Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: NHoa6Ev8ZizZ/KFIfW2My/YbOHLpgwlAXtImy3MEy4A=
Subject key identifier: 9F:06:8F:A0:B0:2B:85:6B:00:9B:6C:27:60:63:65:89:A5:2D:30:68
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 01A175B99557B83AC543EC1DDAEB483E0016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0A10
Signing time: Mon 26 Oct 2026 01:00:58 +0000
Manifest this update: Mon 26 Oct 2026 01:00:58 +0000
Manifest next update: Tue 27 Oct 2026 01:00:58 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: Ydd1RMen3LHaBH/IGMJXiRWZU9sSxnlTxlqm8x+lzC0=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:95:57:b8:3a:c5:43:ec:1d:da:eb:48:3e:00:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Oct 26 01:00:58 2026 GMT
Not After : Oct 27 01:00:58 2026 GMT
Subject: CN=9f068fa0b02b856b009b6c2760636589a52d3068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:c3:43:8e:45:e1:6b:1b:ad:d3:3c:a5:66:
26:a2:4f:6d:b5:18:96:76:15:57:cf:99:56:92:eb:
66:5f:3d:41:eb:f4:87:29:bb:ed:04:56:a6:47:f8:
04:68:40:a2:87:83:cd:11:54:47:0b:2a:be:53:b0:
5a:3a:49:8f:f2:d5:11:61:a7:1a:c3:e8:d1:ef:05:
7a:18:9a:db:0b:ca:02:47:c5:6c:62:2e:a5:90:7e:
c9:e6:7a:8a:99:6d:8e:c3:ba:97:5f:dd:d6:77:fb:
78:7d:88:8a:43:01:79:c0:62:4d:ec:93:75:56:cd:
21:61:49:78:6c:3f:97:f8:41:2d:1c:c9:a0:88:7b:
99:78:43:db:12:4d:7e:a1:d0:25:0d:75:b1:3f:83:
d6:1c:1d:44:a2:86:8c:60:20:5f:3f:4f:92:59:40:
69:d8:24:41:b6:ae:79:5a:18:ab:3d:c1:22:a0:74:
30:48:e5:27:ec:16:4f:58:36:98:5b:14:47:e7:27:
ce:9d:a5:b5:54:67:96:2e:44:69:64:87:de:a9:2f:
d1:eb:b1:68:83:7a:d2:7e:ad:14:5a:39:59:40:81:
4b:30:f5:8e:76:3f:eb:cc:9f:72:d4:82:30:77:0b:
07:57:eb:e2:f7:5a:95:88:39:43:3a:90:c1:96:e7:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:8F:A0:B0:2B:85:6B:00:9B:6C:27:60:63:65:89:A5:2D:30:68
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:23:14:96:b2:89:60:57:b8:bd:e6:2f:0b:1b:e1:2a:fd:
9c:96:d8:4d:7f:e7:6c:08:93:99:87:d4:db:d1:9a:7a:03:20:
50:8c:fe:a8:cb:fe:35:d4:27:60:85:b4:94:e3:00:32:29:a9:
ac:c7:86:2b:16:a2:26:c2:47:ba:04:3c:9b:52:9c:7c:7e:f9:
b6:44:69:e5:f6:01:71:c0:b0:55:8d:aa:a0:36:00:7c:0b:ba:
90:0e:6c:64:f0:46:c9:ff:94:e0:a7:8f:6c:c5:9f:d5:e6:3a:
24:1e:e1:77:9b:aa:22:da:c8:6a:fc:2b:0e:51:a9:b4:5e:ed:
03:35:0c:b5:3d:ff:af:da:95:21:b0:91:ae:5a:b4:56:e8:c0:
98:c5:70:c2:5e:16:1f:03:12:47:b5:00:86:c1:74:db:90:9d:
86:65:d3:19:ae:1b:6e:e8:37:8d:d5:78:41:44:70:c5:56:01:
58:e2:ce:b2:be:a4:22:e2:9f:28:7c:ef:3d:c8:3a:e1:91:a5:
a3:8d:8d:9c:8b:f4:82:72:0a:ca:02:ca:33:38:d4:30:0b:b5:
8a:cc:92:49:6d:e9:96:5d:31:fd:78:c5:27:66:ae:e6:f8:68:
9b:a1:23:37:39:8b:12:bc:bf:4a:b2:91:4d:07:0e:4d:64:3c:
0a:56:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:28:31 2026 by rpki-client