Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: 1zKihHeGvKZE9w1m8X+6WnpzjTGbjLTzxPj9qF79y70=
Subject key identifier: A3:A9:05:A3:FE:A5:78:EB:D6:66:53:1D:E6:9B:18:A3:A3:F9:FD:80
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019FF3EADDDA2DECBE54F2D2A9F039D635F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1686
Signing time: Wed 12 Aug 2026 03:01:23 +0000
Manifest this update: Wed 12 Aug 2026 03:01:23 +0000
Manifest next update: Thu 13 Aug 2026 03:01:23 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: X2jtj5vr5Mzep7gGoND4sINGTi5/5zTroDcHmLJqRx0=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:ea:dd:da:2d:ec:be:54:f2:d2:a9:f0:39:d6:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Aug 12 03:01:23 2026 GMT
Not After : Aug 13 03:01:23 2026 GMT
Subject: CN=a3a905a3fea578ebd666531de69b18a3a3f9fd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:90:65:cb:36:ba:3b:5c:d8:5c:85:9d:ff:
b6:72:88:bd:9f:9f:cb:27:b4:f6:39:72:c2:81:51:
db:a3:f6:36:3c:e6:ae:c5:f8:8d:d7:23:40:31:4a:
bb:dd:2e:ef:28:14:c4:33:86:d2:e4:27:c9:9c:5c:
08:8c:4f:de:41:89:64:4a:ec:46:9e:77:a2:1a:b1:
50:15:9d:85:f4:41:4d:3a:77:5c:cd:13:ea:55:a7:
11:ab:f1:35:e7:4a:ef:a1:cb:1e:65:9e:2f:a6:33:
c0:59:71:25:5e:eb:2c:c1:4f:a3:2b:73:7b:85:67:
66:68:13:0c:fc:a6:2f:b6:6a:58:c1:82:e9:80:9f:
36:62:fc:cc:65:45:67:da:88:33:37:a9:9a:c6:5f:
9c:fa:5b:11:39:c8:0f:9d:f0:f1:64:d2:3a:73:c5:
23:39:9f:28:28:38:82:71:a3:8f:aa:a3:5c:48:59:
83:61:d6:98:a7:c6:e0:7a:bf:13:de:bf:2a:db:5c:
37:d1:3e:5a:8e:e9:50:ab:5d:f0:2b:22:96:3b:70:
b3:01:f0:ef:fc:cc:41:e0:e3:58:f1:c9:95:a9:ec:
91:42:ec:84:56:4e:c1:38:48:da:8a:33:76:6f:37:
c4:0b:5d:18:59:95:29:74:18:8c:c3:c4:19:51:8c:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A9:05:A3:FE:A5:78:EB:D6:66:53:1D:E6:9B:18:A3:A3:F9:FD:80
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:35:6e:f3:39:b3:71:ce:bc:cb:77:96:3c:ec:c1:d9:9c:4d:
ed:9f:82:31:d5:e0:ce:a6:38:4e:91:ab:a0:79:d3:7d:4a:11:
1b:fa:3e:9d:31:ee:b1:23:ef:72:04:19:77:8b:07:82:bf:d6:
c8:dc:b0:f5:44:f9:1c:bf:2f:5c:2c:ee:85:19:63:be:9b:00:
6b:65:4b:7b:4c:82:91:4c:c2:2c:15:83:16:b5:f4:e1:e1:20:
5c:5a:0c:92:ea:1f:28:f5:92:eb:91:08:6a:4b:6b:6c:8c:21:
77:6a:1a:49:26:f8:79:be:b8:60:6f:1e:f0:d4:91:bb:4f:71:
1f:5d:6f:6b:65:f9:36:e7:1f:43:3c:c3:ad:41:b7:00:dd:c7:
fc:43:81:6e:d3:ce:5f:7d:00:b5:03:c9:d8:50:4d:6c:0d:12:
d2:38:4c:b7:07:07:39:45:51:30:e7:bf:e5:09:85:6b:76:61:
e3:b5:b6:34:47:c0:60:4e:61:c0:5f:ee:09:96:20:21:89:9e:
95:9a:12:af:f9:ac:81:74:f9:3a:e8:58:1b:4b:56:26:74:1b:
1a:19:ba:6a:c4:09:f8:f3:b2:47:99:dc:a4:f6:27:56:d5:fd:
99:43:c3:f3:5e:a6:1d:e8:58:2f:b4:bb:84:3b:dd:29:f4:2b:
b1:8a:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 09:54:38 2026 by rpki-client