Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
File: HfLwyYo1F0lsTGnMiSvv68JYXOw.mft (raw, json)
Hash identifier: RVJSxp/sq6RdS4REvJnNUHWUPV6ya3UG8GjzYsI8kn0=
Subject key identifier: 85:28:A1:7A:80:FE:6B:FE:3B:8B:CC:AC:87:A6:30:E5:7C:24:BC:92
Authority key identifier: 1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
Certificate issuer: /CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Certificate serial: 01A06E397FD7FD9341BA4E89DC813D8A2282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
Manifest number: 3B
Signing time: Fri 04 Sep 2026 21:00:57 +0000
Manifest this update: Fri 04 Sep 2026 21:00:57 +0000
Manifest next update: Sat 05 Sep 2026 21:00:57 +0000
Files and hashes: 1: HfLwyYo1F0lsTGnMiSvv68JYXOw.crl (hash: vlq8akFwHoY3Crx/lFFBSS8HYhl5gqBsBygzNW6LKTk=)
2: pF9l91nD4u4wuf9MIQZvNcyh7JY.asa (hash: TVK8vGJ0DAiyKHB2yGjjbKMnxxCTa0TY3LOzLh2udVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:7f:d7:fd:93:41:ba:4e:89:dc:81:3d:8a:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Validity
Not Before: Sep 4 21:00:57 2026 GMT
Not After : Sep 5 21:00:57 2026 GMT
Subject: CN=8528a17a80fe6bfe3b8bccac87a630e57c24bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:52:f8:f2:c5:a9:32:5f:cf:3c:9d:6f:3a:
24:5b:fe:90:ad:24:af:31:e1:88:cc:12:7a:6d:f4:
73:46:16:91:a3:79:b8:69:a2:2c:48:f0:7f:79:e2:
b7:2e:20:89:f2:32:9b:a8:ae:75:31:f2:fa:fd:6e:
09:db:32:f1:2a:4f:12:33:e1:5c:de:a7:0f:72:41:
ee:e7:00:d5:95:1a:0b:83:7d:a1:88:06:c4:dd:80:
2f:b8:58:8f:69:0f:1b:bc:88:d3:fc:a7:77:2f:4c:
33:f5:93:d3:c0:34:ad:09:6a:cb:1b:11:ea:33:5d:
5b:90:08:78:a8:b6:45:26:8d:7f:33:60:af:d2:a0:
14:75:9e:ab:95:9b:67:bf:50:16:4a:8b:c9:ec:41:
9d:05:e2:fd:3b:92:19:f3:96:d4:21:91:d4:d3:1b:
c0:45:2a:96:e1:9a:31:85:11:b7:ab:cc:24:80:2e:
b6:93:ed:b7:a4:ba:71:b2:e8:6b:0c:9d:16:a9:fe:
13:ee:62:f3:97:5f:61:39:f5:ce:a8:fa:69:53:58:
aa:25:45:1a:44:b9:d9:11:7f:19:54:d5:d9:99:aa:
96:4e:b1:3b:b8:a2:3e:34:7e:ae:a5:71:da:29:f6:
0e:af:76:f3:0c:f0:9a:e2:ca:b7:78:7d:ef:94:68:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:A1:7A:80:FE:6B:FE:3B:8B:CC:AC:87:A6:30:E5:7C:24:BC:92
X509v3 Authority Key Identifier:
keyid:1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d5:8d:e0:0b:be:88:97:aa:92:87:99:b5:19:f4:f1:72:cc:
d9:ed:9a:8c:ac:e4:12:90:e8:04:3a:af:01:37:6d:22:cd:3b:
4f:e6:47:c6:de:b1:84:71:24:b5:a1:aa:71:3b:19:a9:20:b4:
17:e8:a8:a2:53:4e:5a:35:af:f2:15:51:89:9b:b4:2b:35:2c:
ba:ef:5f:b6:11:c1:dd:4c:69:54:72:c2:c9:07:e3:54:69:24:
d7:37:44:90:38:c6:1d:7e:7d:8a:9b:52:e9:14:fd:3f:40:4f:
39:f9:b8:86:5a:51:12:ce:c4:24:42:db:72:1c:16:1b:87:e9:
00:ff:88:23:ae:e7:44:55:7f:28:14:93:cd:99:6d:00:6c:0e:
3b:78:49:30:de:36:a6:ec:ca:b7:5f:30:62:42:33:77:35:ca:
4e:ab:da:da:ed:d2:30:d4:3f:a6:6f:84:50:3b:2c:64:39:10:
37:df:40:89:c7:b1:c5:77:fa:11:60:12:58:eb:0a:da:5e:2a:
f7:c3:cd:c1:e8:71:ea:a8:90:c8:f5:0e:b8:dc:da:0d:01:cb:
06:dc:8e:a4:f0:7e:03:5f:16:e9:c3:dc:ab:1d:6f:b8:60:ad:
37:0d:98:dd:28:1a:1d:16:80:d1:83:e3:b2:87:37:85:8b:c0:
a6:25:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:20 2026 by rpki-client