Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
File: HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft (raw, json)
Hash identifier: yXbIMbv0Flsy259cdeHmV39Ih1AUf4GevHCwhZe/Ct4=
Subject key identifier: F5:D6:19:81:DA:05:2F:E1:84:1C:F7:E6:8C:A1:B6:63:6B:5B:08:92
Authority key identifier: 1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
Certificate issuer: /CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Certificate serial: 01A0C85819DB117532B9BA1EDC84560AC4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:12 +0000
Manifest this update: Tue 22 Sep 2026 09:00:12 +0000
Manifest next update: Wed 23 Sep 2026 09:00:12 +0000
Files and hashes: 1: HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl (hash: EfDW1LKSktdCqZWrMycQfLQM49TQ25DsWW/DF4gjgg0=)
2: fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa (hash: vnqoM5a+GH/Bcj8OwND/TYSLxt03hi6ZcbKX0HMYzDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:19:db:11:75:32:b9:ba:1e:dc:84:56:0a:c4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Validity
Not Before: Sep 22 09:00:12 2026 GMT
Not After : Sep 23 09:00:12 2026 GMT
Subject: CN=f5d61981da052fe1841cf7e68ca1b6636b5b0892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:f1:8e:4e:31:20:13:e4:ee:a7:40:62:1c:
fc:2a:2d:e1:d6:ca:9b:8e:4e:d4:67:8b:3b:bc:bc:
0e:1c:be:de:38:59:ac:51:b6:e8:3d:de:ef:4a:e7:
7b:34:af:95:13:3a:99:31:69:b0:bb:6e:9b:e0:31:
04:6e:f6:f4:99:66:1f:5c:f8:76:48:9b:c4:f7:52:
63:b4:3e:9a:cf:d2:0f:fb:ec:c8:49:30:5a:10:c8:
c0:4e:16:be:6e:80:83:c0:4e:77:95:16:95:27:a3:
a8:ae:c9:4c:c9:df:ec:13:7c:11:0f:82:f7:05:39:
2c:bf:26:bf:d1:b5:bb:6c:ae:21:16:22:5c:e0:8c:
5d:4d:c7:3a:a7:9e:68:56:26:f1:77:8a:5c:d5:f1:
e2:9c:57:b2:f3:20:5d:74:32:77:bb:05:e7:cd:13:
11:d8:89:dd:75:9f:06:3c:81:d9:28:0f:81:40:cc:
46:d3:f2:2c:0b:48:fb:53:21:33:df:9d:5e:65:24:
0b:e8:4a:0d:e1:63:b9:61:ed:ab:0a:05:a4:70:96:
76:0b:44:b6:e6:ae:5d:bb:c7:d4:b4:af:24:41:40:
ea:fa:2b:2a:fe:7a:38:dc:c5:4b:7f:13:d0:50:4e:
57:45:68:c4:6e:2b:ec:78:db:55:49:5e:4d:22:3c:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:19:81:DA:05:2F:E1:84:1C:F7:E6:8C:A1:B6:63:6B:5B:08:92
X509v3 Authority Key Identifier:
keyid:1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:dc:a8:34:85:c9:72:a9:92:c0:1f:7c:4e:6f:81:3c:b6:
d8:4a:a2:d1:19:64:d5:99:cd:f0:d1:4d:e4:b6:37:9c:54:0e:
c8:ec:8d:ca:b0:ed:42:12:f6:9b:51:35:66:72:e4:1b:a0:f1:
90:7d:55:1b:36:d8:cc:a7:03:91:b6:bd:f9:43:fe:1b:21:91:
30:d8:70:28:2a:f6:af:92:61:56:53:6a:6f:4b:c9:76:b9:13:
76:80:63:ab:7f:3e:3c:33:f2:42:31:8f:dd:e7:0b:10:d5:00:
09:bd:3f:32:8d:a3:25:c6:96:d5:74:ed:f2:9a:81:c8:03:eb:
bc:50:49:e3:33:e1:8d:5c:3b:3e:90:7a:d6:fb:24:fa:25:6f:
73:ae:fb:a0:63:93:e2:33:3e:38:57:a6:da:bb:72:ab:8c:e1:
ae:78:5f:e3:8d:83:99:36:13:f2:b9:49:b4:0c:7e:5e:85:c9:
53:a7:d5:44:a7:93:3c:42:91:b1:df:f5:7d:0a:be:51:59:88:
3c:24:86:1e:d3:0f:8f:2c:2b:30:57:33:6e:d3:5b:b8:f3:57:
36:a7:1a:c3:e2:42:0c:98:33:cd:9f:03:be:d6:33:90:39:82:
bd:37:fb:f8:05:00:1b:e8:9c:93:f8:d9:90:87:32:ce:55:15:
e2:ba:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:49 2026 by rpki-client