Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: kXo7sIIxPoQJIl7KQmlmYfogqiHWB2nPSP29Wt+EIV8=
Subject key identifier: D3:57:A5:70:82:37:B1:C3:F7:AF:2F:3C:E1:5D:FC:55:9D:D4:A4:19
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 01A0017029652CFD25E00EE69F912150038D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:02:02 +0000
Manifest this update: Fri 14 Aug 2026 18:02:02 +0000
Manifest next update: Sat 15 Aug 2026 18:02:02 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: 963TpSWenqb/j9bAX9p5XuTcZFtk7T1Bn5VwSbwu0c8=)
2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:29:65:2c:fd:25:e0:0e:e6:9f:91:21:50:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Aug 14 18:02:02 2026 GMT
Not After : Aug 15 18:02:02 2026 GMT
Subject: CN=d357a5708237b1c3f7af2f3ce15dfc559dd4a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:c3:c5:44:ab:27:f1:bf:d4:52:f7:88:dc:
52:03:5e:15:de:97:2c:eb:c4:cc:4e:9e:7b:56:dc:
cb:5c:af:44:4f:3d:cf:62:81:79:be:01:87:3c:a2:
03:5f:7d:e0:30:09:ee:ba:db:91:bd:e2:1a:1f:11:
1e:de:2b:53:82:3e:fd:b7:c8:f7:07:17:bd:30:bc:
f1:7b:e9:ae:01:09:56:dd:6b:2f:2a:25:d6:d4:c3:
a5:b5:64:cd:2a:1b:f5:05:d2:b3:0b:15:ae:82:11:
d2:7a:df:f3:fb:f2:7e:3c:0b:13:c1:f3:4c:63:59:
f5:92:dc:11:ea:10:83:19:3e:9b:47:73:5a:17:a1:
4f:63:ff:08:d0:a0:d7:70:aa:56:66:04:f5:f9:51:
fd:d5:90:1c:f8:d9:1c:70:28:04:2b:0b:e8:a4:14:
63:17:aa:55:2b:a9:b7:bd:c4:5b:36:15:af:fc:78:
08:ea:30:4f:8b:db:2c:0a:93:51:3f:cd:31:13:46:
75:58:ce:8a:09:09:cd:3d:30:f9:de:0c:8a:76:3f:
1e:ce:10:6e:81:08:5a:27:ed:7f:00:f3:cb:c7:af:
d3:d1:c7:98:a5:37:ac:68:48:26:87:c5:c4:80:2f:
29:37:7c:9b:ab:57:81:7f:30:c8:c3:7c:8b:1b:2f:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:A5:70:82:37:B1:C3:F7:AF:2F:3C:E1:5D:FC:55:9D:D4:A4:19
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:30:f9:b8:d4:8a:1a:05:e5:43:30:63:80:83:f3:f4:ea:74:
81:75:db:bf:cf:95:7d:67:06:50:4f:48:40:fd:f0:af:34:b4:
2d:4d:91:14:7a:d1:09:0e:2b:aa:85:a3:bd:9a:71:f0:51:66:
bb:4d:87:a3:31:54:56:ce:37:d5:3b:f6:0e:c8:0c:9a:da:75:
1c:ae:60:64:44:94:09:4b:0d:75:3a:8d:2b:e2:b0:97:b6:47:
46:b6:46:52:f4:eb:dd:d6:46:1f:77:23:76:cc:4d:da:ce:ed:
2c:1b:24:0b:44:85:0f:96:e8:6c:2a:c3:fe:14:fe:bd:09:ce:
5d:f6:86:df:5c:d5:d6:64:9c:b8:02:68:2a:81:af:9b:52:4a:
00:5e:1e:b4:14:ad:bf:96:98:ac:9b:fc:82:f6:fc:af:f6:ef:
19:83:7b:33:86:ad:c8:d4:4a:cc:22:c3:9d:3a:b3:7d:65:18:
b7:a4:f7:f9:65:8d:42:a1:db:74:4e:ab:c9:fa:c1:c3:92:96:
6e:f9:ab:e2:d5:fb:f1:b3:62:b5:c9:d2:3b:91:6e:2e:40:1f:
ed:1f:fe:f1:2a:59:4d:6b:47:30:7b:a1:76:9f:78:28:c4:a4:
af:26:b3:4c:5b:fc:7a:82:63:3e:bd:67:ac:cb:42:53:33:44:
28:b5:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:49 2026 by rpki-client