Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: bD3bcHh+e/qWjS/IP64xr5rQvYVGmmnKUYXyofsrb28=
Subject key identifier: 72:DE:8F:EB:77:30:F1:00:11:AB:D3:45:27:B8:1F:3B:F4:68:E8:E6
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01A1558A5C507B0FA3CBE9ACEBD5A3630C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 19:01:33 +0000
Manifest this update: Mon 19 Oct 2026 19:01:33 +0000
Manifest next update: Tue 20 Oct 2026 19:01:33 +0000
Files and hashes: 1: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (hash: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ=)
2: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (hash: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY=)
3: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: +py848+PZesJQwF/3GZW/94Di2FbtZ/rCom1WufD8D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:5c:50:7b:0f:a3:cb:e9:ac:eb:d5:a3:63:0c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Oct 19 19:01:33 2026 GMT
Not After : Oct 20 19:01:33 2026 GMT
Subject: CN=72de8feb7730f10011abd34527b81f3bf468e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:2d:63:29:f1:14:47:9e:ae:52:4a:8c:6f:
02:5d:d9:85:19:0b:00:73:68:29:0e:64:41:cc:32:
bb:f7:85:ff:79:9b:2e:80:b4:cf:85:3a:bb:1a:57:
fd:1b:61:1d:e7:84:dc:77:c7:9e:7a:f4:7a:2a:27:
bc:cc:e2:4b:11:7d:78:1b:7d:b4:24:50:19:c2:e6:
7c:ae:46:b8:0c:74:72:67:0f:f0:69:e1:8a:0d:ff:
46:13:db:26:ef:40:c6:30:8a:51:4a:41:e3:6d:42:
97:ea:cc:d6:92:d4:ba:26:77:34:2f:9b:89:ba:52:
21:de:38:34:70:4f:75:cb:86:ce:81:a6:a5:28:0b:
fc:9c:35:ae:2e:66:b9:fc:b0:e2:60:85:43:4b:94:
b9:0e:11:65:37:6d:b1:70:52:5c:a5:bc:80:30:aa:
06:ed:8a:a2:6a:0b:85:65:c5:ec:c7:43:35:a8:79:
f5:3f:45:cd:de:cd:4a:3c:b2:ac:ab:c9:f6:4d:7a:
d2:c5:66:e7:9f:e7:6e:ce:16:97:e0:0c:56:ee:ce:
f6:b5:5d:33:18:a8:b5:48:0b:82:81:e6:dc:66:5a:
7b:24:91:36:27:e9:5d:6f:59:df:44:58:c3:fd:54:
61:6d:b7:11:b2:fe:d3:3b:d9:d4:1e:76:f8:67:45:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DE:8F:EB:77:30:F1:00:11:AB:D3:45:27:B8:1F:3B:F4:68:E8:E6
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:a2:10:c4:b8:f0:00:2e:ce:84:5a:a6:f2:5d:64:e7:0b:
76:b9:78:f3:44:b8:a2:c4:2d:e7:f7:e4:6a:d3:dd:cc:aa:55:
a2:4b:c5:4e:21:fa:f9:3f:13:90:e3:85:af:ca:8f:4d:8b:1d:
1b:15:2c:4d:0e:11:8c:f0:6e:7b:9b:23:c8:98:3c:4c:ea:47:
b7:c6:82:95:8d:5c:b9:df:d0:d6:a2:b5:b3:b8:64:ec:f2:d7:
a0:94:4c:31:3a:55:96:55:d1:a0:66:df:28:bd:62:a8:28:17:
20:0f:89:ed:85:08:87:ff:32:8b:90:69:e3:77:81:a9:95:81:
8b:0b:34:07:82:01:30:1c:5c:d7:62:0c:01:43:4b:bc:40:a0:
11:b5:46:bf:d9:ff:fa:91:3d:93:d6:a9:2e:b8:11:1a:17:92:
aa:a7:18:f6:e9:c7:16:49:85:17:66:79:a5:ca:25:57:9b:cc:
cd:c7:dd:74:c1:84:1a:76:ae:ae:f2:2a:4e:c6:b1:93:78:3e:
a2:55:95:db:eb:cf:0f:fd:d3:cf:59:a5:bb:6f:d7:9c:f0:86:
c4:91:5b:a7:7e:76:5a:73:95:03:09:4b:26:7f:18:05:7e:6e:
72:1a:92:32:7a:b3:74:0f:92:b8:de:b2:2b:a2:e8:9c:9f:36:
a2:9d:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:07 2026 by rpki-client