Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: r0VE7IDFz6HQiHfP0vIFiN7N+pvMIqA7/XChAAe1uCM=
Subject key identifier: D2:61:B5:B0:0A:25:15:EE:04:65:E8:51:57:08:0D:A1:FA:A6:7D:55
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 01A15966EA97E3282C903A9CD2734C0E7707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1AB4
Signing time: Tue 20 Oct 2026 13:01:19 +0000
Manifest this update: Tue 20 Oct 2026 13:01:19 +0000
Manifest next update: Wed 21 Oct 2026 13:01:19 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: IV8Oe4/97IY/e1tU46t/ObAQ+3UVI34pYTYxZdsCzU0=)
2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:ea:97:e3:28:2c:90:3a:9c:d2:73:4c:0e:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Oct 20 13:01:19 2026 GMT
Not After : Oct 21 13:01:19 2026 GMT
Subject: CN=d261b5b00a2515ee0465e85157080da1faa67d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:ac:e1:8f:93:d6:44:6b:63:6e:17:e0:6d:
e1:c6:ed:66:89:c6:63:37:18:3d:08:d4:24:68:87:
4a:ce:f6:58:f2:e3:2e:4c:11:e3:32:ba:47:85:dc:
0c:ee:93:f9:f0:38:ad:b9:77:40:1d:e9:9c:78:d7:
5c:39:a6:2f:f4:74:15:e2:98:3a:81:d2:20:e8:23:
6e:94:a4:8e:95:3c:cc:48:25:5b:c5:73:1c:89:f1:
79:f7:8b:78:7f:67:02:9f:55:49:a7:84:5d:d4:63:
3d:6b:66:bb:d4:52:ff:50:4a:af:e4:66:7a:d9:3e:
fd:81:c3:04:34:8a:85:62:3e:c5:79:20:c3:55:17:
bc:8c:77:3e:c5:0f:c7:6c:87:d1:7b:b4:a6:33:d3:
0f:6b:bb:c1:a2:94:80:e6:f2:e2:38:9c:23:31:18:
56:e4:86:e4:1d:3e:e1:41:d9:dd:4f:c4:ad:d4:c2:
dc:5e:9d:72:80:7a:0b:16:9e:23:8f:71:7a:38:0d:
57:8d:27:51:e8:b8:1f:73:79:0f:33:0b:6c:e1:28:
bc:0d:84:e7:06:f1:33:53:53:56:8d:03:da:6f:8e:
ae:33:d6:83:02:16:e1:80:b9:ab:a7:b4:c3:53:a2:
0e:e1:cb:91:5a:89:f9:ab:01:8c:d3:26:74:56:b0:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:B5:B0:0A:25:15:EE:04:65:E8:51:57:08:0D:A1:FA:A6:7D:55
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5c:5b:d4:dd:28:2c:ba:99:1c:d7:6d:30:47:13:63:73:fc:
a7:65:52:b6:a9:db:06:0b:ef:45:f6:a9:81:4a:69:fb:2f:e6:
2c:21:9b:c6:a2:d6:2b:e0:b3:7d:78:d0:1d:1d:23:ae:50:e7:
5c:d2:c3:38:4a:c0:bb:dc:3e:07:e9:63:9b:6a:ce:0e:ed:b1:
61:8a:03:c2:e5:4f:14:97:6d:d0:9e:e7:0f:6a:d3:f5:67:23:
8e:cd:1d:31:4c:d7:ad:3a:ca:a1:8c:6e:6a:7e:d6:48:7b:ba:
d3:32:dc:a5:98:74:2b:ea:a8:fb:78:ec:cf:3c:7d:08:4c:9f:
ff:fa:0b:8d:d6:5f:a2:79:30:6f:dd:15:18:1a:03:fb:36:df:
34:9f:4b:11:fd:05:a7:85:56:41:5b:92:73:45:7d:04:cd:9a:
ee:bf:cc:d8:47:eb:bc:a4:11:b5:a0:74:2e:85:9e:58:ff:d9:
f3:d5:b1:e5:f5:5a:c9:f1:a1:f1:ab:cc:dd:3d:c8:b3:87:b6:
c0:d3:7b:d9:3d:3d:36:c3:7b:76:32:05:f6:8f:96:33:f6:79:
0c:ed:c6:31:5e:db:e9:68:ca:99:c7:fd:8e:6f:14:6f:c3:5f:
17:77:b7:5c:d2:3d:8a:2a:f8:13:90:32:f7:48:43:75:5c:05:
44:38:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:28:04 2026 by rpki-client