Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: 6uvTlHgzhNxrzL2YuFjK1tSBSbecJQexDAFNUWG6J2w=
Subject key identifier: FF:62:59:A9:C6:F6:18:5D:12:B8:BA:34:97:7D:28:33:6E:60:D6:15
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01A17CCE52DA060AAEA72939F4982D8B92B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 10:00:58 +0000
Manifest this update: Tue 27 Oct 2026 10:00:58 +0000
Manifest next update: Wed 28 Oct 2026 10:00:58 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: 7+C6Mol753FJdN1eqerRGnFlvlNFunKGylTy0fJf+Mg=)
2: lF6xMupUMlipMq7GMpM0r0z9I7w.roa (hash: 0Res1n1L0Nd2qqeKb1zoNe5I0Gf7UP1O9DGe+CZxdzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:52:da:06:0a:ae:a7:29:39:f4:98:2d:8b:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Oct 27 10:00:58 2026 GMT
Not After : Oct 28 10:00:58 2026 GMT
Subject: CN=ff6259a9c6f6185d12b8ba34977d28336e60d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:ee:99:c8:98:6f:f8:8b:d4:53:a3:df:23:
7c:41:4a:a0:05:af:51:50:0d:9f:21:69:4f:32:ce:
9e:87:d5:bd:0c:ba:85:e5:3c:35:d8:e1:f4:b7:1a:
4b:57:88:b4:84:d9:b4:9e:9c:7e:ce:9d:62:a2:8a:
3d:3a:8e:31:99:2d:23:1f:b3:d2:b6:ba:3c:82:94:
c3:18:93:d1:a0:be:54:c4:a5:6a:d3:17:ef:8f:ae:
1c:8d:54:15:6c:cb:74:c1:d1:6d:7d:98:3d:0b:82:
98:cf:fe:b2:d6:54:d9:fd:c1:8a:a0:49:70:72:f3:
fa:30:d7:dd:c2:8a:e6:d4:f5:ac:82:c0:56:d6:d4:
cf:b4:f1:dd:a0:fe:8c:51:8b:6b:ba:76:c1:9b:c7:
2c:de:82:3a:fa:e3:6a:8f:07:02:aa:68:ea:15:df:
68:e0:3b:1e:91:22:21:a1:82:e0:04:02:6c:cc:fc:
08:f8:c4:b0:0b:eb:98:3b:78:11:d5:6b:3b:4a:20:
10:f9:a7:29:af:35:45:45:bc:ac:3e:83:bf:25:3c:
cb:9d:b3:ff:4b:7e:54:a7:d2:25:4d:3a:a3:66:22:
da:39:dd:c6:05:59:44:dc:aa:60:88:aa:35:9d:0b:
9b:c9:79:28:dc:d6:ca:ed:69:28:6d:3b:0d:27:36:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:62:59:A9:C6:F6:18:5D:12:B8:BA:34:97:7D:28:33:6E:60:D6:15
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:87:49:2f:e0:c7:f0:d5:84:a3:6f:93:49:e2:ae:6d:ae:38:
f2:e1:69:f9:e3:5d:67:b3:7b:be:6b:99:63:46:be:c3:b2:8f:
20:cd:5f:f7:d7:0e:35:e1:95:a0:99:aa:3e:d1:12:ed:8e:c1:
06:bc:ea:8c:22:61:b5:43:b5:ba:4d:7f:8d:f8:be:7f:8d:b4:
07:dc:60:a8:fb:2a:03:7b:64:f1:1b:ce:c4:ac:ff:3a:37:ab:
84:e2:3b:21:4b:b9:72:99:d3:b9:5e:38:4c:80:84:f6:74:78:
54:e6:c3:6b:a4:32:c8:be:43:8d:a1:df:4a:d3:f9:aa:f8:e0:
88:6d:90:bc:3c:30:29:c3:eb:f5:d0:60:f3:37:af:ef:86:ed:
4f:ec:66:16:a5:7b:ef:f7:7f:70:c8:02:a8:d5:fe:3c:62:27:
e6:cc:0b:e6:ae:0a:f2:9d:fb:46:d4:f4:e1:6c:7f:db:e6:fa:
92:1c:c8:93:25:a6:c8:a0:c2:40:1f:61:ff:68:5c:d0:75:e6:
8b:78:33:7d:f3:c5:32:12:b5:75:01:b8:ce:d6:90:64:69:4b:
e5:05:07:fa:33:e1:19:e7:fb:53:77:78:59:dd:d9:74:ea:7d:
19:5a:36:44:fa:2e:82:ca:fe:26:22:03:d2:d8:1a:ab:61:07:
6e:1f:af:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8zlLaBgqupyk59Jgti5KxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4
MzZjMWUwHhcNMjYxMDI3MTAwMDU4WhcNMjYxMDI4MTAwMDU4WjAzMTEwLwYDVQQD
EyhmZjYyNTlhOWM2ZjYxODVkMTJiOGJhMzQ5NzdkMjgzMzZlNjBkNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0jumciYb/iL1FOj3yN8QUqgBa9R
UA2fIWlPMs6eh9W9DLqF5Tw12OH0txpLV4i0hNm0npx+zp1iooo9Oo4xmS0jH7PS
tro8gpTDGJPRoL5UxKVq0xfvj64cjVQVbMt0wdFtfZg9C4KYz/6y1lTZ/cGKoElw
cvP6MNfdworm1PWsgsBW1tTPtPHdoP6MUYtrunbBm8cs3oI6+uNqjwcCqmjqFd9o
4DsekSIhoYLgBAJszPwI+MSwC+uYO3gR1Ws7SiAQ+acprzVFRbysPoO/JTzLnbP/
S35Up9IlTTqjZiLaOd3GBVlE3KpgiKo1nQubyXko3NbK7WkobTsNJzbqVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9iWanG9hhdEri6NJd9KDNuYNYVMB8GA1UdIwQY
MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt
ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4
LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4dJL+DH
8NWEo2+TSeKuba448uFp+eNdZ7N7vmuZY0a+w7KPIM1f99cONeGVoJmqPtES7Y7B
BrzqjCJhtUO1uk1/jfi+f420B9xgqPsqA3tk8RvOxKz/OjerhOI7IUu5cpnTuV44
TICE9nR4VObDa6QyyL5DjaHfStP5qvjgiG2QvDwwKcPr9dBg8zev74btT+xmFqV7
7/d/cMgCqNX+PGIn5swL5q4K8p37RtT04Wx/2+b6khzIkyWmyKDCQB9h/2hc0HXm
i3gzffPFMhK1dQG4ztaQZGlL5QUH+jPhGef7U3d4Wd3ZdOp9GVo2RPougsr+JiID
0tgaq2EHbh+vKQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:04 2026 by rpki-client