Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: 6SJY2DgTSEn5LJCXRnz1EfbKSJSKY42jb4AmbI8Gzcs=
Subject key identifier: 3B:C2:6B:CE:DF:F4:89:E8:F2:1D:FC:FD:5A:18:C3:93:8D:EB:BE:59
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 01A18006BD130A1DC32C61FD0BAFA83773A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 04A8
Signing time: Wed 28 Oct 2026 01:01:27 +0000
Manifest this update: Wed 28 Oct 2026 01:01:27 +0000
Manifest next update: Thu 29 Oct 2026 01:01:27 +0000
Files and hashes: 1: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (hash: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: 0+qvBJyCiofgG0v4737JT8KFZIEL6+wKH7ggG+oq2Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:bd:13:0a:1d:c3:2c:61:fd:0b:af:a8:37:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Oct 28 01:01:27 2026 GMT
Not After : Oct 29 01:01:27 2026 GMT
Subject: CN=3bc26bcedff489e8f21dfcfd5a18c3938debbe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:66:b8:12:73:6f:b2:1f:2f:5e:01:d2:4f:
6e:64:cb:f5:c9:db:2e:29:37:ce:59:c6:8c:5d:77:
17:22:00:bd:7f:e2:75:a1:10:8d:84:17:94:c5:bb:
b2:cb:43:22:19:d9:7e:69:20:2c:62:19:82:3c:bf:
4b:4f:f4:29:3a:26:bd:cb:e2:bb:e2:93:34:fd:25:
3a:cf:5e:d7:9a:6f:bb:34:25:c1:74:cc:5e:23:e3:
13:68:f3:d4:cd:4e:fb:ae:27:3d:65:31:89:4c:c9:
e0:25:24:85:c2:38:bd:e3:c8:cb:86:53:e6:c3:cc:
83:49:5f:e2:d4:7b:8e:51:4a:56:bc:4d:11:aa:dc:
8d:45:1a:d2:17:70:8d:87:52:a7:e5:1f:52:2f:a9:
f5:5f:79:c6:15:4d:0f:9f:9f:a3:70:bf:47:8d:36:
b2:01:db:8a:95:da:34:b3:09:1f:7b:3b:b8:e0:e0:
a6:0f:1f:58:5d:6f:02:01:e7:1e:f2:af:b3:ce:83:
e6:12:14:67:02:15:62:03:b9:ca:ec:fd:1b:c1:b0:
c5:d0:cc:4d:4f:5f:e7:1b:b8:ca:fa:63:38:75:8d:
fa:5a:d4:ea:6e:6b:7f:5e:95:60:c2:bd:b4:79:1a:
fe:cf:6a:34:f0:64:5f:1f:93:d8:6d:17:66:49:48:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:6B:CE:DF:F4:89:E8:F2:1D:FC:FD:5A:18:C3:93:8D:EB:BE:59
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ae:2c:04:7a:23:b6:67:6c:5a:8c:3f:11:71:9c:9d:95:52:
cb:24:c6:9a:4f:c8:16:c8:ec:2d:a8:52:6d:5b:c1:1d:df:3c:
23:2f:0d:bd:1e:82:31:1d:6e:f5:85:49:1c:85:f4:1d:1d:93:
c4:98:ce:64:12:5c:50:bd:90:bd:c2:62:93:01:ab:74:d3:52:
d1:88:3f:5b:cf:c4:53:33:0a:fd:75:2a:b2:6e:19:57:2f:7e:
f7:28:1c:c0:6d:71:34:ab:f5:e7:cd:23:31:c7:69:95:7d:ab:
9e:31:db:ee:ac:60:af:59:e3:66:c2:f6:71:7b:de:48:c8:f5:
82:69:14:19:44:aa:55:f0:4c:75:e5:47:5e:ce:34:33:84:57:
46:c2:62:15:1a:5d:0c:7b:b4:82:ca:c1:39:0f:bb:a8:d7:0c:
d0:ae:ae:aa:c1:e8:68:7a:4f:38:82:74:cb:5b:5d:aa:00:da:
20:24:df:fc:b5:b6:84:66:38:bc:ea:f3:41:2c:26:1f:4d:82:
f5:f8:70:c4:c2:98:ce:a3:3b:11:dd:44:fa:2b:26:c7:39:3f:
6d:c2:3f:1b:2d:9a:45:6c:cb:35:54:d8:06:e8:36:d5:01:68:
b3:93:d3:f5:5d:0d:28:ae:4f:31:9b:ba:81:24:d7:f1:e5:ff:
b6:eb:48:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGABr0TCh3DLGH9C6+oN3OlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5
ZDI5MTYwHhcNMjYxMDI4MDEwMTI3WhcNMjYxMDI5MDEwMTI3WjAzMTEwLwYDVQQD
EygzYmMyNmJjZWRmZjQ4OWU4ZjIxZGZjZmQ1YTE4YzM5MzhkZWJiZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzVmuBJzb7IfL14B0k9uZMv1ydsu
KTfOWcaMXXcXIgC9f+J1oRCNhBeUxbuyy0MiGdl+aSAsYhmCPL9LT/QpOia9y+K7
4pM0/SU6z17Xmm+7NCXBdMxeI+MTaPPUzU77ric9ZTGJTMngJSSFwji948jLhlPm
w8yDSV/i1HuOUUpWvE0RqtyNRRrSF3CNh1Kn5R9SL6n1X3nGFU0Pn5+jcL9HjTay
AduKldo0swkfezu44OCmDx9YXW8CAece8q+zzoPmEhRnAhViA7nK7P0bwbDF0MxN
T1/nG7jK+mM4dY36WtTqbmt/XpVgwr20eRr+z2o08GRfH5PYbRdmSUjgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvCa87f9Ino8h38/VoYw5ON675ZMB8GA1UdIwQY
MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt
MWE0MmY2MzJjMzA3LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3
LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK4sBHoj
tmdsWow/EXGcnZVSyyTGmk/IFsjsLahSbVvBHd88Iy8NvR6CMR1u9YVJHIX0HR2T
xJjOZBJcUL2QvcJikwGrdNNS0Yg/W8/EUzMK/XUqsm4ZVy9+9ygcwG1xNKv1580j
McdplX2rnjHb7qxgr1njZsL2cXveSMj1gmkUGUSqVfBMdeVHXs40M4RXRsJiFRpd
DHu0gsrBOQ+7qNcM0K6uqsHoaHpPOIJ0y1tdqgDaICTf/LW2hGY4vOrzQSwmH02C
9fhwxMKYzqM7Ed1E+ismxzk/bcI/Gy2aRWzLNVTYBug21QFos5PT9V0NKK5PMZu6
gSTX8eX/tutI8w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:32:40 2026 by rpki-client