Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: +4dnVnuF5AM75ZU+XSrqDMAEwj68sxBfu7+76Rnux+A=
Subject key identifier: 56:CF:3D:5D:AC:97:2D:13:2E:3F:61:E5:C9:0E:A1:2D:81:D7:BE:45
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 01A17BF2237817E876287E969851337DB106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 1A2B
Signing time: Tue 27 Oct 2026 06:00:28 +0000
Manifest this update: Tue 27 Oct 2026 06:00:28 +0000
Manifest next update: Wed 28 Oct 2026 06:00:28 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: vQ+I+Gx2fVzu9M9IO/23njU/+wpFC+zplkiMbrYzuek=)
2: J-Al8qEAjQvOqUSJW7LJw04Fukc.roa (hash: nPb+yknouPfoljMRTiffVRamSXybT5BjPnR3oDRUAko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:23:78:17:e8:76:28:7e:96:98:51:33:7d:b1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Oct 27 06:00:28 2026 GMT
Not After : Oct 28 06:00:28 2026 GMT
Subject: CN=56cf3d5dac972d132e3f61e5c90ea12d81d7be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:75:93:ba:e2:29:e9:74:9d:f1:fd:8b:07:
1c:d3:7b:64:cf:9b:2a:fd:52:fd:31:d1:3c:23:28:
44:31:28:69:6f:69:7c:e4:81:c9:70:8f:17:06:e2:
fd:99:6f:be:5d:b7:98:56:0d:b1:1b:8a:82:0c:aa:
8d:3a:35:de:ea:99:ef:26:ca:5b:76:bd:ab:7c:db:
79:1d:d2:51:41:ee:00:e8:af:64:7e:d3:3c:d8:74:
e5:d5:9a:2d:15:86:ff:28:04:59:01:6d:3f:79:db:
fd:2d:ed:ae:ca:c8:34:81:5c:99:5a:63:db:db:9e:
33:ae:33:ca:a1:8a:53:0e:39:01:74:c0:8b:57:7a:
67:ce:a4:fd:75:44:3c:1e:09:a6:d3:87:3f:d7:4e:
a8:39:28:c5:1f:b6:87:6f:2b:ae:a2:08:52:91:54:
a9:71:05:72:04:16:41:93:a7:3f:a9:3a:69:8e:99:
35:31:12:51:84:e6:f4:a7:59:ea:f7:2a:94:9d:db:
af:d6:ce:be:31:ed:3e:45:5b:03:70:0c:6c:14:74:
95:8e:3e:96:32:c6:1d:cf:f5:e9:7c:00:c1:94:c6:
c3:d9:ab:3c:7c:bc:9a:5a:7a:38:e1:3f:14:8a:42:
81:a3:16:d0:6c:18:f3:48:79:73:87:f5:61:29:bb:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CF:3D:5D:AC:97:2D:13:2E:3F:61:E5:C9:0E:A1:2D:81:D7:BE:45
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:af:f2:fd:eb:f2:95:35:bf:8b:53:75:7f:01:0f:be:f5:1d:
a1:45:8f:45:7b:d9:d9:bc:bf:3c:5c:aa:1c:33:dc:92:1e:e4:
51:1d:67:01:34:a0:60:36:00:0c:77:13:b9:00:5b:0e:20:1a:
1b:5a:62:60:54:92:ff:10:02:58:bd:69:71:ba:76:94:9a:3c:
d6:fd:71:da:48:59:1c:bd:f7:58:a7:07:6e:05:4d:c4:80:62:
dd:67:10:64:ab:fe:04:ec:8a:03:df:08:e3:ba:30:c5:8f:77:
ec:12:da:2c:a9:17:26:d7:f8:e8:09:7b:b8:4d:9f:f4:f3:3f:
7f:47:55:74:9d:af:a7:1c:2b:fd:50:eb:55:60:0b:a8:f1:5e:
81:8c:ed:e6:b7:f2:44:54:48:f3:b5:90:7d:bd:ac:75:3f:74:
da:56:28:4f:2c:a7:63:5b:09:71:2c:06:57:f9:c2:e9:68:af:
c6:83:bc:0c:8a:28:7c:c0:75:94:eb:48:2d:fb:7f:22:c9:61:
09:13:e0:3f:39:39:7c:12:47:81:d3:3c:3a:88:22:d1:65:f6:
48:82:3a:29:b2:8a:9e:85:9a:5f:24:25:be:4b:13:ab:5e:e9:
78:80:de:67:8a:4b:e7:e3:fb:4d:e4:4a:85:45:f3:3a:51:7e:
99:5b:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:41 2026 by rpki-client