Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: i1Tylj6wmch9Sq8YnuxHGr6nheG821tp6oaCN+ymsyE=
Subject key identifier: FB:43:4C:C6:E7:9F:46:82:6E:B4:16:55:58:20:E9:CC:E1:90:4C:1D
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 01A0C88FDB0BDACD1A686DBA21FE749DF153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 18A0
Signing time: Tue 22 Sep 2026 10:01:05 +0000
Manifest this update: Tue 22 Sep 2026 10:01:05 +0000
Manifest next update: Wed 23 Sep 2026 10:01:05 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: TJMwkvL+NRWNRHjXvLMISTST39ilBTtqkntF1cYIBaI=)
2: K20WduXL32Z9sRN6JTcaaNFfv6o.asa (hash: eljNQ3knW9FFba+2dFnvJt5ol1ykbM89I+rKzOVsymM=)
3: Wy3MqlXsTXf1u_lkMDx771HHpfU.roa (hash: BrkGhKWt+EFDEWZeg8fqIEdjEe1yuUnDX6BThl1mWV0=)
4: gOtTk7UmMp1v-_yqWbRjY45OpWU.roa (hash: /fotZTJTtrvQiuHJIWOl4utSJBgailrFndgkQGOPqi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:db:0b:da:cd:1a:68:6d:ba:21:fe:74:9d:f1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Sep 22 10:01:05 2026 GMT
Not After : Sep 23 10:01:05 2026 GMT
Subject: CN=fb434cc6e79f46826eb416555820e9cce1904c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:e5:d0:dc:6d:39:f4:30:8d:34:41:e7:a7:
a2:07:c7:12:0b:6f:b0:aa:35:8d:d2:0f:f0:6f:da:
73:44:59:b5:18:41:52:c5:8c:c6:58:77:59:38:54:
5c:49:05:f2:cb:6e:13:30:3a:2b:cb:0e:d8:3d:14:
d9:26:b2:3f:e6:38:97:d5:26:34:95:c1:54:f2:1b:
b9:b3:bd:b0:03:0f:19:94:e1:6b:74:f8:c7:95:93:
83:d3:4c:59:b2:2c:d2:6c:0f:80:95:0d:6a:4a:57:
95:d1:8f:08:87:73:db:20:a6:dc:d3:12:b6:6f:be:
b3:94:a0:2c:6f:39:e6:61:b2:08:04:2f:e7:33:2e:
81:47:9a:d1:f6:b3:50:b0:68:48:72:d0:f8:85:4d:
f8:3f:97:5d:a5:52:89:e8:0e:77:7e:f7:6d:04:ba:
92:60:79:8f:9a:e6:38:27:fd:19:4a:ad:ce:00:9e:
4e:01:bc:52:b5:e1:ac:96:a9:7b:9f:5c:28:f8:e7:
c2:b6:15:ab:04:c8:8f:36:40:05:97:c3:54:fb:3a:
b4:12:b1:7f:d4:f2:57:ac:67:ca:f8:a0:93:1a:4c:
89:64:8f:3a:e4:58:2d:27:fb:8f:3e:2e:29:7c:a9:
b2:4c:d9:03:92:cb:f8:00:d8:8a:04:ae:98:95:d4:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:4C:C6:E7:9F:46:82:6E:B4:16:55:58:20:E9:CC:E1:90:4C:1D
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:e9:f4:12:d2:f6:32:c3:9f:ea:9c:8d:d6:9a:6a:12:39:
a0:cb:b1:6d:a8:d4:4b:9f:a0:4c:e9:92:67:04:b5:4f:67:89:
a0:bd:64:81:a4:9f:a7:b2:c9:3a:5d:26:72:36:f6:8a:c7:6b:
3d:64:9a:0b:bc:92:89:e4:6b:5a:7e:65:e9:54:2c:a7:8b:d6:
1e:25:07:e4:a9:e6:12:2d:ed:ec:66:da:12:e3:25:54:d7:26:
96:bb:0b:3c:ce:72:db:2a:1b:f1:ff:52:a7:da:44:5e:5f:00:
f4:4b:03:6e:d0:12:29:80:10:ce:6c:ad:45:cf:ac:a2:25:c9:
27:ca:a9:53:5a:f3:2e:43:b6:a1:0a:30:2b:46:a7:0f:84:82:
26:2a:cd:7c:e9:28:e2:51:0e:03:cb:2e:d2:46:5b:4b:fc:a5:
20:b1:b2:24:c2:13:f0:6e:ed:a8:fa:49:34:15:d8:6d:1e:15:
b4:6d:76:aa:7a:fa:4c:87:48:ba:92:14:62:89:66:d8:a8:90:
c1:41:01:69:4c:da:de:54:5e:79:f7:a3:12:d9:c0:ad:96:69:
49:88:3d:b9:29:8e:75:d4:9a:df:e3:03:d6:63:c9:fc:b3:9f:
34:0a:3f:02:ea:66:f8:ef:46:07:73:4c:8d:1c:eb:9c:05:f8:
8a:cf:6b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIj9sL2s0aaG26If50nfFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3
NjQ4NTkwHhcNMjYwOTIyMTAwMTA1WhcNMjYwOTIzMTAwMTA1WjAzMTEwLwYDVQQD
EyhmYjQzNGNjNmU3OWY0NjgyNmViNDE2NTU1ODIwZTljY2UxOTA0YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJfl0NxtOfQwjTRB56eiB8cSC2+w
qjWN0g/wb9pzRFm1GEFSxYzGWHdZOFRcSQXyy24TMDoryw7YPRTZJrI/5jiX1SY0
lcFU8hu5s72wAw8ZlOFrdPjHlZOD00xZsizSbA+AlQ1qSleV0Y8Ih3PbIKbc0xK2
b76zlKAsbznmYbIIBC/nMy6BR5rR9rNQsGhIctD4hU34P5ddpVKJ6A53fvdtBLqS
YHmPmuY4J/0ZSq3OAJ5OAbxSteGslql7n1wo+OfCthWrBMiPNkAFl8NU+zq0ErF/
1PJXrGfK+KCTGkyJZI865FgtJ/uPPi4pfKmyTNkDksv4ANiKBK6YldRXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtDTMbnn0aCbrQWVVgg6czhkEwdMB8GA1UdIwQY
MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut
OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm
LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1bp9BLS
9jLDn+qcjdaaahI5oMuxbajUS5+gTOmSZwS1T2eJoL1kgaSfp7LJOl0mcjb2isdr
PWSaC7ySieRrWn5l6VQsp4vWHiUH5KnmEi3t7GbaEuMlVNcmlrsLPM5y2yob8f9S
p9pEXl8A9EsDbtASKYAQzmytRc+soiXJJ8qpU1rzLkO2oQowK0anD4SCJirNfOko
4lEOA8su0kZbS/ylILGyJMIT8G7tqPpJNBXYbR4VtG12qnr6TIdIupIUYolm2KiQ
wUEBaUza3lReefejEtnArZZpSYg9uSmOddSa3+MD1mPJ/LOfNAo/Aupm+O9GB3NM
jRzrnAX4is9rFQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:34:41 2026 by rpki-client