FF:79:A8:1B:86
X509v3 Authority Key Identifier:
keyid:1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:df:af:3c:33:ba:d1:bd:c3:7a:2c:0a:ed:10:9a:f8:62:
f3:f4:83:e8:53:e2:db:f3:de:53:f9:20:30:94:10:93:53:43:
b5:1f:ef:8e:0f:dc:06:33:2b:c5:2b:d0:a8:d5:76:84:ed:f6:
1a:20:f5:01:8a:90:81:8e:6f:0c:cd:79:32:0d:46:76:b4:94:
4f:79:b6:fb:db:4a:66:04:c4:38:d7:14:ed:1f:c8:56:b1:ad:
6b:be:15:1d:de:13:91:44:cf:25:bc:b2:4f:df:5a:2f:1b:2c:
c5:f9:79:5f:02:e6:1a:18:8b:a6:ed:78:60:79:e1:4f:c4:64:
ae:4c:46:35:63:c4:a3:76:cd:5f:cd:f1:b6:af:1b:1d:97:fe:
8a:16:d9:79:bc:56:a4:af:6e:57:d2:ca:b0:4a:91:7d:55:79:
d4:83:19:5f:01:8b:cd:be:d2:f2:74:f6:b3:2b:37:37:57:a9:
42:5d:16:af:62:34:cd:54:48:94:65:be:d0:62:19:2b:99:cc:
66:41:b6:a4:0f:36:71:3f:d8:58:64:d8:9b:35:8a:2e:e1:6d:
4b:b2:7a:cc:ba:5e:6f:78:b9:21:97:bc:4d:50:13:c9:32:7b:
27:43:3f:12:6c:9a:f5:b8:7d:14:aa:0f:60:88:5e:77:db:80:
61:e1:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:02 2026 by rpki-client