Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: 2viwlo4UCYZQXgpIYLt7g2B3HWrfX68n260Rd5AxdC0=
Subject key identifier: 47:BF:5B:07:1E:7A:32:9D:3A:46:9B:64:AF:C8:EE:98:63:BC:16:D0
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 01A12BE96A69F581DAFCE13A7CECA586BBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 17:01:19 +0000
Manifest this update: Sun 11 Oct 2026 17:01:19 +0000
Manifest next update: Mon 12 Oct 2026 17:01:19 +0000
Files and hashes: 1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: EKtvpBPp8xX0RWsqk9gLh3V+0yaZyjg8IO0CesJB40g=)
3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:6a:69:f5:81:da:fc:e1:3a:7c:ec:a5:86:bb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Oct 11 17:01:19 2026 GMT
Not After : Oct 12 17:01:19 2026 GMT
Subject: CN=47bf5b071e7a329d3a469b64afc8ee9863bc16d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:2e:22:b6:81:8b:b4:c3:32:61:9e:cf:c5:
fe:80:05:84:99:d4:33:8d:43:43:23:9e:17:b5:9a:
c3:97:33:64:31:a4:01:7d:4f:fb:f2:07:a4:7d:31:
b4:5d:d7:4f:1a:4c:4b:4a:9b:e7:07:9e:cc:e2:80:
7e:35:33:95:ab:a1:82:5e:39:02:d7:e2:2a:47:8f:
39:71:21:7e:66:68:02:2e:a1:44:c9:d3:64:4f:d6:
be:b8:1e:2c:ef:19:44:97:69:c2:a4:91:b5:1b:a4:
68:01:5a:85:e3:bb:26:b3:63:90:aa:9b:00:78:57:
9f:e1:f6:7f:c3:db:e2:15:8c:28:f8:5f:85:1f:8c:
aa:3a:53:96:c8:8c:5b:ad:ff:b2:a1:97:05:4a:0c:
71:73:c3:15:23:55:6d:71:fb:7f:a3:2e:80:aa:4f:
37:6a:62:42:c2:4e:d8:6b:35:a3:1f:76:7c:ea:fa:
6a:2d:93:39:75:2c:35:06:99:2f:13:73:ec:f7:d0:
06:3d:62:e3:80:cb:4e:93:98:6c:30:84:52:84:fb:
31:e6:9b:e7:9b:19:69:23:4b:7c:f4:c8:5b:a9:1c:
22:14:d8:a3:4c:61:c3:09:d0:36:43:d2:5c:5d:40:
50:9a:23:79:e1:19:22:48:6f:6f:c5:0a:ae:f6:73:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:5B:07:1E:7A:32:9D:3A:46:9B:64:AF:C8:EE:98:63:BC:16:D0
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d4:6c:57:6c:b5:f8:ba:44:4e:0d:16:5e:e5:21:e4:41:d9:
a1:7c:d0:1f:5d:48:55:4a:6d:da:0c:5d:40:7b:43:cc:47:44:
20:0b:dc:a5:3a:ea:f7:ab:32:2b:67:4f:b0:33:06:a2:bf:62:
87:6b:fa:d9:7a:b2:0f:f0:98:65:57:ed:e7:76:28:98:a5:3a:
36:cb:ad:3e:b0:17:2a:b3:f2:f6:f1:a0:18:39:6f:75:46:20:
fe:51:29:f6:fd:ec:27:28:9d:d3:25:aa:4c:95:43:23:c4:16:
79:b3:bb:8f:1f:f6:f0:7f:a5:f9:9a:6d:1c:53:7c:55:3f:50:
50:5a:24:a9:de:4b:d7:3b:11:fb:4f:ad:f6:4f:5a:18:85:18:
8b:d0:95:6a:21:4b:1e:21:0b:94:52:bd:93:10:a4:a7:52:a1:
b6:19:ac:e8:9c:d6:f4:70:5d:0f:d3:bd:45:84:77:29:39:98:
04:1e:84:8f:bd:89:2e:5f:e2:95:13:2f:58:5b:28:de:f6:3b:
7d:eb:d6:8a:80:13:91:8c:2a:13:5f:79:07:b8:56:cb:da:5a:
c9:57:ce:d6:22:3e:44:0c:a7:c3:02:d6:ac:b8:6e:65:6f:26:
2d:ff:aa:af:82:89:91:f4:34:cf:9b:e2:b2:2e:5c:50:1a:c1:
0e:6f:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:29:20 2026 by rpki-client