
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: qQQP1jaP4tgh8ZRASlR3PXT+pm/YaVsAOPbXkVIE0tg=
Subject key identifier: 5E:F9:4D:A6:81:1A:BE:3F:CD:2A:5B:14:82:60:D4:44:DB:0D:5F:9F
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 01A13F020AE1A8E8E01F97BE618E6A888C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0A65
Signing time: Thu 15 Oct 2026 10:01:00 +0000
Manifest this update: Thu 15 Oct 2026 10:01:00 +0000
Manifest next update: Fri 16 Oct 2026 10:01:00 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: mfvBmRa7uhzW2MTdE9+mDzhSC3s+kkXA8gbR+tOsGfo=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:0a:e1:a8:e8:e0:1f:97:be:61:8e:6a:88:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Oct 15 10:01:00 2026 GMT
Not After : Oct 16 10:01:00 2026 GMT
Subject: CN=5ef94da6811abe3fcd2a5b148260d444db0d5f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:43:d9:d4:32:d6:e1:a9:37:23:59:16:8b:
22:8a:79:ed:36:29:89:d1:ef:36:df:34:39:a5:54:
9e:34:47:ef:b9:9a:fc:00:cb:30:c9:b6:0c:b9:52:
f1:82:0b:e7:ed:4a:ac:35:6c:10:0e:f4:51:6a:02:
48:73:63:df:d1:07:b1:20:c5:05:a8:19:8c:c1:7c:
7d:c3:68:8c:4b:2a:5d:ad:24:38:c3:23:b5:27:ba:
bb:06:8a:1a:ef:07:ab:a8:5f:0e:87:27:66:87:27:
77:22:fa:68:8c:57:7c:04:b1:77:20:57:eb:10:a5:
38:c0:fe:93:4d:9b:26:26:6b:c0:bc:5e:4a:36:c4:
3b:16:d2:60:a2:03:f2:16:82:bd:69:c2:c0:70:1f:
f0:28:6f:18:f1:1a:ef:47:49:82:62:a9:c9:6e:cc:
2e:f2:20:ac:37:80:03:4d:05:ab:90:12:35:56:9e:
04:05:33:41:6f:23:7b:6e:9e:bc:a8:e3:d5:4d:be:
c1:85:e4:28:54:e1:0c:04:f4:79:14:fb:2e:a4:f8:
67:25:3f:89:c8:e2:ea:7c:e6:0a:b2:7e:81:a6:2a:
ab:4a:1b:85:a0:f8:25:7a:f5:5c:33:01:67:82:2d:
1a:a1:ce:62:50:97:15:f5:09:48:ba:f3:89:42:33:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:4D:A6:81:1A:BE:3F:CD:2A:5B:14:82:60:D4:44:DB:0D:5F:9F
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ff:74:53:de:3b:a1:f2:91:5e:b0:1b:bc:a8:10:09:68:63:
68:43:41:1d:49:cd:8a:4c:3e:cf:18:09:c9:fd:c6:79:10:ed:
d3:ba:2f:14:1d:92:2f:ba:d9:c9:66:39:a1:6f:41:aa:5d:f5:
49:b2:84:79:d4:e1:ca:90:e2:33:a3:e7:e0:19:f3:28:5a:95:
b0:03:aa:a2:c5:21:39:3f:ab:3a:9f:68:5b:c3:5a:c8:38:88:
e1:75:26:3f:77:26:0e:76:32:3e:42:43:fa:06:45:79:fc:66:
22:49:0e:47:93:5b:c4:38:39:b2:99:fe:b5:c9:d2:e9:75:45:
e8:42:2b:8e:a2:4b:7a:63:86:2e:d8:b3:75:db:ea:06:c0:13:
35:1b:54:d8:54:45:b3:6a:17:71:0d:33:a6:fb:08:85:31:65:
07:31:bf:2b:ea:5e:87:6d:57:43:55:0c:bf:d7:fc:12:45:25:
e9:28:06:3a:08:92:84:33:49:35:72:6d:d1:74:e6:0a:f3:74:
c3:80:69:54:49:f0:84:a4:77:43:22:b3:c6:99:14:ee:fb:2b:
32:2b:7d:8c:1f:a3:a6:1a:18:97:da:3d:4a:af:8e:a7:dd:6c:
22:70:f9:f4:7b:43:7b:3d:f1:90:78:4b:86:f4:f7:79:a7:c8:
1d:d9:b9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:40:39 2026 by rpki-client