Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
File: HfLwyYo1F0lsTGnMiSvv68JYXOw.mft (raw, json)
Hash identifier: M/+VT9cSsQEGTyVr1a8lwDCfGrBJ6uPxDLD/kW3Rip8=
Subject key identifier: 64:6C:25:CB:B9:6F:79:D3:E1:BF:D1:DC:6D:BB:EB:BA:1D:BF:7A:18
Authority key identifier: 1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
Certificate issuer: /CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Certificate serial: 01A0C52053C419303D24746ED96007BF5BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
Manifest number: 68
Signing time: Mon 21 Sep 2026 18:00:25 +0000
Manifest this update: Mon 21 Sep 2026 18:00:25 +0000
Manifest next update: Tue 22 Sep 2026 18:00:25 +0000
Files and hashes: 1: HfLwyYo1F0lsTGnMiSvv68JYXOw.crl (hash: 5ihLKWAf4PDOgy3EU9msltO9wMnzZaAmJvOGWUhClNo=)
2: pF9l91nD4u4wuf9MIQZvNcyh7JY.asa (hash: TVK8vGJ0DAiyKHB2yGjjbKMnxxCTa0TY3LOzLh2udVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:53:c4:19:30:3d:24:74:6e:d9:60:07:bf:5b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Validity
Not Before: Sep 21 18:00:25 2026 GMT
Not After : Sep 22 18:00:25 2026 GMT
Subject: CN=646c25cbb96f79d3e1bfd1dc6dbbebba1dbf7a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:35:e2:43:4a:b5:de:17:2d:93:ae:8b:bf:
6a:4e:01:23:f0:5e:5b:e6:48:cc:42:0c:c4:31:24:
a2:53:e3:2f:df:8d:30:b9:05:8b:6d:b5:85:02:18:
35:a8:3b:0e:a6:e6:87:0c:1c:a4:e3:2d:1f:0f:68:
93:ea:25:16:4c:ac:7f:cc:26:80:73:99:7a:67:7c:
5d:00:a7:f0:0a:51:b0:5f:1d:b3:78:14:6e:73:c2:
73:e3:e3:85:8f:b9:e7:91:cc:37:3f:3b:11:06:99:
e5:c7:07:15:b3:dd:e7:9d:7e:9e:2e:3e:7e:4f:a1:
db:b5:7e:c8:4f:5b:6d:1e:09:7a:a8:f6:38:b0:af:
e6:b1:6a:ef:c1:86:ec:96:c6:f1:e8:c8:7b:b6:27:
d2:81:ee:5b:c3:86:cc:b7:c1:fe:56:f2:28:5b:a2:
16:0f:36:de:9d:fb:49:82:12:ae:ce:78:7c:72:b1:
26:bc:8d:6c:5d:e7:8e:a4:1e:9d:e7:92:89:15:92:
fe:64:0b:55:d5:b7:67:fc:29:30:61:dd:f4:b3:f6:
5d:03:52:4b:b0:23:df:ca:6b:2a:7c:1b:d5:a7:15:
34:d5:94:ed:bf:89:f7:5b:4c:15:04:4b:ab:1d:61:
20:98:d7:65:59:7c:a0:fe:2e:df:2a:ef:d4:a8:a3:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:25:CB:B9:6F:79:D3:E1:BF:D1:DC:6D:BB:EB:BA:1D:BF:7A:18
X509v3 Authority Key Identifier:
keyid:1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:95:f2:7b:bc:d5:4d:35:b4:9a:14:c7:e5:f0:a3:f2:1f:9a:
fa:9a:d4:72:4a:40:73:4b:45:dc:59:0d:f2:30:9e:b6:85:51:
6a:46:8f:9b:b2:8c:0a:cd:13:56:b9:54:38:a5:fc:e0:33:6d:
03:89:d6:d0:85:dd:2a:d5:ee:8f:85:02:48:79:e6:93:5d:1a:
20:1d:d2:59:75:cb:3c:df:da:89:72:f1:22:0e:76:10:76:3f:
40:cf:33:30:0c:9f:2b:92:ce:6a:81:51:9a:45:e8:f8:0d:9f:
30:1e:cd:ba:e6:41:24:d5:83:75:8b:34:f5:90:cc:c7:62:ec:
b9:c4:4f:ed:26:e3:16:ca:68:42:d8:15:9e:18:5c:2f:ee:4c:
b9:69:78:73:57:f4:d2:81:81:2d:b1:0f:dc:3a:41:0e:48:4d:
35:a1:9a:8f:cc:66:b4:4b:4c:f6:27:10:ab:d6:fb:72:bb:05:
61:22:0a:97:f9:c2:4c:cd:ef:b3:b6:69:ed:9d:8b:6a:39:cf:
4a:91:0f:d4:e4:73:3f:26:46:8c:34:2c:54:a4:76:f7:0c:b9:
8f:9c:e9:87:ea:0d:5d:20:16:89:fe:6d:f1:30:61:e3:12:99:
44:c0:c1:e8:52:b4:57:ba:79:be:72:4f:b6:40:e7:ea:4f:de:
40:36:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:25 2026 by rpki-client