Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: fISMgLSaw72JYdRpkuA2xj7LhaBt4deoYFnQn0PZc5k=
Subject key identifier: AB:DA:9B:0D:19:A2:7F:36:9C:42:3E:08:CC:CA:8B:BE:BE:0C:04:B5
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 01A08DFBFD079CFFA7837D175E74A79A0F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 1549
Signing time: Fri 11 Sep 2026 01:01:36 +0000
Manifest this update: Fri 11 Sep 2026 01:01:36 +0000
Manifest next update: Sat 12 Sep 2026 01:01:36 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: xrW2OOIWLiQtziDraeeoxfsYtBNuzlRWb8i5J1aAU90=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:fd:07:9c:ff:a7:83:7d:17:5e:74:a7:9a:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Sep 11 01:01:36 2026 GMT
Not After : Sep 12 01:01:36 2026 GMT
Subject: CN=abda9b0d19a27f369c423e08ccca8bbebe0c04b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:02:b9:79:50:90:77:78:d5:41:dd:73:e3:
8c:a6:d0:7e:7c:fe:60:09:7a:3c:97:1c:56:ba:ec:
d2:75:50:4f:22:30:2e:ed:dc:51:84:4b:03:7e:c7:
90:71:1c:56:3c:2a:1e:d5:9c:68:ac:04:ba:30:f3:
be:fa:a7:7e:1d:d0:ce:05:04:6a:db:0a:36:87:1a:
d6:03:dc:bb:6b:1a:17:d9:ed:c3:06:f3:f7:c1:31:
a4:f3:0f:b2:7c:7f:4d:53:80:e7:20:7c:53:5f:93:
02:7f:50:b5:cb:02:aa:46:b0:1b:b0:97:2a:b1:04:
27:49:af:10:b8:6f:28:63:7e:a0:e8:ac:d1:51:05:
b8:ec:9f:be:cc:01:3c:ec:ce:19:92:3a:d9:af:82:
7d:1a:20:03:e1:3f:8e:33:55:d1:0b:c1:05:26:6a:
49:1c:bd:1c:ab:26:77:2a:bb:23:45:7e:08:02:d3:
c1:6f:6f:f2:dd:ca:9a:0c:89:66:9e:71:88:78:25:
89:ec:5e:de:f2:29:66:35:24:c0:9d:bd:a9:92:db:
c0:ba:32:3f:1f:24:cf:7b:a3:e5:33:79:40:93:14:
2f:77:eb:bf:4b:e8:6e:c2:05:f1:17:08:77:2a:f8:
56:bd:5a:e4:26:a9:51:c4:4a:44:3b:3d:c2:75:d4:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:9B:0D:19:A2:7F:36:9C:42:3E:08:CC:CA:8B:BE:BE:0C:04:B5
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:43:3a:16:ab:04:6b:96:f2:a5:a7:6e:2e:1d:89:8f:9d:33:
a2:e7:d4:9c:96:30:e7:33:6c:73:d3:38:52:59:cf:cc:38:7a:
73:c4:0d:7a:bd:0f:ae:e7:21:3a:90:56:42:ef:72:51:d2:24:
44:7d:38:f5:86:4f:cf:82:75:8a:9c:08:0a:40:34:70:08:75:
a4:e4:06:4e:12:a0:df:37:44:00:d1:f6:e0:9d:cd:95:81:37:
6e:2f:84:ce:06:91:6b:3e:19:b8:36:19:84:06:9e:2b:e1:fd:
88:8f:ae:45:8c:ae:38:c6:b9:cd:f9:d9:83:63:76:a9:49:84:
86:57:33:84:1c:42:75:38:b6:54:9c:b0:b1:1a:8a:b8:98:e6:
eb:58:b7:ff:0a:46:56:be:0a:1b:81:64:0f:f2:5f:e3:d6:b8:
7e:07:fa:e4:b5:24:02:71:81:32:3c:dd:67:71:53:70:71:16:
3a:16:92:69:fc:e7:37:f3:79:45:21:79:2a:03:3e:ec:1c:dd:
ac:2a:6c:57:3b:8d:1b:4f:fe:3a:b7:18:8d:e0:0a:27:24:8e:
55:01:8c:b8:de:53:b6:a2:a1:a5:cc:b9:bb:98:06:89:cb:a1:
99:9f:61:b9:74:2a:1b:0e:c9:7c:a9:15:1c:8c:8a:2b:64:0c:
08:da:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:02:33 2026 by rpki-client