Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: iHA5JX2Mcq3KB5nKNHo4fS9+WsWmvGlxACFXNnMcqes=
Subject key identifier: 1F:46:77:9C:BE:12:82:25:F2:31:01:C8:D3:11:40:9C:B1:62:9E:4D
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01A159D4E5562A7B1BCBA07E7559AE7245C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 05D6
Signing time: Tue 20 Oct 2026 15:01:26 +0000
Manifest this update: Tue 20 Oct 2026 15:01:26 +0000
Manifest next update: Wed 21 Oct 2026 15:01:26 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: etR859dm0S6GLIEd1psCRCltarXnWZ/1W4eXLRnU42E=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:e5:56:2a:7b:1b:cb:a0:7e:75:59:ae:72:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Oct 20 15:01:26 2026 GMT
Not After : Oct 21 15:01:26 2026 GMT
Subject: CN=1f46779cbe128225f23101c8d311409cb1629e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:44:81:0d:2f:7c:2e:dd:ba:5d:fa:eb:33:
68:f7:eb:14:2b:ae:0e:f3:60:b3:9f:8d:cd:93:05:
e8:0f:00:6b:db:22:0e:65:a3:b6:9a:66:bc:0e:3e:
1b:ab:c0:b3:81:c8:74:15:ad:42:06:6d:e9:cb:f4:
96:6a:12:ee:5f:b2:3f:fb:40:d3:ac:8b:78:ec:3f:
58:13:d3:b6:0e:5d:36:51:7b:f1:11:56:1c:0f:13:
ac:9c:67:31:03:2b:fc:23:53:c6:f8:f0:27:84:7c:
17:eb:e6:d7:39:f5:42:ab:9e:5a:f3:88:fe:61:bb:
06:68:a1:dc:6b:52:80:0d:50:65:9f:16:3a:bb:44:
44:8f:e6:91:40:e7:3f:c7:8b:8c:d9:bd:cb:b8:0a:
71:02:5e:c6:6f:c9:52:e4:ef:44:a2:cd:0b:58:7c:
9b:0c:1b:93:c0:67:52:be:9c:d9:80:df:9d:d6:9b:
fd:99:89:4c:8b:ac:c0:5b:64:8b:f3:46:21:a0:b9:
09:a2:03:66:e7:60:91:be:41:f6:99:c7:09:d8:92:
1a:47:b6:10:8a:7d:5b:7f:f5:ec:b8:99:b1:3a:58:
e6:be:13:1f:6f:79:22:67:98:0c:aa:64:ae:19:67:
0a:fd:32:7a:e4:ff:24:65:34:c5:15:3c:0e:2d:43:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:77:9C:BE:12:82:25:F2:31:01:C8:D3:11:40:9C:B1:62:9E:4D
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c1:8a:31:e1:dc:78:f2:71:71:4f:26:c1:71:a0:96:64:11:
f3:ca:4f:af:32:52:32:c3:d9:16:ed:84:41:b5:83:6a:1d:b7:
d6:67:59:1d:50:fc:0c:b9:17:65:b5:8c:f0:52:e0:4d:6a:71:
dd:42:0d:15:6f:12:46:5c:79:90:aa:60:a0:10:49:aa:9c:8c:
19:69:bf:c3:28:17:f3:d4:5f:11:b3:d6:6a:b8:6a:29:2d:42:
fe:65:95:b7:24:8e:1f:2b:56:75:5c:80:41:11:a5:d8:d6:74:
cc:1d:42:9f:93:69:3b:37:25:93:30:d0:f3:50:e5:19:63:4c:
70:6f:6c:38:66:5e:4e:6b:26:7e:3f:94:47:1b:c6:28:46:cc:
bc:c3:85:13:2c:df:f1:e4:01:8e:b0:69:e9:00:86:d4:f0:61:
66:0e:89:84:20:d3:2c:39:20:37:79:a4:fc:b3:92:69:44:02:
c4:e2:cb:ed:ff:03:ce:b8:e8:10:88:ba:c5:97:30:0c:b3:6d:
b2:9c:86:d6:ab:85:19:0a:8a:b8:b0:15:73:e1:97:0e:75:5d:
7b:60:2a:07:3e:7f:46:3e:a5:a5:55:c3:6b:4e:09:a6:11:b6:
0b:f6:79:05:61:af:8f:2f:78:19:5d:fa:0e:bf:94:b9:38:12:
96:e7:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:24:36 2026 by rpki-client