Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: TYS/VBq6NJto1fEEsL8tTUntZDDImplzpU5Mrle3ZYc=
Subject key identifier: FC:0D:EC:B8:4F:DB:5C:B4:C2:05:97:F7:EE:55:8F:2C:0F:69:87:4A
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01A18E2FA65C7B072FFE902D04DD375DBD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1AD5
Signing time: Fri 30 Oct 2026 19:00:49 +0000
Manifest this update: Fri 30 Oct 2026 19:00:49 +0000
Manifest next update: Sat 31 Oct 2026 19:00:49 +0000
Files and hashes: 1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: 8bOt36F4IHpQY6lHDlZcv/n1jviQrgVJG/9kfYQituk=)
2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
4: hx13qeZvMZ7CkgtNj_PPPv78xFY.roa (hash: CRsLACP7NSVDuxBm9D3SK9UIt5ALRDRxl1uvehhLfs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:2f:a6:5c:7b:07:2f:fe:90:2d:04:dd:37:5d:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Oct 30 19:00:49 2026 GMT
Not After : Oct 31 19:00:49 2026 GMT
Subject: CN=fc0decb84fdb5cb4c20597f7ee558f2c0f69874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:65:8e:fa:03:c0:cf:31:93:85:57:f4:cd:
b1:0e:a1:78:a7:73:ac:b7:c3:af:64:07:84:7c:1b:
b7:8a:86:35:dc:0f:83:bd:6b:43:d3:c1:13:6d:21:
e8:e2:d9:c2:69:ff:15:28:28:b5:6a:bb:7f:5e:0b:
fe:ff:44:ef:b8:39:67:16:f3:8e:da:20:8a:27:65:
09:d0:8c:18:2f:e6:d3:7b:f2:4a:94:29:62:26:5b:
7d:0e:9e:3e:69:67:58:97:ad:ba:b4:79:0d:e6:3b:
5e:4b:e1:7f:8c:89:b0:40:7a:9f:65:25:d9:04:86:
19:30:3c:a6:08:58:d7:5c:25:39:11:43:f3:25:63:
9f:28:5b:a0:01:88:e0:96:19:ce:68:7a:30:7b:05:
6a:d7:85:fc:ff:62:ec:17:8f:e1:8c:e2:e2:c9:37:
45:f8:17:44:f1:07:17:d2:fb:31:8d:5e:fd:4e:f4:
8d:c2:09:9f:bf:18:33:15:72:3f:b4:00:5c:4b:f1:
61:22:b2:0a:66:09:c8:db:1f:f8:21:be:61:1f:24:
cd:d5:5d:2f:43:91:49:12:bc:35:b2:5d:3d:a8:81:
c7:46:d2:90:ae:71:7b:00:4c:c1:af:15:2f:7d:5c:
b2:e5:4f:35:a3:d9:42:ba:94:05:fe:1e:af:48:27:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:EC:B8:4F:DB:5C:B4:C2:05:97:F7:EE:55:8F:2C:0F:69:87:4A
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:ad:65:f8:de:b8:6d:c1:6e:a6:8f:91:48:b8:52:49:d2:
ce:5b:9d:da:3b:1b:98:58:9e:86:cc:e2:9b:dc:df:7a:45:6c:
4b:c3:a2:e6:9a:67:cb:d5:4b:d3:eb:55:e0:4c:d5:6e:88:f2:
66:18:39:78:e8:28:97:0d:b7:a6:21:99:56:0f:1e:36:5c:5a:
1f:d6:9e:d4:2a:54:2e:5a:49:7a:b8:2b:f0:5a:1e:ae:72:b2:
7e:28:89:2f:4e:31:30:ac:9a:47:93:c1:79:00:b2:59:ee:2d:
95:d0:8e:60:3f:f3:d2:f7:12:e5:ae:7a:27:d5:fb:16:30:df:
be:bf:87:8c:e9:40:c0:33:6d:ca:49:39:7f:88:bb:d0:10:d3:
4e:65:c9:44:98:04:ad:e0:f1:e6:c2:57:d2:b6:ff:15:0e:df:
92:35:e2:cb:8d:86:87:23:c1:1b:76:fa:93:53:18:87:b2:b7:
fb:51:5f:65:6e:46:f7:29:45:ea:10:e0:fa:30:6c:91:12:55:
5d:bf:a9:f0:8e:2a:e9:1d:9f:4b:2a:92:fa:30:7d:b4:c4:0a:
38:6e:73:d8:1d:66:c0:e5:44:69:24:4d:e1:99:07:ae:ae:46:
d5:8d:e9:37:67:ba:cc:19:99:b5:3e:cc:40:65:a0:be:5a:91:
96:da:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:33 2026 by rpki-client