Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: wLCBRlMWG2GRyoxFcv7AexqlfNHdP/3we2wnGx84950=
Subject key identifier: 4F:F1:DE:83:CF:45:DA:68:B1:AA:AE:F9:5D:DC:19:DE:29:AE:29:16
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 01A178B9D77A8E52644D04B5C5A80E79A715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 15:00:07 +0000
Manifest this update: Mon 26 Oct 2026 15:00:07 +0000
Manifest next update: Tue 27 Oct 2026 15:00:07 +0000
Files and hashes: 1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: YiWjo4tYI+9qUIxTXcU6+9PgZ/fipvUXTmI9e6uw+Ho=)
3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:b9:d7:7a:8e:52:64:4d:04:b5:c5:a8:0e:79:a7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Oct 26 15:00:07 2026 GMT
Not After : Oct 27 15:00:07 2026 GMT
Subject: CN=4ff1de83cf45da68b1aaaef95ddc19de29ae2916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:39:0f:c1:a9:a0:9b:5f:33:9c:76:ef:c1:
4d:43:33:83:d9:41:52:1e:7e:86:b3:96:b3:ec:63:
24:3e:80:a2:2f:17:de:a8:30:ed:28:54:9b:c9:b3:
f0:a9:57:e6:bb:95:89:23:53:d7:a3:cd:d9:b2:99:
c3:af:32:81:30:1c:db:8c:5f:4e:ad:6f:15:3f:66:
e7:6b:58:d2:f7:01:11:04:bc:ef:52:78:0c:1d:cf:
34:75:9f:b4:00:c9:33:4f:04:16:d8:00:a8:42:94:
79:b0:70:3d:01:a4:55:96:78:91:ac:9a:90:82:6f:
3f:ec:39:ba:40:29:9c:13:ae:51:96:5a:1a:34:b7:
ba:89:b3:86:f5:5d:f7:20:5b:51:bc:90:e8:46:9d:
bb:1c:20:8d:7c:f3:df:c2:c7:8f:cf:cd:28:31:6c:
32:15:98:ed:dc:5b:00:27:19:2e:df:fa:6a:99:45:
5e:19:57:4d:a1:d1:ab:38:d2:fd:41:c5:b8:3c:7a:
c6:e5:ed:fb:90:6c:51:dd:34:dd:d2:18:8e:89:2f:
2a:b4:61:d0:ba:3f:2d:df:2e:5d:e9:55:6b:66:54:
9e:a4:8f:08:e9:21:f9:22:40:11:7f:62:a4:b5:67:
08:5e:1b:5d:ea:80:c3:a3:45:f9:fe:6f:53:8f:b3:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F1:DE:83:CF:45:DA:68:B1:AA:AE:F9:5D:DC:19:DE:29:AE:29:16
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b1:2a:ba:b2:96:86:08:f7:3a:6a:82:25:53:58:c4:93:ce:
e5:fa:96:9d:08:43:44:b1:7c:11:22:1f:c7:8c:ae:34:81:b2:
f8:ee:8b:7d:c2:cf:6a:d5:c3:e5:d3:a4:91:1e:d9:95:b6:27:
e2:f3:d0:96:f6:5f:01:22:e3:bc:cb:34:64:3e:15:b2:d9:f4:
f9:3e:ae:7b:e1:ab:6b:b2:0d:53:e4:45:31:b0:9a:6e:54:7f:
3a:5d:ac:4d:d5:0d:63:64:6b:04:13:1a:bb:90:52:28:1c:57:
8a:26:b2:05:5b:bc:6a:d7:13:3b:42:79:cb:3f:2e:07:5d:03:
95:11:75:29:46:1e:a6:52:8e:54:77:ed:b6:81:f6:94:28:d9:
bb:94:bb:eb:ed:fc:29:08:01:c1:9b:ce:75:14:d0:df:f1:b1:
92:7e:52:6e:f2:8d:04:9b:14:2f:cc:84:fc:e0:c9:3a:8d:31:
c5:10:23:bb:de:4c:87:c6:34:9a:b6:9f:49:bd:36:12:e6:57:
6a:99:59:5c:e4:3f:c8:60:db:6e:5e:01:2c:50:92:83:b2:7d:
6f:3b:50:07:7d:72:e0:36:e9:f5:4e:2e:94:4e:96:4e:04:c4:
63:d1:fb:db:0b:88:cd:a9:1d:36:ab:77:c3:f5:97:3e:bd:ea:
79:20:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:54:21 2026 by rpki-client