Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: d7MRQM3/HTcQo3C3HddlrbrAw4Mowjmkov+feTRdeAw=
Subject key identifier: E1:B8:94:67:32:3A:60:CC:F9:A0:CF:8D:A9:7C:86:55:5C:09:4D:86
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 01A0DC16F4A7B94D2EB07A0DC4FACBEB8CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 05:01:26 +0000
Manifest this update: Sat 26 Sep 2026 05:01:26 +0000
Manifest next update: Sun 27 Sep 2026 05:01:26 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: Wf4xxFnFHuVlP1zd/r6PNreqXu8qTxKFDH36ycmFK6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:f4:a7:b9:4d:2e:b0:7a:0d:c4:fa:cb:eb:8c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Sep 26 05:01:26 2026 GMT
Not After : Sep 27 05:01:26 2026 GMT
Subject: CN=e1b89467323a60ccf9a0cf8da97c86555c094d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:61:20:0c:ee:cc:9e:1d:51:b3:4c:48:35:
f5:89:10:20:41:b0:e3:75:c0:28:60:2b:8c:06:d5:
80:3e:27:aa:52:10:b8:e2:24:1a:05:88:84:97:5d:
36:f7:d8:05:f2:4f:a2:b4:d2:26:39:c3:d8:a0:43:
e9:8b:95:18:33:e0:c5:00:78:5a:79:8b:38:28:e6:
18:b6:8f:50:d3:7b:06:34:e8:ca:9a:1f:1a:a7:fd:
b9:a9:6a:4f:e4:de:59:da:e0:aa:eb:c7:3c:67:42:
ed:3f:eb:e1:fa:80:0a:a1:3c:8a:77:87:aa:28:1e:
81:bc:29:b0:8b:eb:ea:93:94:7c:e0:2d:22:5a:e7:
28:0f:ca:2b:75:d5:da:84:fc:ea:d9:78:f4:3c:c8:
26:b2:9a:18:0d:0d:88:d7:9b:f6:5d:c2:1c:ac:ce:
24:f0:3d:04:f4:ab:81:67:4f:fe:1a:82:bf:e1:e8:
62:0f:00:73:0e:ca:3c:3d:e3:40:6c:b8:f7:fd:0d:
44:59:66:74:9e:38:16:dd:d2:08:6f:0b:57:35:45:
3f:ce:70:02:e2:f7:58:50:b4:49:69:da:e8:40:e8:
0b:38:22:d9:03:b3:24:3d:2d:10:63:71:e8:bf:ed:
18:25:e2:bd:a3:23:a9:3f:f7:98:9a:10:63:13:92:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:94:67:32:3A:60:CC:F9:A0:CF:8D:A9:7C:86:55:5C:09:4D:86
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:77:dc:72:46:9a:54:d4:7b:52:83:7f:8b:db:6f:38:cd:
07:6a:2d:ca:f8:52:8c:1b:90:e9:ff:3c:d7:b0:28:66:3e:d8:
6c:e3:a1:26:de:b9:f8:8b:9d:ba:06:ec:3a:0e:39:c7:77:32:
69:fc:74:17:71:c8:d9:ba:84:93:79:9c:e6:ea:df:fd:43:08:
5d:72:07:44:ea:a1:4e:58:c5:f4:b9:74:9b:6e:da:84:bc:5c:
47:8a:f0:59:33:65:a1:41:07:6d:f4:aa:a2:5d:1a:48:f0:b2:
41:58:6d:a0:b2:60:91:b8:e2:c6:f6:1d:cf:c8:99:76:e0:56:
1e:6a:cc:07:33:25:b3:26:52:4a:58:a2:d9:8d:91:77:eb:ca:
94:e5:49:fd:b2:da:0d:53:67:2d:61:0c:35:48:e3:11:9a:3d:
fb:f7:9a:7e:09:41:af:0c:3e:c6:03:9c:7a:d5:c5:28:a3:12:
9f:de:4c:b0:a7:b4:b1:49:12:9a:28:92:a1:3c:18:61:a8:b1:
6e:66:47:93:9e:66:2b:2f:2b:f6:87:18:9e:a7:94:f8:89:03:
c7:af:91:2e:1c:d7:5d:2a:f1:20:2f:b9:c0:b9:2d:ab:b5:99:
9d:0f:f8:b6:e7:12:4c:04:4f:19:69:16:18:39:98:86:9e:69:
1e:9e:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:41:23 2026 by rpki-client