Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: NJ1AsLL0WjI4grg2BcRw2tkS51i1hfehtnk/2Mb25D8=
Subject key identifier: 5B:FC:37:23:94:B6:13:0A:08:3A:CB:17:3F:A7:1D:BE:84:83:94:A3
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 01A17995E14F1E951812D520E8F9355EFF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 09A2
Signing time: Mon 26 Oct 2026 19:00:27 +0000
Manifest this update: Mon 26 Oct 2026 19:00:27 +0000
Manifest next update: Tue 27 Oct 2026 19:00:27 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: ES3ZetYDeUwuAGuCznR324oxoRGPusxDQJ6IM1ejNDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:e1:4f:1e:95:18:12:d5:20:e8:f9:35:5e:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Oct 26 19:00:27 2026 GMT
Not After : Oct 27 19:00:27 2026 GMT
Subject: CN=5bfc372394b6130a083acb173fa71dbe848394a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:b8:ac:cc:93:b2:43:ef:68:4f:21:bc:50:
c9:f2:97:6a:9a:2d:46:69:57:fc:c5:d2:ab:55:b3:
d6:d8:ce:49:fa:9b:fa:b5:63:30:97:84:72:75:52:
c4:6c:70:b0:94:ca:4e:a3:7d:f0:52:a6:ab:dc:fb:
00:3b:56:32:01:e0:1e:43:8c:80:70:9e:94:e8:49:
cc:e1:ca:30:37:f2:c4:bf:66:26:7c:5d:74:14:60:
15:21:c1:be:45:27:7b:95:8f:31:86:ec:7f:06:87:
af:21:7b:85:e8:fc:09:29:70:b2:14:18:a1:f5:e8:
9b:e9:59:f3:b1:7c:20:ac:35:68:c9:e9:53:4b:b7:
bb:45:a6:8c:02:17:fd:76:3a:d9:3c:a4:8d:0b:cc:
c2:ba:3d:3d:2d:4c:d6:cf:1d:e8:e6:f5:ad:67:36:
00:3f:be:ea:62:3f:15:83:90:7a:e7:5a:1e:30:2f:
11:1a:bb:a9:e9:da:75:da:27:b4:7b:f0:dd:60:15:
4c:b0:d9:ca:24:e0:e7:d2:c3:e2:6d:22:26:3c:63:
11:f5:45:bc:58:27:17:1a:3d:02:24:c7:08:93:81:
5e:48:08:15:60:ba:bc:76:39:af:ea:b5:a9:4b:20:
71:66:40:12:a8:78:88:e8:87:bc:cc:1a:56:f7:af:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FC:37:23:94:B6:13:0A:08:3A:CB:17:3F:A7:1D:BE:84:83:94:A3
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:6d:80:b8:36:25:db:be:e0:d5:3f:f5:eb:71:96:0b:9b:
b6:9d:d2:51:78:f7:30:b5:7a:f2:3d:0d:e2:75:16:b8:1c:8e:
24:d6:a4:85:08:c5:6d:70:da:cd:75:f8:63:83:d0:fd:7a:cf:
43:05:65:8a:c3:67:92:7d:8c:fd:95:c8:6a:b2:2a:d9:47:c0:
9e:3a:a9:4d:25:d9:7d:af:6b:30:1c:de:10:ae:db:0a:3c:42:
8f:7a:45:26:58:67:a3:f2:15:7e:b5:45:10:79:13:c7:01:26:
d3:0a:41:86:6b:59:10:ec:4b:ac:47:6b:0d:95:2f:b2:83:ed:
d2:ea:b7:e2:09:83:89:b4:bd:dd:45:bf:e0:64:f7:ed:d3:ab:
77:6c:62:d2:9a:5d:f4:9e:8c:1d:4d:32:86:ae:4f:3f:24:d5:
a6:fc:45:2f:ec:50:64:8a:e6:8b:7a:d2:c5:95:81:5b:48:ac:
36:a4:e6:1e:bd:b7:20:9e:0f:92:3a:e5:ce:28:71:89:81:a0:
2c:9b:40:52:71:a9:30:83:9a:12:8b:c4:ff:7e:bf:c9:2e:5e:
95:8f:63:73:54:70:ba:ea:29:39:91:4a:9a:af:13:28:5a:5a:
98:3b:f9:21:39:e4:ee:92:39:07:7b:b7:86:7b:3d:5b:f8:50:
fa:d2:80:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:12:28 2026 by rpki-client