Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
File: HitHgD4Tf9WetFz67ZNixDAxjt4.mft (raw, json)
Hash identifier: z6bGrWAaGRvGPYRw0BLC55uIuBIL4clqVBAMo8/tq1Y=
Subject key identifier: 1A:D4:65:96:F7:DE:96:29:A8:19:9C:5D:D3:61:3F:AC:4C:3E:B7:E9
Authority key identifier: 1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
Certificate issuer: /CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Certificate serial: 01A17FD046E18AC6800D4A02843A25789F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:58 +0000
Manifest this update: Wed 28 Oct 2026 00:01:58 +0000
Manifest next update: Thu 29 Oct 2026 00:01:58 +0000
Files and hashes: 1: FAKw80vpI-mpfVtupkmvFk-yZPI.roa (hash: 473+Mp3hmze1LQyjXKCCeGguRS7ioXSZyLlwQX5dUjI=)
2: GZxpNzGC-1BStPRxl0AuXHTYpms.roa (hash: N5+X5onvfO8vCXWo09NVsFmRf/WIuQPxs6kWhVhvR6c=)
3: HitHgD4Tf9WetFz67ZNixDAxjt4.crl (hash: 5dc91h2Wxh+M/2QDKsF8WT1FUqhRIOZK/4yTbCPFrs8=)
4: LRl7tzJxtNnx97ijDx7oqU2JGxE.roa (hash: 7BTG2mL/bSNfXC71H09Is4jffKot0dA2702ucToT2e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:46:e1:8a:c6:80:0d:4a:02:84:3a:25:78:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Validity
Not Before: Oct 28 00:01:58 2026 GMT
Not After : Oct 29 00:01:58 2026 GMT
Subject: CN=1ad46596f7de9629a8199c5dd3613fac4c3eb7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:4f:5a:0c:b6:95:a7:7c:17:2b:44:bb:5c:
33:1c:47:34:a7:e2:d4:27:19:70:36:39:a9:3d:8e:
7c:e3:00:e4:ad:04:4a:ef:eb:ba:ca:c8:53:a8:34:
2a:4a:b3:a7:f3:6a:2b:07:39:32:99:f9:9b:a3:10:
08:f5:bb:1f:3b:d3:2e:a1:49:19:a8:eb:0a:19:7b:
bb:8b:f5:52:4b:15:6c:c8:77:68:39:9f:21:04:9b:
5c:1a:b9:22:4c:22:d5:46:8a:fb:08:c9:fc:64:9e:
92:7f:fb:73:26:e4:50:ed:70:be:c7:25:61:4c:f0:
ad:fc:d3:32:68:48:94:ea:43:ee:42:77:d6:c2:f4:
1c:22:3a:8b:1e:62:d8:66:14:c5:6c:bc:01:98:18:
95:99:65:d4:78:47:9c:f3:52:ee:79:a3:91:3a:98:
46:64:15:6f:9b:b7:85:10:6f:ac:29:1b:bd:f1:1e:
3f:70:c0:bf:84:c2:52:5c:f7:f2:cc:eb:58:aa:9b:
d6:b4:73:c4:c0:79:b6:01:7f:e2:dd:d8:52:b7:0f:
54:84:ff:4e:13:b7:c0:5a:eb:ed:a1:ad:9a:f4:91:
ab:fd:8e:bb:81:3b:04:11:04:81:25:7b:15:a6:66:
e8:e6:89:c9:9d:9a:ee:d1:1f:df:4b:3e:06:66:12:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:65:96:F7:DE:96:29:A8:19:9C:5D:D3:61:3F:AC:4C:3E:B7:E9
X509v3 Authority Key Identifier:
keyid:1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:85:9a:6b:03:64:36:c8:d0:ce:b7:7d:ba:76:a9:66:2e:df:
d6:c3:3b:16:b7:f7:18:5e:2f:53:f3:8f:0a:3d:0b:55:be:ed:
55:57:a4:b5:2f:68:6c:c5:fd:09:e2:8a:cc:50:cf:66:c8:86:
3c:a8:63:4b:2b:8c:b9:c6:58:f5:f5:2a:b0:ea:7b:df:8e:2c:
42:26:e9:5f:f1:64:34:04:bf:db:e8:b4:29:b7:77:ba:16:41:
33:96:b8:b2:c1:fa:46:a1:81:52:55:fe:26:38:f1:ff:97:2a:
61:3a:16:01:ec:5a:f0:f4:22:c5:04:0d:13:4b:97:3f:89:97:
2b:5d:0a:d6:3b:7b:e4:cd:32:cb:51:ac:39:5e:d2:ca:8f:65:
07:a8:94:17:e1:8a:fc:c4:15:dc:22:6e:d8:19:d2:ad:e7:19:
2f:6c:78:5d:bd:04:81:ca:fd:3a:35:3e:d3:26:f7:ec:cb:4c:
da:28:b6:46:c6:22:6a:fb:fe:34:d8:a7:74:1c:1e:b1:c7:76:
12:b1:5b:02:f5:df:bb:b0:ad:f1:f1:72:0d:0d:ed:44:9f:ae:
9d:74:6c:d9:7a:32:06:aa:d8:29:9d:92:68:84:19:49:14:2a:
7b:93:fa:55:aa:f5:63:4b:c9:2c:cb:69:4c:67:d0:33:53:9a:
3c:41:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:51:56 2026 by rpki-client