Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
File: HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft (raw, json)
Hash identifier: 7TkpsaTRz9oMD3Zh4knlR/xzOYgyD+ePoGcLASKCZo8=
Subject key identifier: D8:0A:6A:86:8E:69:F7:A5:CD:A2:30:A7:D3:42:85:49:FC:DC:B9:EA
Authority key identifier: 1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
Certificate issuer: /CN=1c0784053fc866a556234548119416d1bd716980
Certificate serial: 01A117BD6F9B1C2517CEA9554287FB0BB2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
Manifest number: FB
Signing time: Wed 07 Oct 2026 19:00:53 +0000
Manifest this update: Wed 07 Oct 2026 19:00:53 +0000
Manifest next update: Thu 08 Oct 2026 19:00:53 +0000
Files and hashes: 1: HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl (hash: 09f5MFk/twy86nJaMhbS/7e3nwbB342JGVxMbRELpuA=)
2: Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa (hash: UNgTl0HhH/SBGa8ko1wMjVaJ6tBhwBkcw/5zum00v8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:6f:9b:1c:25:17:ce:a9:55:42:87:fb:0b:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0784053fc866a556234548119416d1bd716980
Validity
Not Before: Oct 7 19:00:53 2026 GMT
Not After : Oct 8 19:00:53 2026 GMT
Subject: CN=d80a6a868e69f7a5cda230a7d3428549fcdcb9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:72:60:51:31:fb:a9:37:2d:49:9b:5b:76:
1e:89:4c:93:7a:f5:f2:cc:9a:59:73:c5:1a:a5:2f:
f2:8d:af:e3:05:fd:03:c1:63:e5:a1:14:e3:96:16:
22:23:28:0f:f6:22:cc:5d:ad:a8:e2:b7:68:4a:68:
57:68:47:2c:59:54:16:bb:ef:35:f6:2b:08:e7:7a:
98:9a:96:39:76:10:69:54:4f:35:6f:aa:f9:0e:0f:
05:af:de:58:c3:b4:04:9b:0f:97:58:be:50:10:f8:
ed:df:0d:de:5e:c2:74:f5:78:42:72:31:be:a9:b2:
ad:a9:b4:31:71:43:6e:7e:93:86:93:db:d2:58:dc:
d7:f3:14:76:25:7e:26:56:ea:2e:58:cf:e1:87:a4:
12:41:e0:b6:23:a8:7b:f3:fb:48:39:f6:ff:6a:74:
67:82:86:13:17:11:23:9c:ce:c7:2b:b3:84:67:ef:
04:79:be:2f:e6:0a:6c:1d:64:f3:6b:86:5e:d8:28:
66:b6:28:e3:97:13:90:03:5a:40:85:52:7e:33:d5:
42:74:5a:96:8b:b6:a5:02:e6:fe:8a:cc:f7:0f:a6:
42:f5:b9:fd:ce:73:5f:54:a0:74:8c:7d:d4:f6:d1:
55:86:36:ab:ef:6b:c6:60:9d:bc:90:df:f9:85:87:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:6A:86:8E:69:F7:A5:CD:A2:30:A7:D3:42:85:49:FC:DC:B9:EA
X509v3 Authority Key Identifier:
keyid:1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:e3:84:85:73:2a:01:e1:4a:95:e2:1d:8c:0d:f6:93:e0:
fa:92:5e:e6:fd:9c:20:08:df:12:0b:7c:2f:a1:47:69:4b:32:
13:58:f0:30:f4:86:91:d9:9b:50:8e:21:e1:c6:20:8c:d6:5f:
ae:27:0b:69:10:5f:7f:48:9a:6c:88:41:c1:3e:27:71:cd:11:
4a:73:2e:60:7c:29:fb:cd:6b:d8:17:fc:f1:f6:0a:28:0d:0b:
91:09:14:68:83:e5:40:9e:7f:b3:26:5f:48:0c:f9:59:ee:08:
d7:36:79:4f:ef:1a:04:88:cc:10:a1:3a:39:9e:d7:5f:14:36:
a0:3f:b2:c1:46:b6:82:f8:92:39:20:f4:06:36:04:f5:46:a6:
8a:bf:12:ff:5c:f3:6c:30:39:a6:64:ea:9c:29:6b:92:49:d1:
d3:57:fb:61:fa:ef:b9:40:a6:40:09:82:ec:70:4e:1c:e2:5a:
c1:96:bf:fa:3e:48:f4:96:81:5b:14:38:d5:35:64:57:22:a1:
9d:80:35:dc:cd:b6:16:e4:7b:32:26:09:cb:b3:c8:ef:ee:5f:
81:ec:6e:a7:4c:86:70:8a:98:be:58:fd:fa:03:a0:74:44:8b:
08:70:f6:7b:cb:f1:0a:96:48:ee:19:2f:4b:0f:22:03:8d:e0:
32:08:c3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:04:47 2026 by rpki-client