Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: BQcL+dxmFN/PfgMl3tsemBPHKfrWVN4Tb/R+4fgECF8=
Subject key identifier: A6:38:DB:5F:FF:67:09:4B:A5:33:28:05:96:41:CD:56:D4:6F:CF:C6
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 01A12AD74BD6B2A28A94D1A570FBD77EE62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 12:01:54 +0000
Manifest this update: Sun 11 Oct 2026 12:01:54 +0000
Manifest next update: Mon 12 Oct 2026 12:01:54 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: j/eso5qSq2+UsovaansAVkxf4FzjtE92Fd9YpUhBgPE=)
2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:4b:d6:b2:a2:8a:94:d1:a5:70:fb:d7:7e:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Oct 11 12:01:54 2026 GMT
Not After : Oct 12 12:01:54 2026 GMT
Subject: CN=a638db5fff67094ba53328059641cd56d46fcfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:bd:61:9d:78:f8:2b:b7:b6:2d:df:67:53:
02:6e:b8:0b:7e:ec:ca:c7:25:58:af:c6:98:56:8a:
1d:85:38:e9:af:f7:0c:a4:9e:95:89:a3:7b:45:86:
e7:9a:b4:d7:33:ba:cb:2e:83:0c:ec:76:94:15:b7:
48:6a:7a:44:e1:f9:0b:9b:43:64:7d:39:a1:94:69:
f9:ef:d3:ff:74:9e:d2:b2:2c:7f:86:6e:a9:a0:77:
6b:c0:2c:99:e6:fe:cc:5d:a8:a9:81:10:b1:e7:7c:
c4:54:02:7b:ee:e2:4f:0d:0e:55:fd:2d:02:a1:ec:
9d:07:4e:40:c0:a0:0d:bf:db:e0:a4:52:3e:a7:c0:
5a:fa:10:c5:49:6f:bc:8c:44:f8:86:65:0d:df:ff:
f7:c4:35:f1:f2:68:ff:ec:e5:7e:d5:d4:49:05:bd:
cb:39:30:a5:31:08:42:c5:70:1e:13:c9:10:66:fe:
39:9e:08:1a:06:f9:99:be:f0:01:a8:77:29:c3:77:
f9:54:ad:41:3f:70:48:e4:67:7b:86:b8:5a:0a:3b:
2f:d5:f9:03:67:a5:5f:3c:e9:84:92:52:c5:22:e1:
d5:bc:4e:a4:08:a1:6d:a4:98:2a:5d:6b:16:c0:2f:
58:49:ac:9a:19:7a:b7:cc:c8:9f:f3:1b:09:eb:23:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:DB:5F:FF:67:09:4B:A5:33:28:05:96:41:CD:56:D4:6F:CF:C6
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:5a:ff:5c:5a:b8:ad:d1:b5:93:61:27:b3:c8:e2:39:a3:
5a:d3:48:db:1f:28:64:62:bb:60:71:c4:95:ff:c8:28:bd:ac:
26:0d:52:88:7e:a3:85:09:35:ce:e0:79:ee:8c:b3:80:b9:89:
2c:d4:13:25:c2:b8:56:0d:33:81:ac:13:5b:22:06:67:b5:af:
bc:e4:aa:2d:c6:60:cc:f3:99:d9:ac:66:50:d9:96:43:ec:c7:
e2:66:f9:b4:fd:62:83:c1:05:32:16:0c:b4:c4:ac:5d:95:2a:
d8:06:90:cc:c9:b5:93:9e:f3:e8:c6:05:26:b1:e4:73:85:d4:
55:e9:96:67:29:fc:a0:b8:36:b8:ef:82:2e:35:d4:90:a0:56:
99:71:97:3b:e0:f5:a1:2a:a7:ec:56:df:62:99:30:e5:63:27:
0f:61:75:0b:aa:f7:90:a3:a8:a6:86:32:b4:66:b0:8d:48:b7:
a3:dc:c8:aa:a0:d8:37:11:39:37:37:b5:68:48:50:ce:18:e3:
d8:79:1a:aa:69:26:02:84:59:b1:1e:32:5b:24:ef:49:64:d8:
2d:b4:eb:f3:c6:ae:97:1b:cd:62:25:20:6c:6e:25:f0:42:b4:
21:d0:24:33:3a:d9:93:91:f2:d0:53:19:77:5e:61:9e:e4:09:
d8:4d:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:28:30 2026 by rpki-client