Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: EvhDS3zDSihorXEUF0RWtjBj1WxGBEivjngokGc06A8=
Subject key identifier: 57:C6:62:33:79:B2:6B:92:6A:40:AD:D5:52:3E:59:86:AF:F8:A8:83
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 01A177A7B5A8BC855C717EEBD34114340A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 11E2
Signing time: Mon 26 Oct 2026 10:00:42 +0000
Manifest this update: Mon 26 Oct 2026 10:00:42 +0000
Manifest next update: Tue 27 Oct 2026 10:00:42 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: UWaNoEsm4EnZDsBZVtk6fStxzAZ89rh66WUkBIEbco4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:b5:a8:bc:85:5c:71:7e:eb:d3:41:14:34:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Oct 26 10:00:42 2026 GMT
Not After : Oct 27 10:00:42 2026 GMT
Subject: CN=57c6623379b26b926a40add5523e5986aff8a883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:6d:aa:03:19:9c:f0:d6:9e:27:5a:25:db:
9d:e7:2d:c3:a6:f2:11:f4:7f:9c:aa:ec:13:8e:e1:
d6:61:19:85:3f:fa:d8:6f:46:2e:70:2e:cd:11:00:
cb:74:0d:67:10:ec:e8:b8:ec:6d:91:c6:92:82:e4:
58:b6:9e:d2:60:5c:df:f7:ed:42:94:a6:7f:f3:67:
47:aa:ae:23:35:14:cd:83:dc:a8:b3:a2:2a:63:fa:
e7:ca:4f:cc:8d:5b:e6:19:e8:63:a2:c2:59:c8:bb:
a9:07:3a:80:64:40:32:98:12:b2:e4:99:95:2b:24:
34:cd:83:dc:51:8a:dc:cb:f2:6d:f9:54:0a:aa:04:
28:6f:85:25:ee:38:4c:d9:77:26:44:34:8f:ad:76:
09:86:17:21:e9:3a:d2:43:a9:5d:ff:80:1a:09:d3:
8f:84:c1:2c:87:e3:9a:30:ce:32:95:94:ba:6e:f7:
a1:2a:fd:a1:90:50:66:f6:fa:6a:fe:65:7f:c5:0d:
a3:05:ff:6b:b7:45:e1:5f:a5:b9:a8:2f:55:33:d1:
8a:f0:49:fb:94:c4:21:85:2f:20:cc:68:2a:cb:05:
f5:e5:c0:b7:50:42:8a:23:f1:53:92:fe:38:23:7e:
4e:66:88:56:0d:4c:cc:29:fa:78:5b:99:e6:14:76:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:62:33:79:B2:6B:92:6A:40:AD:D5:52:3E:59:86:AF:F8:A8:83
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c4:c5:ab:b7:d5:5e:31:57:2b:53:9b:fc:9d:63:73:c9:d4:
4f:6a:8a:b3:96:ee:5a:b6:68:d8:62:fa:29:66:a5:99:b2:20:
07:d2:f4:e1:cd:54:0d:c1:c6:31:a0:ad:a5:50:73:56:29:5d:
09:e6:1c:3c:de:c2:06:13:d3:c6:88:4b:19:1b:59:37:20:56:
19:ce:4b:1f:ba:a8:50:cd:0f:fb:c8:81:ef:f4:51:ed:41:7a:
88:f4:be:4f:6e:12:06:a7:a8:08:5f:7e:a2:4c:d9:76:0f:1c:
dd:3e:e7:12:62:3f:47:68:e0:e0:5a:84:77:0d:7b:bb:a5:53:
7e:20:e8:9f:74:29:34:cd:53:08:f1:5a:01:52:9e:dc:d4:b5:
02:aa:97:2d:6c:83:cd:4a:d3:b6:1f:66:8d:6e:5c:d1:e1:bb:
e0:f3:ed:41:2b:a5:5e:c3:a4:a2:84:6f:27:5b:bb:85:9d:99:
1c:4d:6e:f5:38:30:fb:75:80:c3:d7:18:05:8f:6b:87:04:62:
dd:3c:f2:ab:f1:6b:74:ea:25:99:bb:ec:e1:d4:fb:12:39:7a:
91:0c:e5:dd:77:14:be:ce:3e:7d:49:2e:69:ae:10:92:b2:d0:
d3:0d:cb:fc:23:1b:61:3b:ca:7a:b4:af:73:6b:06:f9:da:82:
f4:29:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:26:59 2026 by rpki-client