Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: yVRQbp0dAb2i6sgITtrUis3l8HfoiSdxZSvEBGvbyLg=
Subject key identifier: 38:D8:1B:0F:00:8F:49:BD:CD:87:A1:88:55:31:1F:B1:56:32:A2:08
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 01A190C2F20375A305958F4AFF2AEC62993C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 15CF
Signing time: Sat 31 Oct 2026 07:00:57 +0000
Manifest this update: Sat 31 Oct 2026 07:00:57 +0000
Manifest next update: Sun 01 Nov 2026 07:00:57 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: UIuWxK8j6tddO2gxP4lAxwzMYKf/6sf+OqRxocOtY2M=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:c2:f2:03:75:a3:05:95:8f:4a:ff:2a:ec:62:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Oct 31 07:00:57 2026 GMT
Not After : Nov 1 07:00:57 2026 GMT
Subject: CN=38d81b0f008f49bdcd87a18855311fb15632a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:91:27:56:73:0a:da:94:e1:61:88:dd:70:7c:
8a:be:eb:66:c9:f5:c6:c7:8b:f7:61:e0:46:fe:e7:
09:69:22:50:dd:34:66:5e:14:12:87:c4:bc:ce:f3:
0f:86:9e:33:fe:87:1f:70:b7:01:6e:35:f8:71:e9:
4d:3a:1d:bc:0e:e1:88:fd:02:1c:1a:78:15:db:b6:
7d:e7:c7:08:db:c5:84:ce:60:70:96:4b:0f:7d:50:
79:a4:51:7f:61:04:46:88:88:82:ca:09:8d:d0:8a:
f4:f5:d1:6c:ff:54:bf:3b:e2:a5:16:30:44:38:45:
da:53:24:7e:57:e7:3d:72:0b:11:b6:e8:ba:1c:61:
01:b4:79:f2:aa:b5:af:b8:a5:ad:28:08:34:06:c0:
15:09:85:41:69:f8:fa:a6:8d:7a:79:3e:c0:fd:f8:
52:d0:f8:b2:2e:cf:2c:fa:ff:dd:61:62:2c:da:f0:
61:19:a5:75:ba:c2:ca:41:54:78:ba:8c:ef:a4:48:
8a:9f:f8:c5:be:9b:5e:6e:e8:9e:49:de:e1:d5:29:
48:64:41:84:01:88:29:61:5c:47:c5:ca:6f:ba:3e:
75:e1:8c:9e:ac:bd:0e:46:b8:75:07:9d:f9:6d:d1:
c8:21:f2:7f:50:58:28:29:a2:b1:9f:b8:4d:6c:f3:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:1B:0F:00:8F:49:BD:CD:87:A1:88:55:31:1F:B1:56:32:A2:08
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4f:d4:14:ed:f4:6b:19:51:42:3d:1e:67:d2:f7:f9:48:57:
bf:5c:38:dc:c4:46:14:28:fd:34:04:44:26:fa:6e:8a:1c:f3:
86:a6:43:c1:bb:9f:ec:00:bd:af:46:6e:6b:a0:4c:54:df:1a:
9a:94:8c:6b:40:b9:4c:5c:88:17:c0:31:e2:8c:64:62:59:a2:
5c:6c:26:81:d9:5a:b7:82:b8:11:a3:61:c8:50:1f:ac:12:b1:
78:88:cf:b9:f3:79:79:79:73:eb:9b:22:9a:cc:bf:3f:fe:ad:
e8:0b:55:70:72:0c:53:c0:fc:24:7d:e0:33:16:b4:b5:ac:ad:
b0:61:f5:dc:7b:3b:45:21:64:7b:84:ad:6f:e6:04:79:70:dc:
06:92:1e:e4:67:76:12:e4:2f:a3:b6:7c:a3:53:81:2a:e6:b9:
d3:b0:9e:72:82:9c:d7:df:4b:f0:e3:60:ef:92:20:29:45:99:
6d:ef:75:09:1f:03:c8:0f:6f:9f:e4:27:04:75:e5:3a:3c:6d:
5f:b5:88:7c:13:fd:75:04:7f:1a:e6:fd:3f:65:dd:89:fd:30:
e6:5b:aa:24:54:48:7f:ce:fe:4e:34:e9:03:64:41:22:f1:33:
10:f7:0e:80:51:55:a7:dc:fb:c5:7e:92:ec:f6:39:fb:43:9c:
a3:88:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:29:26 2026 by rpki-client