Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: LpOi710iWtRoIQneJSfC0PE7fOr+WUwE4TCgGivjg+w=
Subject key identifier: AF:59:30:71:34:B9:D5:17:BC:FE:07:85:1B:2B:40:88:23:5D:F9:19
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01A0C66AD259D436842EDECC890209B69D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 066A
Signing time: Tue 22 Sep 2026 00:01:24 +0000
Manifest this update: Tue 22 Sep 2026 00:01:24 +0000
Manifest next update: Wed 23 Sep 2026 00:01:24 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: K/Ojc0SktUZP7Ui0ZpoG+nz8/hy3JfICLjBP4vXcC+Q=)
2: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (hash: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=)
3: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (hash: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:d2:59:d4:36:84:2e:de:cc:89:02:09:b6:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Sep 22 00:01:24 2026 GMT
Not After : Sep 23 00:01:24 2026 GMT
Subject: CN=af59307134b9d517bcfe07851b2b4088235df919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:d0:fe:83:83:be:42:e7:88:20:83:1e:76:
de:bb:8c:c5:f0:9d:93:7a:de:c1:83:43:62:71:79:
84:30:b5:4b:5c:d3:16:73:60:f4:dc:22:2f:d3:96:
4e:53:97:a5:e1:16:b0:93:46:f4:49:bd:0f:9b:94:
ac:84:a6:14:e3:bc:55:b9:b5:ab:94:de:c1:ca:6f:
83:59:f5:c0:81:a4:1b:e0:b6:5b:30:7c:28:4f:02:
33:f3:89:65:22:b2:58:0a:a5:d2:e4:d9:a7:df:6f:
53:ec:c5:7d:28:0f:98:35:4a:43:55:8f:e0:86:01:
5f:fb:cf:c2:29:9c:a6:c3:c8:ed:e1:c7:72:73:42:
62:c4:c5:ea:f7:89:bf:73:58:a7:60:63:51:19:88:
db:a9:12:37:e5:74:c5:56:61:78:4b:a9:84:7e:64:
33:c7:cd:1e:4e:bd:7b:0c:e1:a4:1b:da:a2:51:98:
3a:d0:e6:e1:e0:55:73:8b:24:5e:a7:0b:ac:bb:67:
4e:0d:a6:5e:c9:ef:dc:35:ea:d6:45:64:b4:7d:39:
c8:8c:65:c2:cb:a0:df:93:b5:5f:a4:01:9b:4f:d4:
9e:4b:43:58:c3:79:ec:3b:94:eb:42:2b:1f:e6:86:
5f:88:5d:cd:93:23:80:3f:18:92:71:f5:dd:65:65:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:59:30:71:34:B9:D5:17:BC:FE:07:85:1B:2B:40:88:23:5D:F9:19
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:93:71:98:17:a9:20:f5:62:ea:fe:00:e2:b0:74:be:5b:b7:
07:47:da:cb:33:89:8a:94:80:0d:df:80:04:03:85:dd:e3:eb:
4a:34:32:1f:aa:d7:0d:0a:19:29:71:da:03:07:17:99:7a:53:
07:8a:9f:1a:f3:e3:ff:4b:aa:fc:69:10:f9:da:66:19:7e:1b:
be:a4:de:fb:cb:28:a1:91:30:d3:f2:37:e6:d9:2d:3e:19:7c:
df:de:06:eb:6f:85:04:7c:2b:a5:27:b4:77:2f:de:74:16:b8:
af:5e:02:ff:3e:68:42:50:cc:7a:9a:2b:57:af:9b:bd:df:f3:
cd:9b:1f:a3:94:77:ce:08:48:4c:64:8e:23:42:1c:98:98:33:
04:03:2b:dd:83:c0:51:b7:94:d2:8b:cc:f1:e4:63:e9:76:c1:
12:03:2c:84:71:55:80:40:99:dd:0b:b2:71:e7:d9:78:ef:47:
70:db:7b:ad:58:3d:89:86:5a:86:93:b0:7a:b1:0a:f6:3a:8b:
ca:2c:25:70:a9:79:55:6a:89:53:9f:be:c9:6c:fd:31:43:39:
f1:7d:0c:94:52:04:47:36:a9:ab:0a:f7:aa:95:6d:54:63:37:
ec:ff:cb:3a:6f:cd:f6:55:50:c1:cb:34:6a:07:e0:e4:3c:b6:
df:af:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:37:49 2026 by rpki-client