Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: TxO24yiXpFxQ1RfTEgFabHp9c8gJlld+PyLCMVnyCQU=
Subject key identifier: 07:CF:50:63:1C:75:F9:22:0D:90:E3:ED:72:FD:1E:B9:AC:7E:1F:DF
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 01A11C3F349A7D3BE0CC8529AEF4C86AA1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1A27
Signing time: Thu 08 Oct 2026 16:01:06 +0000
Manifest this update: Thu 08 Oct 2026 16:01:06 +0000
Manifest next update: Fri 09 Oct 2026 16:01:06 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: SaGWqi5rqvtLesyYc/wU4LBmvnGw/7A3otKagvUcEwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3f:34:9a:7d:3b:e0:cc:85:29:ae:f4:c8:6a:a1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Oct 8 16:01:06 2026 GMT
Not After : Oct 9 16:01:06 2026 GMT
Subject: CN=07cf50631c75f9220d90e3ed72fd1eb9ac7e1fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:0e:a2:79:83:b5:44:39:5a:8d:09:4f:27:
76:d5:4e:64:c0:0f:6e:f3:71:22:11:59:33:18:bb:
3b:06:28:5d:63:dc:39:bc:54:dd:3d:c5:dd:72:2c:
c6:d5:9e:43:c9:85:c7:72:5b:bb:ad:d6:a5:75:7c:
be:18:80:de:0b:0f:19:1c:78:02:8b:d4:10:e5:e3:
8d:9c:8f:67:e7:23:60:8d:4a:b5:bd:53:b8:f1:ba:
43:e9:a6:90:20:d0:f5:56:32:96:f4:fd:82:d2:bc:
04:12:be:66:f6:3b:fd:ef:ef:6b:23:f1:e6:cb:92:
92:ef:86:e7:d8:63:02:9f:83:5f:25:95:8a:e7:d6:
b0:73:a5:0a:93:98:ae:58:7a:b0:4b:2d:1d:c4:f2:
57:59:8a:79:e6:a9:ec:9c:e0:21:e1:58:78:af:53:
ad:28:e2:51:38:ad:7f:b9:15:2f:a5:dc:54:8a:08:
56:5a:1a:8a:32:e0:01:fa:7f:59:75:e9:a2:dd:bb:
6b:60:3f:1b:68:0a:b6:6d:fd:21:24:3e:f0:ec:1b:
a6:c9:ca:ab:32:16:61:ae:7c:6f:14:37:58:d9:f4:
58:5d:08:e3:cc:c1:4c:f0:c0:1e:15:ad:27:bb:0f:
15:f2:f7:2f:a3:8b:4d:7a:2c:7b:27:9c:5f:54:ac:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:50:63:1C:75:F9:22:0D:90:E3:ED:72:FD:1E:B9:AC:7E:1F:DF
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:99:02:09:a4:7e:62:4e:1b:bc:f7:02:d9:a6:f3:83:cd:61:
44:8e:23:da:d9:b0:cd:1f:86:ff:f4:13:3f:74:9b:69:7e:4d:
c3:e4:59:eb:49:49:d0:b1:87:6e:fe:db:99:5c:68:a6:06:15:
8d:1c:58:29:b8:23:3b:0b:2e:16:cc:2a:89:85:49:38:9b:bb:
d1:a8:2e:ae:3f:d5:b9:05:a1:ae:16:08:e2:59:5a:dd:23:3e:
cb:f2:06:d3:14:25:d5:81:74:76:d7:ee:a2:91:fb:e0:29:41:
be:74:43:56:d9:a5:de:c5:95:37:51:10:7d:e3:59:16:eb:83:
be:38:ee:12:6e:ea:9f:c8:d7:a1:b1:20:39:a7:16:6c:0e:84:
fb:ba:18:bf:17:7a:f1:fd:11:de:97:d9:9d:b0:e8:d0:13:ba:
44:bf:91:a8:09:ab:d7:f2:a8:9b:25:c9:76:81:69:25:5b:2f:
29:68:bd:30:bf:7e:e9:9d:8a:9b:f8:9f:49:42:00:2a:5f:54:
be:35:7e:a4:51:ca:ec:7f:5d:4d:51:dc:67:44:99:d6:37:73:
02:05:8f:e1:fd:8b:cb:a7:fd:6c:74:96:af:9c:51:71:f5:e1:
9f:17:5f:a4:ed:ed:ea:61:67:6c:ca:63:05:45:87:b3:28:b4:
a7:13:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:54:50 2026 by rpki-client