Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: bIM3nqPifkQ5LAPZ6I6kS3FO4Ftt/b4GwBhq6hJqOMY=
Subject key identifier: 9C:76:D8:A8:02:F0:60:68:55:38:4E:1F:E5:69:2A:94:9A:88:D1:9C
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 01A0BBAFE59A78360400A2B730A84BFFE5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 05AD
Signing time: Sat 19 Sep 2026 22:01:01 +0000
Manifest this update: Sat 19 Sep 2026 22:01:01 +0000
Manifest next update: Sun 20 Sep 2026 22:01:01 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: dM/uGdnCKnlY6qiKQd7PgP/SlVbP60WnFAVOkMUJw8M=)
3: jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa (hash: 0TxSTCi/XS0O1qfQUziR/iAsNnnvd41KQSzNVhpvgcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:af:e5:9a:78:36:04:00:a2:b7:30:a8:4b:ff:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Sep 19 22:01:01 2026 GMT
Not After : Sep 20 22:01:01 2026 GMT
Subject: CN=9c76d8a802f0606855384e1fe5692a949a88d19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:23:82:48:90:24:3d:07:8f:06:00:32:4f:
f5:0c:e8:f1:8d:00:09:e4:50:53:10:f4:b4:88:2b:
b7:e6:33:be:39:a2:49:c5:e0:4a:27:f7:ce:6e:22:
4d:7c:1d:e3:7a:f7:1b:3c:7a:83:71:32:61:1b:df:
bb:7f:eb:6d:57:16:48:2c:c8:35:ec:eb:31:c2:59:
73:3f:53:ee:49:5d:26:36:30:f3:ad:56:aa:36:02:
cc:bc:9c:97:59:62:25:75:48:c9:3c:e7:2d:7e:1e:
e0:c9:f8:0b:8f:de:52:82:d0:09:8a:a5:36:f4:c4:
91:d6:e3:ee:79:14:8d:85:cb:0b:6e:c3:bc:2a:ba:
f8:6a:20:de:ca:63:07:26:9b:5e:a2:8b:f9:bb:b8:
6a:fb:18:a2:8f:54:3e:38:d5:53:01:a4:c6:99:a7:
2e:5d:35:f2:c9:3d:8e:61:31:06:f5:09:1d:6a:67:
5c:cd:e4:3c:13:38:88:b5:5d:3b:a6:b0:b9:c3:8c:
47:7b:5f:eb:a0:e4:96:d5:34:5e:2e:85:66:14:57:
05:47:d5:32:34:3b:80:fa:c6:d9:8f:e9:55:ca:50:
c2:a9:b1:89:95:84:56:bf:43:1c:c6:ae:03:c3:60:
2f:f5:54:4a:18:4b:3c:19:c5:b6:76:49:c2:a0:ab:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:D8:A8:02:F0:60:68:55:38:4E:1F:E5:69:2A:94:9A:88:D1:9C
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:19:dd:f3:9d:79:dd:dc:60:b0:fa:93:53:bf:5f:85:a5:
87:42:59:75:49:af:59:82:1e:59:b0:60:80:dc:a1:dd:ba:03:
8b:95:f7:08:12:42:41:82:6f:09:9c:f0:e8:2f:1b:43:bc:f4:
d4:d1:b4:8b:c4:88:4b:dc:34:f5:eb:78:a3:45:2b:2c:3d:9e:
aa:0c:7e:95:84:ad:22:5b:bf:56:f6:fe:97:64:ca:02:5d:0b:
33:34:86:10:b9:e4:a0:dd:92:d2:d1:f9:4f:39:b2:04:a7:a3:
82:19:db:e4:65:f6:ed:e2:62:cd:15:d6:f6:b9:78:eb:06:a7:
0e:8b:01:75:85:e9:ae:51:3c:cc:04:db:ad:9a:6e:5f:21:29:
9f:7e:b4:4f:43:d1:d1:92:39:4e:f4:01:4d:01:9e:7e:25:85:
63:aa:9d:23:6e:fb:86:b8:b5:3a:a6:c2:9f:d9:14:3c:23:f1:
e3:84:91:0b:78:e5:7f:cc:43:a1:b6:c6:68:32:7f:19:82:0d:
b9:26:f2:3e:b8:b3:4e:f4:08:23:d9:38:41:e9:1f:8b:68:14:
cb:b0:6d:ba:81:1d:a1:1c:49:c5:d0:52:41:2f:97:02:a5:fa:
63:6d:e5:fe:a8:b2:ad:9d:66:a9:c8:db:8c:9f:52:3f:b2:36:
9a:8d:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:46 2026 by rpki-client