Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: yzUWQLOOa3/uzcKgAniojzES1YqzYbL3EzYfPfTCKnw=
Subject key identifier: E9:08:9B:7A:08:FC:10:98:C6:44:30:8B:4D:2F:1A:CD:9D:2F:2F:67
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 01A13F029A5685C194CD0C4FBF82909B644C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0BE1
Signing time: Thu 15 Oct 2026 10:01:37 +0000
Manifest this update: Thu 15 Oct 2026 10:01:37 +0000
Manifest next update: Fri 16 Oct 2026 10:01:37 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: DuG6ixBK63rgqLJp/nII8YeoM3zBytC2q8HFr60hiCI=)
2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:9a:56:85:c1:94:cd:0c:4f:bf:82:90:9b:64:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Oct 15 10:01:37 2026 GMT
Not After : Oct 16 10:01:37 2026 GMT
Subject: CN=e9089b7a08fc1098c644308b4d2f1acd9d2f2f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:17:7c:b1:b1:8f:ae:f1:d4:f7:ef:dd:7b:
e2:70:e8:a8:52:39:a1:88:51:ec:a2:79:38:8f:ec:
bf:31:30:a6:25:de:63:cf:4a:38:a0:2e:0d:30:54:
f2:8f:77:e5:36:8a:d9:1c:7a:18:88:38:5e:cf:5e:
b4:df:0a:0f:f2:8b:97:a4:d5:71:84:5e:6b:a0:e8:
5c:8b:4a:1c:1d:5b:8b:56:fc:33:3c:cf:3f:e4:98:
92:1f:b2:d3:78:64:d4:88:7b:bf:31:60:29:14:9a:
3c:6f:37:f8:52:7d:6f:c7:a3:b9:f1:7a:59:68:fd:
7b:cf:d8:ef:57:67:d1:ae:bf:88:b0:20:95:fe:82:
89:da:31:05:40:53:1a:e0:f0:8d:2f:73:1c:77:46:
15:2b:ac:28:99:a6:29:86:1d:42:4f:84:f5:88:3a:
d1:98:e1:93:eb:ab:03:6d:17:25:03:e2:d3:c6:f6:
e7:10:c8:c2:01:43:df:9d:65:f6:24:a7:30:14:13:
1e:4c:f4:09:9a:44:3a:11:a2:eb:19:4e:f5:7b:31:
93:98:3c:b4:96:a8:b5:fa:12:67:c6:7f:92:d8:01:
c3:d2:d8:f6:26:79:32:47:69:e7:ef:03:be:01:81:
2e:ec:2c:27:93:f8:bf:31:c3:25:2e:8d:ab:8c:cc:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:9B:7A:08:FC:10:98:C6:44:30:8B:4D:2F:1A:CD:9D:2F:2F:67
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5c:f1:33:13:a8:9a:15:3e:ca:85:b0:ee:99:e4:31:c3:ee:
4a:e1:35:c4:8c:59:81:20:dd:22:04:a4:ac:c2:ff:d8:ae:b6:
2d:2c:65:51:eb:fc:0f:8c:b6:41:c1:3f:f4:11:f3:91:e4:26:
49:44:6f:92:6f:ec:a5:74:b4:b5:a8:8e:ae:49:5b:b6:1e:bf:
81:6b:39:c9:98:7a:c2:24:40:1f:8d:73:09:73:f5:7c:47:6c:
10:f2:7d:8c:29:10:e0:9f:6a:ab:ab:8c:9d:b0:c4:3c:59:8c:
f5:ad:75:9f:94:55:97:3d:9a:74:e5:7c:ba:b3:a9:92:22:00:
31:ed:79:06:4c:da:10:b1:eb:d6:ff:6d:e8:7e:56:c9:96:db:
37:0b:6f:2f:6b:4a:5c:f9:e4:a6:ef:09:61:c4:c7:22:f3:8e:
df:81:93:3f:83:27:4e:34:b6:8e:be:19:aa:e6:ad:10:43:29:
3d:82:27:ba:8d:29:72:af:02:9c:27:77:f0:7b:41:c8:38:46:
c4:5f:6b:b2:14:f7:cc:85:ae:e9:09:5e:b1:62:dd:d7:e0:3d:
96:91:51:25:57:67:07:7f:f0:54:c0:ed:76:2d:ec:97:06:a7:
ae:3a:4d:f3:4c:22:35:7b:b4:85:06:36:2c:de:db:6f:33:88:
81:31:62:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:04:11 2026 by rpki-client