Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier: vk8zUm2f7g0DF87jGCZ8UDQjC4A9w+RqWHnxyEcs9ik=
Subject key identifier: B9:5E:58:EB:8E:94:1D:F3:8E:47:1F:31:5E:07:27:82:61:45:AD:FB
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer: /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial: 01A0DEE0EDA74967E3E95AC30254486C4706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number: 1A05
Signing time: Sat 26 Sep 2026 18:01:17 +0000
Manifest this update: Sat 26 Sep 2026 18:01:17 +0000
Manifest next update: Sun 27 Sep 2026 18:01:17 +0000
Files and hashes: 1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: z83hX0MoZpqEFihOn/JutZ7765QdrCRI3lRnwuhIBvM=)
2: idejEcxXsr16g2wp9V8Tc_3IUpE.roa (hash: 2R6v+WJgumF5jKo8h1riFb9sUElHbeJIrHYFIS833YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:ed:a7:49:67:e3:e9:5a:c3:02:54:48:6c:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Validity
Not Before: Sep 26 18:01:17 2026 GMT
Not After : Sep 27 18:01:17 2026 GMT
Subject: CN=b95e58eb8e941df38e471f315e0727826145adfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:b1:63:a3:23:7b:fe:bf:4a:c9:bb:a1:f7:
99:f6:b6:0b:f4:64:70:47:22:88:5f:c7:da:d0:e0:
24:9b:85:2e:04:89:09:c1:a1:10:39:92:ba:f4:43:
cb:ae:97:67:c1:ea:62:d6:c3:25:e8:ba:08:22:af:
bc:0d:ac:b6:e9:8a:da:32:6a:f6:f8:a3:56:32:86:
8c:f2:a6:86:52:e8:eb:2d:46:74:a8:87:45:a2:7b:
e4:ab:4f:7f:7b:d0:44:bd:85:a4:42:7c:b6:6e:34:
d1:82:1a:30:da:a0:13:86:49:f8:32:cd:45:3a:ab:
0a:80:a9:78:e4:b8:85:1e:c4:22:19:f9:ad:4c:b3:
30:0b:e1:1d:22:1f:31:1f:8a:85:68:d0:95:fa:7e:
f5:9f:d8:55:85:4a:b6:b7:40:b1:b2:bc:b6:8c:2d:
4b:83:e3:b8:ec:bb:c4:48:12:8b:2f:cc:0e:4b:a8:
9e:5c:f6:b8:ae:96:1f:57:23:8a:c3:47:5a:2a:33:
ff:57:7f:d6:88:23:b5:5b:15:50:00:b5:c9:2b:63:
44:fe:30:56:2f:24:36:99:65:88:fb:0c:4f:be:04:
55:54:5c:18:01:90:57:d4:57:a2:fd:b3:ec:56:62:
a2:5c:3d:c2:ae:76:95:0e:d4:a9:69:bc:15:44:7a:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:58:EB:8E:94:1D:F3:8E:47:1F:31:5E:07:27:82:61:45:AD:FB
X509v3 Authority Key Identifier:
keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:35:fc:a6:01:34:a8:a0:29:37:03:72:45:69:39:74:64:9a:
ae:c6:fe:f8:2c:18:11:f4:12:2e:a0:c3:d9:c3:23:21:79:79:
f4:8f:e9:08:cd:2e:bc:d0:73:c8:7b:8e:05:3d:de:17:78:4e:
31:7b:b9:30:8f:7c:fc:6f:49:f7:7e:6c:87:94:4e:fd:fe:92:
cc:79:a9:8e:fa:2a:12:f9:19:45:b2:2c:cf:d0:3f:c2:22:0a:
01:76:f0:6f:a5:fa:e9:73:bc:31:2b:60:3d:e1:6c:68:2d:12:
54:77:f7:44:5e:92:cd:84:f0:c2:eb:65:2d:fe:99:51:00:e8:
90:f7:b5:d1:ab:d3:cb:16:fb:ad:94:dd:9a:5d:d1:1b:c9:b7:
fa:2c:d2:fe:2c:35:2f:b7:9c:41:c8:a4:7d:01:12:44:e4:24:
83:7b:e7:b3:01:87:92:15:07:34:74:75:ae:8e:15:01:d3:95:
f2:d9:cf:16:7f:66:77:5e:a6:5c:d2:2b:39:90:77:32:20:9d:
69:6b:29:da:85:77:13:a0:80:15:4e:dc:59:40:d1:da:1c:19:
6a:46:b1:57:a2:40:b0:80:4e:e2:45:14:32:04:83:6b:42:c1:
04:42:c5:02:82:f8:17:ee:0f:96:4a:e2:ce:ae:68:10:ea:1e:
c4:09:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:19:01 2026 by rpki-client