Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: jQABH0Jakz/P59ZNyiUdFIKUKCaTgNH979b4uUCv/Dw=
Subject key identifier: 29:1C:89:47:C2:9D:13:DB:BE:EB:36:F8:EF:AD:C0:3D:1D:16:63:3E
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01A03D84644C7FFA7B3B6D99F8D81B1E69DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 199B
Signing time: Wed 26 Aug 2026 10:01:21 +0000
Manifest this update: Wed 26 Aug 2026 10:01:21 +0000
Manifest next update: Thu 27 Aug 2026 10:01:21 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: Ytlxshw7hHf89OkQPCGECKbeo2ptshBgI1VMmiuT0Xo=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:84:64:4c:7f:fa:7b:3b:6d:99:f8:d8:1b:1e:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Aug 26 10:01:21 2026 GMT
Not After : Aug 27 10:01:21 2026 GMT
Subject: CN=291c8947c29d13dbbeeb36f8efadc03d1d16633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:b2:7e:ff:61:e8:dd:9c:7c:79:6e:db:88:
56:9b:3f:05:4c:e6:f3:2b:f6:09:6d:06:35:bb:75:
7f:ce:a1:fe:5c:5b:70:ef:c4:e5:3b:26:12:97:bc:
a6:56:67:3d:c8:e5:78:cc:0a:33:0c:4f:6f:03:c6:
b7:3e:93:19:b9:33:2e:4c:55:09:d0:5e:37:a7:14:
20:4e:d7:17:97:c9:16:8b:5e:c3:a6:7e:1e:24:35:
a1:43:37:3a:d2:84:d9:28:30:b3:34:9d:ab:27:38:
09:b0:9f:94:42:0e:49:4b:44:82:37:6e:a0:a8:ba:
4e:f5:ad:2e:b1:06:35:86:f8:3f:f3:6c:4a:77:a9:
e4:64:a7:57:14:c6:d5:38:6b:bb:04:0f:f4:8c:65:
33:29:d0:67:96:49:a6:c8:88:91:a8:16:01:c7:ac:
24:0e:c4:f0:b2:cf:ba:f1:06:31:75:48:7b:45:ff:
69:bd:db:cf:76:6f:b2:d5:01:f2:b8:c4:d0:73:e2:
d4:bb:21:65:cd:31:3d:ae:7c:5a:0b:6b:b3:ee:dc:
54:c5:c4:20:3e:8c:7d:6e:04:90:d0:53:30:e8:34:
e0:c9:26:74:d7:90:9e:e2:af:ea:19:a2:59:4d:24:
28:31:6b:aa:f5:00:b1:dd:7a:91:13:7f:3d:96:69:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:89:47:C2:9D:13:DB:BE:EB:36:F8:EF:AD:C0:3D:1D:16:63:3E
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:f1:25:1a:ba:f7:12:d3:e7:a2:6e:73:bb:9d:08:39:c1:
3a:05:08:95:19:6b:7c:6f:71:f6:ec:d1:85:36:4a:50:0c:b0:
2c:0d:c1:b6:c7:f4:b5:1a:b7:5f:ee:44:74:b8:ca:8e:a5:e3:
47:32:9d:aa:c6:57:ab:d0:9a:e4:51:ac:76:71:4c:d0:36:c2:
69:e2:73:11:3d:19:44:f4:71:15:03:04:b4:77:d3:97:30:35:
f0:8b:bc:ae:5d:5e:41:f0:75:f3:bd:83:f4:a0:9e:7a:bc:11:
ea:c3:ad:57:38:8b:4f:66:a6:4d:f1:d0:76:99:32:ef:48:75:
c6:f2:73:37:4a:1d:0a:0c:41:ab:a5:ce:ff:9b:dd:f1:d9:aa:
d7:5a:3c:0b:6b:2d:1e:af:ce:e8:b8:54:8d:5d:0e:16:15:44:
f4:d1:5c:fb:1b:24:eb:74:90:5f:e9:5e:35:43:0a:d5:41:73:
c3:9f:2b:58:04:02:7e:0a:60:ff:a9:7a:ea:59:60:6e:1e:e0:
ac:df:61:be:54:8b:61:ad:49:fd:60:ac:11:21:40:09:ea:45:
ed:0c:26:0f:8b:3a:64:bb:b3:50:90:f0:a7:34:c9:09:cc:3f:
61:50:22:e6:f7:f3:e1:f3:80:71:60:70:56:a8:45:fe:05:6c:
0e:15:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:55 2026 by rpki-client