Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: cqs/EpxGevMcB+/30nRjsr8fZu/lIe2zH9cRPtfeMUc=
Subject key identifier: AE:11:C8:43:7E:8F:95:12:60:BD:D6:F1:CF:EF:44:33:B8:B4:16:59
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 01A1355A61DE68588FB0475546380C4B5601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 091D
Signing time: Tue 13 Oct 2026 13:01:18 +0000
Manifest this update: Tue 13 Oct 2026 13:01:18 +0000
Manifest next update: Wed 14 Oct 2026 13:01:18 +0000
Files and hashes: 1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: jI22T0wqW3NHNqVEHfzgK7rM3XWkZBHegsMBIa7wY5s=)
3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:61:de:68:58:8f:b0:47:55:46:38:0c:4b:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Oct 13 13:01:18 2026 GMT
Not After : Oct 14 13:01:18 2026 GMT
Subject: CN=ae11c8437e8f951260bdd6f1cfef4433b8b41659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:dd:d4:e7:f6:97:0d:9e:49:cf:6e:05:56:
46:04:42:5a:bf:7b:64:2a:60:a4:76:5a:b9:a9:d7:
0c:c0:1d:b1:1a:ff:02:f6:db:4d:3b:3c:2e:15:ec:
0e:cd:22:75:f0:d5:dd:4e:23:df:e2:17:be:ef:00:
2a:66:de:06:ba:6a:52:1e:68:b3:ef:f0:83:5e:42:
9b:c7:07:09:09:e8:3d:5c:bf:15:3b:37:09:c3:b3:
9b:07:ae:fa:07:b5:5b:e8:f0:af:95:b1:cf:94:84:
e5:ca:49:6a:55:d4:24:d8:05:1f:e7:9f:fe:23:fd:
67:3f:c6:98:e0:95:16:b2:ea:71:f2:b5:37:60:08:
84:2e:48:08:9e:8b:a8:72:a6:3c:11:3b:de:8c:7c:
09:d5:6f:9f:1b:bb:48:4d:7c:46:10:15:83:23:95:
ae:c8:a1:8b:9a:a9:e5:66:42:c9:6e:36:8c:04:96:
0d:2b:d7:b5:e6:5d:dc:ca:ba:6b:bf:68:d2:0c:be:
a6:b0:69:af:d7:21:7f:60:a8:3a:2c:5f:c8:42:29:
8e:81:53:9a:a1:4a:ba:05:bf:5d:22:bb:f2:2e:f2:
90:be:a1:2d:34:5e:2e:fc:13:5c:d5:76:f9:03:4d:
d0:69:05:f7:59:57:0f:83:5b:5b:06:d9:2f:59:8f:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:C8:43:7E:8F:95:12:60:BD:D6:F1:CF:EF:44:33:B8:B4:16:59
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ef:b6:1b:b4:de:3d:9e:ff:16:b0:3f:41:5e:0b:83:13:51:
92:b4:08:c1:38:3b:c3:d6:2a:32:90:df:8a:78:f3:b3:66:f3:
e0:40:89:62:d6:3e:7e:bb:32:35:60:da:d3:90:6b:66:ee:aa:
d0:f4:95:5b:9c:b6:9a:ac:e5:1b:66:f8:1b:ed:40:6a:aa:2d:
d2:f5:2f:9e:84:aa:ce:f3:60:e9:8f:c5:3c:94:8d:2b:a3:0e:
64:e8:c8:e8:99:27:34:c4:d5:33:61:14:c4:60:44:3c:48:e3:
cd:71:3d:ea:22:90:59:95:84:3b:36:09:9f:dd:a4:9c:86:57:
f1:de:65:d4:5c:ee:15:10:92:af:ce:a9:9f:fb:31:f3:ef:d1:
e6:22:06:e7:05:91:d1:53:7a:ed:92:56:75:a2:eb:4a:ef:ff:
d3:be:9b:26:ab:61:19:f6:ce:f0:97:f0:88:78:35:c8:03:a4:
ef:d3:ef:c3:81:2e:35:12:3f:07:22:fe:72:a2:31:5d:5b:34:
ea:17:b7:c2:a0:88:8f:02:bd:58:75:f3:c3:3a:4b:00:85:96:
62:af:a0:42:5c:04:7d:15:c1:18:ad:a7:82:25:63:92:55:52:
9e:57:e8:89:7e:fe:32:ff:47:5f:7d:58:c1:a2:12:2f:9a:83:
07:8a:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:25:56 2026 by rpki-client