Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
File: HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft (raw, json)
Hash identifier: o6Rso5AahvfKT7NwUHOviBARMRsh0wai7nr59VzSIG8=
Subject key identifier: 0D:82:52:A9:E9:FA:3D:9E:AA:72:44:B3:82:D6:60:41:D9:55:B1:7F
Authority key identifier: 1C:87:7E:C4:28:2D:12:D8:C8:FE:60:CB:99:E1:B6:F9:68:FD:35:2F
Certificate issuer: /CN=1c877ec4282d12d8c8fe60cb99e1b6f968fd352f
Certificate serial: 01A0E173E5B96C25AC31B0467FA410153AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
Manifest number: 22
Signing time: Sun 27 Sep 2026 06:01:04 +0000
Manifest this update: Sun 27 Sep 2026 06:01:04 +0000
Manifest next update: Mon 28 Sep 2026 06:01:04 +0000
Files and hashes: 1: GwFP20MnHcDLa889Vr0NRpN1jKw.roa (hash: ydzsTAHTZRTqP3ydi4ynQMZ0OrFyWwXpXzSvfKX7KaI=)
2: HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl (hash: Km1wXBaR7kUV+ba4bp4DWs95ihWxipWX4guE3iSohFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:e5:b9:6c:25:ac:31:b0:46:7f:a4:10:15:3a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c877ec4282d12d8c8fe60cb99e1b6f968fd352f
Validity
Not Before: Sep 27 06:01:04 2026 GMT
Not After : Sep 28 06:01:04 2026 GMT
Subject: CN=0d8252a9e9fa3d9eaa7244b382d66041d955b17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:f9:09:9c:2f:67:3c:ce:cc:92:c7:6f:99:
cc:a9:2f:44:e1:ac:0c:1b:68:dc:dd:c4:86:fe:37:
da:a1:78:97:b3:02:cd:ff:9b:d7:b9:55:65:99:0f:
3d:7d:a7:3a:5d:d5:dd:77:d8:27:09:09:6e:94:e5:
f8:70:c5:07:0d:37:b5:67:c8:8f:cf:16:b5:7d:3b:
59:be:bf:4b:6d:62:61:62:37:82:2d:b5:8a:fd:a5:
4a:77:60:e0:26:8a:f8:1d:59:b9:44:a4:7a:d1:ab:
6f:93:56:f3:e5:34:b6:38:35:48:49:19:79:cf:92:
d9:ef:30:65:9f:13:b1:94:ae:f6:0b:07:58:98:69:
7b:63:6b:2c:ce:58:08:d7:d1:82:24:38:57:bf:af:
2d:27:c5:26:24:9f:19:b8:09:c2:5c:e7:7f:5e:16:
ec:61:99:da:77:a1:5c:56:7f:9b:ae:55:92:59:65:
eb:2c:10:78:dc:20:9b:0f:b4:c5:9d:1c:f7:c5:1e:
40:3b:43:d6:57:e2:8e:f8:ed:05:38:17:7e:bc:5e:
32:9f:bc:7e:e2:ab:ec:31:9e:16:99:40:b6:22:f6:
b0:97:43:b1:7d:84:b5:fc:de:0b:e6:2d:00:40:7e:
be:cc:16:e2:5c:38:b6:42:36:87:4d:36:aa:c5:f5:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:52:A9:E9:FA:3D:9E:AA:72:44:B3:82:D6:60:41:D9:55:B1:7F
X509v3 Authority Key Identifier:
keyid:1C:87:7E:C4:28:2D:12:D8:C8:FE:60:CB:99:E1:B6:F9:68:FD:35:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:91:85:de:de:0e:02:b8:19:b0:66:75:2b:d5:c9:6f:0a:
60:1d:e4:d4:5f:dc:5f:69:59:e2:e5:f3:ad:45:72:78:ce:e1:
99:fd:1e:f8:1f:9d:10:19:51:bb:74:5d:2c:55:54:49:ff:69:
c8:65:0b:41:53:b5:59:43:69:0c:cc:fe:1b:1a:f1:38:97:f8:
b1:e2:7f:c6:2f:fb:0b:12:f1:91:8b:86:cf:67:d3:ec:b8:0f:
81:4a:95:fb:91:5c:48:87:2a:6a:54:90:0c:8c:10:8e:cd:63:
2e:e1:4a:75:7c:4d:78:47:5a:c9:7f:3d:58:4e:ae:43:ff:25:
99:13:04:73:7d:8f:16:1d:43:37:53:d9:15:65:69:90:b5:c1:
a4:57:23:55:9e:1b:42:70:79:21:00:d3:6b:c1:4a:06:56:4f:
5c:2c:ee:ee:a5:e6:d7:b2:32:7e:6c:d4:11:83:1f:d6:7c:97:
f3:a3:c0:44:9a:25:bc:6e:43:6a:7e:4d:6c:50:cb:9d:d3:6f:
8a:1e:51:98:a2:0f:e1:8d:c5:82:f9:71:0f:f2:b5:86:85:ec:
aa:45:a6:c8:3b:70:19:a6:85:34:8d:5c:ba:8b:b8:f9:db:5c:
f7:27:6a:35:72:4f:a1:78:6a:aa:47:b7:75:9a:d8:ba:27:6c:
ac:40:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:04:13 2026 by rpki-client