Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: 3jdoUR/DzAA85jpCo6lqAYRjAaYLzifEGQ3bUAePLWc=
Subject key identifier: D5:74:F7:75:CD:82:55:69:F7:AF:92:6A:26:D6:30:8C:46:E2:62:A9
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 01A1291F63C1C5BFEF9C2CF8B2B762DA6A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 180D
Signing time: Sun 11 Oct 2026 04:01:25 +0000
Manifest this update: Sun 11 Oct 2026 04:01:25 +0000
Manifest next update: Mon 12 Oct 2026 04:01:25 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: ss9alLpFtUr5pa3G4mYqt3pWCqfCycpmURFdb0YKHz8=)
2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:63:c1:c5:bf:ef:9c:2c:f8:b2:b7:62:da:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Oct 11 04:01:25 2026 GMT
Not After : Oct 12 04:01:25 2026 GMT
Subject: CN=d574f775cd825569f7af926a26d6308c46e262a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:dd:68:aa:b7:2d:d1:6d:5f:7a:b3:48:c3:
0e:e2:4a:13:4e:b6:39:1a:61:e7:94:10:f0:6c:51:
6e:e9:ae:da:dc:8d:d0:2f:57:d7:81:92:4b:06:90:
30:8e:af:8f:f1:45:07:b1:c9:1f:55:8c:53:3d:7c:
1e:7b:ba:8a:96:7c:f9:08:61:30:97:7f:8b:8a:81:
81:e3:78:3f:4c:1d:a1:12:3e:cb:df:19:ad:da:d5:
91:09:96:1c:86:7e:0b:01:c0:04:fd:f4:b2:7e:2a:
63:94:f6:16:8e:32:2e:13:35:b5:ef:9b:d1:d8:19:
62:65:62:e5:55:79:2a:85:49:9f:bb:6d:fd:5b:27:
ad:b5:b6:ae:b1:e6:4b:c8:62:c1:31:d0:92:87:a8:
52:db:d8:51:69:06:15:4f:96:c2:d6:16:8d:20:ae:
b2:84:0c:45:64:42:db:0d:b2:c3:aa:71:1e:59:66:
8c:0d:bc:b5:46:d2:5b:06:83:ed:f0:a6:d0:3b:d3:
9b:96:c0:65:01:e3:f3:b5:4c:50:6f:52:ef:ae:fb:
6b:69:b9:8e:71:80:f3:66:97:8e:a1:63:a5:32:cb:
5e:b2:5a:f5:81:8a:71:61:f0:9b:1b:12:df:0b:d8:
27:8c:7a:84:60:51:6f:38:0a:90:99:84:be:e2:e9:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:F7:75:CD:82:55:69:F7:AF:92:6A:26:D6:30:8C:46:E2:62:A9
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:65:89:c7:32:9d:c9:35:05:27:f6:1e:db:42:8f:7d:bc:
09:81:25:b4:15:75:44:de:99:96:a7:5f:90:f8:69:76:2c:53:
cc:21:0a:bf:33:4a:97:de:f1:88:b7:f3:a1:e0:06:8d:f8:b6:
2a:fc:4b:4d:53:3d:2f:6a:b7:71:14:26:3c:fa:a7:64:3d:cf:
50:72:d1:3b:a0:b3:5f:70:19:b1:71:03:e3:88:33:93:49:e0:
3a:ab:1c:0a:24:82:de:5d:d9:f1:80:88:72:44:8c:1b:92:95:
5e:9b:c8:6c:50:b9:66:72:86:ac:ba:a1:86:3c:a9:cb:f8:48:
f6:8a:6f:0d:3c:f8:67:41:46:56:85:99:4c:da:bc:82:ad:8f:
c2:dd:3c:df:15:89:6d:6f:eb:b1:51:6b:67:92:ea:2c:e0:05:
e6:35:8e:c0:a4:4c:66:95:62:16:ee:d9:56:11:34:16:7d:d1:
ba:c0:7d:db:17:40:3a:3b:d1:4c:e0:f1:42:23:c0:de:f7:e9:
f3:5e:22:fa:ce:a0:60:86:da:3e:29:da:a9:05:61:91:2c:5c:
f2:42:73:8b:af:dd:61:8b:05:01:12:39:b0:0c:92:d8:87:07:
4d:e2:82:c9:94:e5:d0:d0:66:bf:cf:cd:96:3b:27:65:e7:8e:
c4:85:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:44:05 2026 by rpki-client