Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: NZKEI+N29KyGaHs4sMTcnN5TF7eze8suQpsL+sFpfXQ=
Subject key identifier: 15:4A:2A:0C:CD:4A:76:02:01:B1:E7:60:E0:CA:27:60:27:20:D0:8B
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01A17EBCAEA9C329F4BE0E34E3BAE3998FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 19:00:57 +0000
Manifest this update: Tue 27 Oct 2026 19:00:57 +0000
Manifest next update: Wed 28 Oct 2026 19:00:57 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: 2J8PoKMm5vRKftDhMJBpRU3EO8cM1fbcHfxdDLFEvDs=)
2: lF6xMupUMlipMq7GMpM0r0z9I7w.roa (hash: 0Res1n1L0Nd2qqeKb1zoNe5I0Gf7UP1O9DGe+CZxdzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:ae:a9:c3:29:f4:be:0e:34:e3:ba:e3:99:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Oct 27 19:00:57 2026 GMT
Not After : Oct 28 19:00:57 2026 GMT
Subject: CN=154a2a0ccd4a760201b1e760e0ca27602720d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:95:c8:55:60:48:1d:c3:5d:93:26:9a:ec:
dc:fd:90:02:e3:48:7e:8a:9c:c8:c2:14:65:c9:d9:
fb:8a:c0:a1:8c:b9:c5:32:07:5e:ff:e3:6c:8f:cf:
f6:fd:9e:ee:fe:cb:76:0f:94:85:49:d3:be:f8:6b:
e3:3d:18:6f:02:e5:e8:76:3c:f3:e1:1c:b8:16:b1:
41:56:69:ec:cb:84:57:31:bb:6e:87:29:88:dc:27:
63:68:85:fc:67:43:a0:cc:19:23:08:de:2d:a7:db:
10:17:e4:5b:22:fd:fa:4c:30:67:07:d3:31:50:72:
ba:8e:69:b3:2b:90:9b:f5:92:31:c2:8a:bb:0b:47:
29:e9:60:2e:3d:9b:b9:76:be:1e:d7:51:9c:14:05:
48:35:f7:89:e8:62:96:b1:10:cf:23:8a:78:55:a1:
b1:00:c7:a8:c7:b6:33:21:b4:13:5a:fa:af:f7:9f:
c1:43:36:78:b2:93:4b:57:aa:b7:77:5a:46:ad:8c:
0d:7b:2e:a8:84:d9:0e:f7:d3:52:4b:32:a2:a1:93:
71:7d:9d:d4:6b:e5:ff:45:cc:3a:4f:ee:16:3b:c0:
7a:33:66:11:54:cd:4d:7c:46:95:a1:ab:44:93:a6:
f6:ba:2f:88:d2:9c:6f:33:d6:bc:ee:b2:22:0d:e2:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:2A:0C:CD:4A:76:02:01:B1:E7:60:E0:CA:27:60:27:20:D0:8B
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bb:a2:76:8a:2b:16:05:f1:10:3a:26:6f:e4:9e:1d:41:0a:
b6:06:3a:19:41:9d:d1:e6:c8:a4:16:43:90:c9:2a:9d:2e:15:
80:43:5a:2d:b1:06:95:d3:3d:00:90:d1:85:b6:ec:0c:e3:71:
8e:4e:15:07:62:b4:1d:01:e6:e9:ce:6a:c5:00:f2:3a:96:9c:
4d:57:64:ba:bc:ab:20:00:4f:36:34:37:73:01:7c:de:b0:c1:
0a:88:39:1c:1d:bf:df:30:e2:a2:a8:20:12:8e:a9:e6:ca:34:
c3:e8:33:c8:c4:77:9e:10:3f:a3:4c:4b:bf:34:d7:4b:eb:ec:
03:46:3d:49:13:53:b4:ca:a0:41:43:35:15:71:86:6b:d8:22:
31:86:f5:60:34:09:a9:a3:55:40:94:2b:a8:9e:3d:0e:61:65:
3f:2f:10:3d:d0:46:3e:5a:5f:59:1f:8d:98:e5:a0:9b:d4:3e:
ce:6e:48:f6:00:a3:26:fa:53:14:4b:34:7d:9f:71:c0:dd:87:
2a:d4:54:4a:d5:a1:f8:e8:54:52:aa:4f:ab:00:a4:90:68:5c:
8f:ad:09:99:cb:8a:63:c5:55:72:82:9a:1e:54:29:c8:63:9e:
41:32:21:7f:31:d3:52:ca:2e:d3:57:08:14:31:2c:e2:f2:34:
8a:21:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:34 2026 by rpki-client