Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: gS0CYH2SDslnUz27/EcjsLLxDv05Wlz/UOqWV1WdJ+w=
Subject key identifier: 1B:30:A6:B3:F1:13:54:88:AC:2B:4B:CE:DD:CC:7E:27:2D:1B:9D:E9
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 01A19054A0E0160997D3FCF971FCCF56A8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 17BC
Signing time: Sat 31 Oct 2026 05:00:27 +0000
Manifest this update: Sat 31 Oct 2026 05:00:27 +0000
Manifest next update: Sun 01 Nov 2026 05:00:27 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: WBitRvCnSHsW0fqBed1kwETsv6e6k08Tl0A9PH2QKRE=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:54:a0:e0:16:09:97:d3:fc:f9:71:fc:cf:56:a8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Oct 31 05:00:27 2026 GMT
Not After : Nov 1 05:00:27 2026 GMT
Subject: CN=1b30a6b3f1135488ac2b4bceddcc7e272d1b9de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:2a:7f:d7:6b:09:47:81:9a:de:5e:ea:16:
2b:54:c0:e5:8d:a4:53:ca:08:2b:e6:83:d4:40:9a:
a6:0a:fc:e7:7c:5d:88:46:af:bf:74:b6:e2:ce:28:
8e:5c:ba:ba:66:c5:84:dd:5e:e0:c6:2f:ca:8e:df:
c7:da:b6:fa:17:03:3a:b3:84:cf:66:bd:74:f9:6a:
34:0c:44:c8:c7:81:43:d8:a2:2b:d0:e9:bd:77:8d:
b3:b8:b3:58:ea:7c:7d:42:4a:19:c9:76:55:77:d4:
0a:95:2d:4c:f1:c8:b0:10:ba:cf:a1:ce:dd:18:6b:
de:b6:91:ce:00:e8:b8:5b:2d:59:35:09:54:e1:39:
8c:d5:3e:9b:ea:7e:61:76:29:1e:5a:4d:83:e6:96:
1c:8a:1e:03:19:07:c2:aa:b5:45:ed:2f:ca:fa:2c:
99:b4:a4:0b:22:85:e7:ed:10:54:a8:ef:6d:4e:99:
21:e8:41:1f:2c:bc:30:81:4e:61:a1:32:fd:e3:f0:
b9:83:82:89:78:07:30:e1:10:1c:21:e1:c6:e9:b3:
a9:eb:af:c7:64:82:58:69:4f:51:ae:0b:b4:bb:5a:
de:03:d5:c3:24:6e:bf:ab:4b:db:56:7c:5e:25:fa:
74:99:c0:26:ea:e2:97:83:09:ff:b4:89:7c:35:12:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:A6:B3:F1:13:54:88:AC:2B:4B:CE:DD:CC:7E:27:2D:1B:9D:E9
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:03:2b:48:83:6b:ca:d9:15:fc:6b:0a:cd:2c:f4:b5:31:
77:d0:61:a7:33:19:42:b0:a3:f7:66:bf:d9:aa:90:94:e7:63:
41:e6:6a:c7:29:68:8b:6d:a6:29:ba:a2:2a:10:24:14:92:6f:
60:cc:e2:54:a3:f4:27:45:55:4d:36:9b:45:63:86:1c:c6:b7:
e1:d5:73:1e:c7:12:6b:30:94:e6:8e:33:e2:18:a8:ac:88:fe:
46:0b:bc:21:25:3d:30:2b:a2:60:c7:f5:d7:e0:6a:a6:b0:88:
c8:01:b2:ff:f9:e5:2f:02:c8:f8:72:5f:4f:1d:f1:87:41:37:
c8:d2:be:7c:13:44:98:f8:a4:f4:49:3f:6d:c2:49:14:46:db:
74:b7:96:07:c7:91:0f:91:dc:12:12:e3:f3:5b:90:3f:13:54:
9b:64:45:8e:da:1e:b1:ab:0d:85:9b:df:ec:89:d5:22:22:ad:
f1:bc:29:55:df:1a:5e:e8:1e:ba:80:6f:7c:30:e4:5b:32:2b:
13:1c:b5:dc:a6:59:c6:0b:f2:cf:3f:15:24:5a:f0:dd:41:96:
0b:5b:32:a1:44:02:2f:10:dd:7d:1b:f5:48:bd:f2:a1:a5:d2:
ea:83:54:63:7f:9a:ad:9c:50:ff:43:11:3e:81:d8:db:5a:f5:
a9:d5:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:00:10 2026 by rpki-client