Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: EZ+OtGVpAvRF5M87p0XbXmzE120AwYu81nnLksZyZk4=
Subject key identifier: 0E:1C:03:71:E1:62:55:BC:9C:72:D0:EB:89:CF:AD:2C:AB:BF:43:60
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 01A0D8DE937C4C38882DD73C06B732308E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 0329
Signing time: Fri 25 Sep 2026 14:01:00 +0000
Manifest this update: Fri 25 Sep 2026 14:01:00 +0000
Manifest next update: Sat 26 Sep 2026 14:01:00 +0000
Files and hashes: 1: A7gdTozlE7zRrXKXDLcPEaNjotA.asa (hash: LtgWFqcTRBP1H850Ju61/YqXC3qpOWS2Y1oOH2LdB34=)
2: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: 99jB/tNVDCUJErX3mPO3uh4Zi14nrEo0T3FsdZBZCUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:93:7c:4c:38:88:2d:d7:3c:06:b7:32:30:8e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Sep 25 14:01:00 2026 GMT
Not After : Sep 26 14:01:00 2026 GMT
Subject: CN=0e1c0371e16255bc9c72d0eb89cfad2cabbf4360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:df:5a:b5:5e:0c:03:54:7e:39:62:11:7f:
69:e8:8c:51:b7:b7:a3:ba:8e:72:05:b0:e2:ba:99:
01:15:f2:31:17:be:f4:c2:84:cc:45:f5:62:57:d0:
32:9d:dd:c8:18:5d:6a:5f:75:a7:37:4b:33:ed:9f:
53:0f:6d:3b:54:34:75:aa:d8:2c:d3:7b:fb:1b:c5:
42:83:0a:98:1a:62:c0:c7:ff:b2:ad:a5:38:6f:1f:
69:52:99:a8:74:a8:44:e6:33:5f:fc:21:42:61:14:
53:74:e8:0d:4a:b2:da:23:81:36:18:f7:fc:9e:a3:
67:8b:78:6c:54:80:b4:1c:2e:12:0f:ed:a4:42:bd:
ad:57:c5:eb:fe:30:0b:cb:2e:f2:03:44:c4:65:4a:
ee:ee:6b:1d:1c:24:0b:ba:11:16:8d:92:94:e3:53:
a8:99:17:45:33:f6:47:58:99:40:19:87:8a:93:a2:
f4:b1:48:01:e5:c9:ce:18:c9:fa:67:64:a5:61:3b:
fa:c6:64:77:2e:8a:b9:51:4e:c5:91:75:75:ed:45:
45:fc:54:dc:9a:9e:8a:01:9d:cb:63:63:4e:f5:73:
f3:74:08:2e:c0:dc:51:71:06:58:a1:37:a3:96:73:
2f:ea:1a:45:37:7f:b4:3a:99:03:6a:02:6f:2b:3e:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:03:71:E1:62:55:BC:9C:72:D0:EB:89:CF:AD:2C:AB:BF:43:60
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:67:68:ce:5d:c1:93:00:d0:25:f7:23:01:b6:40:a6:ea:
6d:97:7f:c8:73:65:3b:e3:0c:62:bf:2a:93:6a:a8:04:49:98:
f4:9f:62:30:55:ad:eb:d2:26:79:75:b6:ca:81:f1:40:f6:52:
d5:17:49:ab:f5:63:d8:66:e8:6f:b5:07:d1:4b:56:9c:8c:2c:
cc:1e:11:c8:a9:d9:81:ba:af:b7:b6:a2:c2:35:51:96:c4:45:
d9:f5:9f:64:65:6e:16:fa:9c:03:3f:6b:2a:40:97:60:55:30:
57:75:49:fd:33:ae:f3:55:c1:fb:51:79:68:c6:d0:4b:e2:6f:
87:ca:b8:4d:15:2f:50:09:66:99:c1:ce:f4:7d:61:f4:ce:15:
bf:cc:20:0c:98:82:4d:56:7c:b9:01:d2:59:2d:03:d2:fc:f4:
70:4e:7d:81:dc:19:ca:b7:a2:3a:f2:58:a8:63:f3:1f:ea:62:
5d:17:c7:c4:fc:fe:78:b5:ea:27:33:88:da:fb:c5:01:c3:17:
a7:d3:a5:84:29:50:f5:7c:31:91:aa:38:88:04:1a:ff:3e:49:
b4:23:52:f0:1c:8b:4c:65:37:73:1a:16:57:74:2f:f2:72:52:
63:b4:0e:4a:27:61:78:31:0d:57:50:b0:28:8c:51:49:c0:0a:
f9:0b:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:11:42 2026 by rpki-client