Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: xpmDDoZVDGIrZxgBeZKYn2YM5hGFwxGdY4HjUnc6CLg=
Subject key identifier: A6:28:07:79:05:01:4F:AC:C9:96:0D:4A:25:0C:EF:04:5F:82:30:89
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 01A17C28E912A57C801592004A0F69BA9A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 1687
Signing time: Tue 27 Oct 2026 07:00:17 +0000
Manifest this update: Tue 27 Oct 2026 07:00:17 +0000
Manifest next update: Wed 28 Oct 2026 07:00:17 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: QISViYoq5AnBKlCOff/e/yIP5bZ8KvrbJnkFhfIBxv0=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:e9:12:a5:7c:80:15:92:00:4a:0f:69:ba:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Oct 27 07:00:17 2026 GMT
Not After : Oct 28 07:00:17 2026 GMT
Subject: CN=a628077905014facc9960d4a250cef045f823089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:c8:be:31:64:6c:58:26:7a:8a:ca:70:fb:
60:c5:59:43:d6:cb:e8:9e:24:c9:64:36:d1:9f:fc:
5c:79:0e:8c:bd:d6:4f:9e:fd:f2:9f:26:c0:a2:cd:
e2:fc:8a:11:c8:18:ad:62:f7:38:b0:f0:57:51:4e:
05:54:91:d1:d5:26:b3:9e:a0:50:f2:00:4b:8d:b5:
6f:95:0d:e8:56:04:4f:85:29:c5:b5:f2:9e:2d:30:
7d:bc:89:76:5e:18:d6:8a:f1:3f:51:11:92:5e:d5:
0d:9f:45:23:9a:7c:29:78:2d:96:52:09:32:1d:b9:
58:f7:a4:04:98:75:95:cd:bb:a1:53:99:cf:02:b7:
ba:7a:14:4b:bb:89:28:f4:16:44:f9:54:c4:ea:a1:
d8:de:77:31:25:95:6c:ef:e6:e9:e1:c8:3c:35:2e:
f7:3a:d5:3b:95:24:68:07:56:85:31:8c:58:98:cf:
df:7a:46:59:9a:b1:1e:60:81:f4:51:62:46:c3:5d:
27:9d:4e:7d:cc:35:c7:0b:83:3c:e7:1a:2b:32:19:
dc:4a:83:71:c5:50:28:ce:d9:32:7f:20:63:42:fd:
48:92:d3:c2:ce:e5:c8:3c:db:a3:d9:d2:de:02:e3:
fc:7c:43:af:7a:49:5d:1f:8c:8e:2d:df:a7:91:20:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:07:79:05:01:4F:AC:C9:96:0D:4A:25:0C:EF:04:5F:82:30:89
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:76:fb:b0:cf:29:61:50:bc:0f:30:42:56:d9:26:fa:c4:e8:
b3:8a:e3:3a:4c:e7:33:b8:9b:89:97:b2:ed:d6:7d:28:19:e2:
13:37:5f:7c:60:f2:a8:37:f2:85:84:1b:63:6d:9c:4a:11:fb:
4d:e7:da:81:4c:91:9a:0f:48:60:ba:5a:c8:5c:c0:92:7b:15:
1f:af:63:af:fc:b4:a4:75:3e:d5:70:a0:fa:c4:9f:f3:27:4b:
b1:54:a9:cb:e0:3c:a4:31:3a:ec:45:e1:1b:15:d8:53:2b:44:
9e:d4:5b:c7:8e:af:4e:42:93:bf:ad:ed:c3:c7:67:73:7c:1d:
ac:7a:57:62:8f:95:11:e7:18:9c:63:90:c4:3b:71:90:3b:dd:
67:ab:37:23:73:86:af:a5:b0:79:54:e0:88:d2:d5:2f:50:80:
3d:08:b9:b2:12:cd:13:54:0e:02:c3:6e:a5:b3:a8:37:cf:0e:
26:50:16:39:2d:80:cd:39:5e:03:6b:0a:96:96:d7:8f:1e:e4:
93:1d:f4:b2:04:df:30:c0:41:d0:09:ff:c3:37:a2:33:2f:f8:
85:a8:a1:98:32:52:a0:71:a4:0a:c4:c3:21:94:7b:a7:3a:c7:
3f:d9:0e:e2:86:3c:13:64:60:b5:7e:cd:38:0c:9b:c7:83:d9:
3a:e8:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:52 2026 by rpki-client