Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: 20vk+TyUgtqrPaKVJGVBNtgrEDeYYaKywHtkveVzjWQ=
Subject key identifier: F4:6D:AE:01:8C:50:87:61:67:CC:82:07:7F:4A:21:47:AA:9F:5C:6B
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 01A0CD10878F86EDE2219745A9D0F8A3E3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 1377
Signing time: Wed 23 Sep 2026 07:00:07 +0000
Manifest this update: Wed 23 Sep 2026 07:00:07 +0000
Manifest next update: Thu 24 Sep 2026 07:00:07 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: l7nfAYW5NXuIeTfufohwmBLbgzjQ+6UgrAmJHKpe0tA=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:87:8f:86:ed:e2:21:97:45:a9:d0:f8:a3:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Sep 23 07:00:07 2026 GMT
Not After : Sep 24 07:00:07 2026 GMT
Subject: CN=f46dae018c50876167cc82077f4a2147aa9f5c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:36:92:f6:fa:75:c5:00:fa:37:25:8b:f9:
53:05:0a:20:fb:89:46:c9:c6:64:5e:49:25:9c:d4:
e0:b9:31:05:4a:d2:93:fb:4b:53:e6:71:65:34:05:
2d:f7:16:38:79:f1:03:52:9a:c3:00:2e:de:e3:44:
17:1d:70:52:ee:ae:26:a6:04:04:cd:4e:e4:b5:aa:
fb:27:2c:86:1f:41:55:06:c9:bd:f1:e4:d0:ab:a3:
ea:ce:f2:00:7a:c1:01:4c:5c:61:de:e7:cc:bb:c8:
c5:80:d3:c8:58:ca:f1:d1:46:b0:22:4b:bc:90:ae:
5b:2d:09:b1:e2:4e:7e:f0:c9:e5:b3:d5:96:92:0c:
19:4f:ef:c2:0f:7e:74:7a:20:19:06:c1:46:99:b4:
71:98:c5:2d:10:00:fe:a9:89:9e:a5:cc:eb:52:66:
7a:08:0d:d9:84:cf:18:ae:55:92:50:40:e1:cf:64:
75:a7:5d:12:99:4b:9e:bd:a1:cd:54:a6:8c:fe:6b:
35:fc:df:2c:f9:37:63:9b:1c:a3:0c:9c:73:54:8d:
25:31:09:a8:c0:4c:7a:f5:ad:f8:3c:3a:a5:81:18:
00:9c:51:7a:4c:48:fe:8f:42:b1:29:ae:5a:c1:97:
a1:3a:f4:dc:7f:b8:d8:af:db:6e:a8:d1:1c:4c:8e:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:AE:01:8C:50:87:61:67:CC:82:07:7F:4A:21:47:AA:9F:5C:6B
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:c2:7e:bc:e4:05:6c:19:fc:e3:6c:38:6e:88:6f:9a:32:
c2:b0:a9:b0:f5:69:fe:ab:38:ca:45:0f:7f:6a:f7:30:4a:35:
d5:4c:83:e2:d0:fb:b7:de:1d:10:5e:5e:51:6b:a8:20:80:61:
4a:16:40:5f:c2:79:0a:8b:9c:1f:3b:9e:4c:a8:01:19:e4:91:
45:2e:a4:9d:53:01:d9:10:d8:2c:26:e2:61:05:d2:d5:44:34:
10:c8:8b:e9:e8:6f:8a:cc:0c:e3:a4:a1:6a:d1:96:00:ac:91:
1e:14:4a:0b:94:49:9a:c6:84:9b:2d:a5:52:de:8f:7a:a9:2c:
8f:52:7a:00:16:50:78:b5:f0:c7:69:db:cf:c9:78:a1:21:d1:
79:1b:98:1b:00:69:3b:00:13:d2:3a:60:d1:ae:f4:aa:d2:fc:
2d:8c:e7:8a:e3:93:64:db:a7:7b:6c:d4:f9:91:97:f7:85:92:
55:b3:d5:14:e2:49:75:31:06:67:da:8d:18:5f:ba:df:50:be:
a5:45:04:2e:dc:cb:b2:e3:b7:15:54:e7:25:d9:17:de:3e:02:
ed:36:94:78:9b:26:ee:d3:ec:74:f4:f6:d9:c6:5d:ed:06:67:
af:4c:00:9d:fb:29:7b:e8:cc:16:34:5c:dd:dc:9b:3b:79:24:
3b:b8:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:57:41 2026 by rpki-client