Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: fHUjW95XTD6vgybkNciqXUSQ8e8iElvXEes71+wqwrk=
Subject key identifier: 82:82:5F:B6:43:C8:3D:90:63:29:29:67:33:B1:4F:22:E1:24:6E:78
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01A115988601AD3D4D13931A74403F4DD906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 171C
Signing time: Wed 07 Oct 2026 09:01:19 +0000
Manifest this update: Wed 07 Oct 2026 09:01:19 +0000
Manifest next update: Thu 08 Oct 2026 09:01:19 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: HDOIuJIoi4AougKXYdwGOyjVRSKxPrDhk0M158ezFlo=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:86:01:ad:3d:4d:13:93:1a:74:40:3f:4d:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Oct 7 09:01:19 2026 GMT
Not After : Oct 8 09:01:19 2026 GMT
Subject: CN=82825fb643c83d906329296733b14f22e1246e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:86:30:6e:f1:68:6b:5a:14:b1:b3:69:ee:
d1:1d:55:15:01:39:0c:74:d7:44:40:56:aa:49:d1:
7c:db:76:99:d9:b6:4f:33:bf:9b:ea:77:89:0c:ab:
fe:1d:6e:4a:49:36:80:86:aa:67:77:f7:c4:e3:e3:
cc:56:6a:d1:f6:f0:48:da:1f:03:d0:54:00:91:7e:
e0:6a:3a:16:f5:9b:16:40:5e:82:dc:ab:59:cf:1a:
6a:17:be:26:5c:da:1f:b7:4b:42:fb:be:e1:fc:47:
03:9a:a1:75:96:ac:df:f7:2f:28:4c:ba:73:e0:e0:
a8:c4:fe:fc:d4:61:1f:d5:6f:f4:c7:12:c5:00:19:
c7:8b:d1:d9:76:fd:40:0c:b3:86:dc:5f:65:b6:b8:
24:ce:0a:7b:04:41:2f:3d:40:d1:d7:84:0b:34:af:
43:c9:93:7c:2c:a8:f9:e5:4c:26:54:ce:a3:34:c9:
5c:a2:1f:1b:2e:6a:87:63:50:91:fa:28:9c:75:00:
9c:42:55:dc:f3:8f:16:6c:f8:17:e2:11:db:4c:00:
9b:3b:ed:38:48:ad:30:7e:0b:7d:93:26:80:38:9b:
0b:06:de:17:90:3b:50:09:2b:c5:e2:85:19:be:1b:
9a:87:2b:6e:8f:10:60:13:96:ce:e5:c6:41:56:56:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:5F:B6:43:C8:3D:90:63:29:29:67:33:B1:4F:22:E1:24:6E:78
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:83:85:83:57:e7:c1:e0:c8:ff:a6:b3:09:73:e5:2a:9b:81:
16:38:99:d0:4b:ee:41:f6:9e:b5:e4:8b:35:a2:f6:7d:47:f1:
95:ab:f6:bd:66:e4:56:e4:45:93:78:cf:27:bb:b3:00:7c:06:
3a:82:48:11:57:3b:dc:14:c4:e9:55:3a:35:f5:df:80:4b:97:
f5:79:68:88:5b:14:aa:37:dd:fb:5a:90:39:8d:90:41:b6:09:
93:0c:81:38:b7:50:fa:97:9d:d2:24:28:6a:22:a4:99:73:ae:
83:4b:a0:5d:e9:82:21:62:81:87:2b:05:6c:ea:b3:fb:95:28:
b0:84:13:6d:02:22:49:21:6f:84:be:42:4f:7a:36:31:07:7c:
b7:e1:9f:da:8a:d0:9f:8f:0c:28:87:e7:29:de:40:ba:f9:eb:
72:eb:f3:78:bc:de:16:7b:d4:db:54:1d:50:ed:3c:20:66:de:
06:f1:e3:d0:ea:08:d7:f0:89:97:a1:ce:b7:b8:79:af:6a:5a:
f5:db:b6:d7:99:5b:68:11:4a:3d:32:ab:32:85:83:d6:f4:07:
74:4f:9c:f6:a6:47:78:03:80:22:4e:db:b7:dd:80:73:2e:70:
fb:5a:9c:48:b3:f9:ea:57:d8:d0:76:b4:ac:6f:bd:f8:a5:81:
65:fa:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 15:22:18 2026 by rpki-client