Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: nCPk69SLaFlecoICLKL86yYUyPGVdeS/YntoS5LAS3o=
Subject key identifier: 84:A7:EF:E9:1A:56:0E:7E:13:AA:B0:D0:93:3E:D2:91:F8:ED:E1:10
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 01A12241AED607D7FCD5B20A34F7136859B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 1403
Signing time: Fri 09 Oct 2026 20:01:32 +0000
Manifest this update: Fri 09 Oct 2026 20:01:32 +0000
Manifest next update: Sat 10 Oct 2026 20:01:32 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: qBIt91pTjJ1+pnWR1hE4fq/Cr44yuFEaRnLRPr1DSEs=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:41:ae:d6:07:d7:fc:d5:b2:0a:34:f7:13:68:59:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Oct 9 20:01:32 2026 GMT
Not After : Oct 10 20:01:32 2026 GMT
Subject: CN=84a7efe91a560e7e13aab0d0933ed291f8ede110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:73:fc:03:cc:e7:c3:05:42:20:6b:e2:d9:
0b:38:d3:54:f7:e6:bf:fa:21:75:44:b2:5b:48:55:
15:8a:5e:8a:7f:73:bb:81:05:e5:69:98:4a:37:f8:
ef:c2:63:8e:e7:b4:1b:09:eb:79:c4:b2:16:44:76:
2f:05:02:6f:82:80:35:8b:41:43:49:6d:ae:26:35:
20:4e:30:62:ef:5c:a6:ad:8e:1a:be:e4:7a:69:23:
b1:e0:bf:a1:40:42:c5:1f:10:8a:62:85:d0:3f:50:
1a:b3:fe:3f:6f:9e:a1:fa:91:90:ae:7f:9e:47:0d:
55:b2:29:30:38:29:c9:f8:e3:68:6f:5a:f2:01:30:
f9:96:b5:fe:fc:53:23:17:db:93:79:af:c5:e7:86:
f1:c3:62:94:20:04:6f:fe:8c:4d:8d:65:1c:3d:b0:
63:fb:83:91:cf:03:84:90:cc:4b:78:4a:e9:dc:35:
1e:43:b2:76:65:f1:04:ef:eb:f2:20:f0:42:9a:1d:
93:f7:35:76:bb:8a:38:fe:bb:ca:0d:7c:a8:8d:36:
ed:c0:1e:ef:ef:8a:b5:85:ac:c1:ad:d6:31:91:24:
d3:0b:b2:20:1f:0e:2f:99:65:5b:9b:01:97:46:88:
cf:08:f3:9d:d4:03:fe:d6:78:1a:d7:4f:e2:b2:6b:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:EF:E9:1A:56:0E:7E:13:AA:B0:D0:93:3E:D2:91:F8:ED:E1:10
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:5d:25:2f:cc:29:0b:62:1e:0f:60:77:12:50:d6:19:fe:
56:18:f2:74:8d:16:d6:7c:2d:21:5b:b5:f2:2b:a4:98:71:f6:
8b:37:36:6e:97:0b:e4:87:c1:40:68:42:b6:2e:46:b6:c7:95:
87:a6:ed:d4:90:e2:8b:92:01:4f:c7:ed:5a:ed:b0:50:bd:fc:
f4:2e:6e:47:14:82:b4:ff:1d:85:fa:36:ff:d7:06:39:40:42:
65:29:d3:85:d6:51:de:dd:52:23:03:65:df:fa:6b:58:3e:2d:
79:bd:25:73:6d:52:a6:62:e2:05:85:a8:0e:8c:02:41:ec:0d:
ac:84:13:5c:eb:6f:d9:89:a4:8b:ee:08:2d:ff:6a:a7:97:8e:
c2:f0:a8:81:43:cd:ba:91:16:d9:46:f9:85:00:4b:34:e4:51:
69:76:bd:ee:9b:08:5b:b1:48:db:11:99:97:f6:ba:54:41:af:
3e:2b:2b:6c:6d:81:25:8b:6b:8b:2a:b4:1c:32:ee:7d:b0:ed:
dc:60:c3:6e:7b:8f:01:dd:f6:58:6f:87:61:3e:f6:dc:f1:37:
79:14:63:80:e3:d6:21:79:2b:09:25:16:43:f7:b0:2e:cd:a6:
dd:2c:23:a3:9f:73:f7:bb:21:75:cb:9d:f5:9c:24:4e:5f:e5:
95:b4:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:24:42 2026 by rpki-client