Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
File: HaNLZnNvDOLx8BzL9o-POcWTsUo.mft (raw, json)
Hash identifier: 0giZ9zTnF6nmoKoUyb9atCgivGG6/zOV9kllAlQkEKs=
Subject key identifier: FE:0A:63:32:E4:A9:99:7A:3A:24:2F:38:09:2D:2A:E2:E1:2A:BE:10
Authority key identifier: 1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
Certificate issuer: /CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Certificate serial: 01A0691321096C08F1DB1A6FA27700EC708F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
Manifest number: 39
Signing time: Thu 03 Sep 2026 21:00:56 +0000
Manifest this update: Thu 03 Sep 2026 21:00:56 +0000
Manifest next update: Fri 04 Sep 2026 21:00:56 +0000
Files and hashes: 1: HaNLZnNvDOLx8BzL9o-POcWTsUo.crl (hash: T2vtG277aa2I4CxNcOe7xX/ZwS93IIGvrzXOIZ+i3+8=)
2: HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa (hash: TluwUtP/kelzS2bBdGIVZTA/Ws/ztuwX5Nxy5OsnNB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:13:21:09:6c:08:f1:db:1a:6f:a2:77:00:ec:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Validity
Not Before: Sep 3 21:00:56 2026 GMT
Not After : Sep 4 21:00:56 2026 GMT
Subject: CN=fe0a6332e4a9997a3a242f38092d2ae2e12abe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:44:6a:ab:b3:8e:3f:00:be:67:f0:f1:db:
36:50:de:5d:53:fb:83:6e:44:b1:ed:88:80:3b:35:
2e:dd:33:35:b3:ec:dd:fb:53:fc:db:73:86:da:d3:
6e:21:67:34:00:9a:c8:08:eb:55:6b:53:60:c2:94:
61:55:5d:73:53:ca:a7:31:af:69:3f:c8:c4:3a:51:
3e:e4:11:b7:6d:82:86:5f:af:a8:37:61:6c:0a:f2:
33:9f:9b:93:b4:8f:65:8b:2c:40:59:bd:17:0a:9d:
6e:24:89:c9:cd:0c:21:e6:f6:a9:2a:62:d9:5e:11:
e8:9a:50:2b:a6:31:d9:be:2c:b7:a9:2e:44:4b:13:
8c:29:69:85:26:9c:38:32:22:94:69:46:cf:28:5d:
d5:02:7d:32:ce:6c:81:a1:4b:03:61:d4:fe:91:11:
17:24:f8:a2:13:7c:47:6f:d3:c3:b9:c1:54:de:e5:
cc:a5:91:8b:56:d2:32:4a:0a:30:29:5c:db:59:62:
4f:6d:4f:d1:0d:f7:09:62:a2:02:50:df:b5:b9:3a:
af:cf:74:a4:68:a1:ac:d2:a5:66:1b:9b:02:2e:1f:
2a:25:97:88:3f:c0:6a:aa:b1:5d:c9:33:56:6b:b5:
c9:03:70:79:14:df:58:1d:c8:dc:02:c6:64:8a:ec:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:63:32:E4:A9:99:7A:3A:24:2F:38:09:2D:2A:E2:E1:2A:BE:10
X509v3 Authority Key Identifier:
keyid:1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:4a:44:e5:0a:8c:2e:26:c1:f4:26:14:a9:b9:98:16:c6:
59:60:b6:45:6d:bc:63:36:9c:64:2e:d4:65:8d:32:a0:68:7f:
5b:2b:3f:6b:06:fe:6f:cf:e4:46:f9:96:8d:37:5c:d9:fb:24:
e6:38:55:8a:1d:d2:ed:89:5d:2c:37:e1:2a:03:1e:5e:ec:68:
86:7e:ca:51:52:0a:9d:41:e3:ba:5e:c7:1d:59:86:50:38:21:
33:5d:38:8d:87:9d:7b:f7:4f:da:eb:28:4c:23:97:ff:e7:4e:
bc:69:18:a0:f6:c6:e3:f5:b1:d9:11:d0:05:a3:f1:36:63:48:
4c:ee:19:12:99:8a:b1:fc:7d:ad:0c:13:28:d0:4d:87:eb:9f:
50:2b:5d:55:1d:12:73:27:a7:4d:2d:ad:fb:77:4a:fb:32:5d:
a0:51:2e:09:ca:ce:e8:2b:00:19:54:c3:db:aa:15:8e:4c:93:
0a:9f:a7:bf:77:ed:c5:30:d5:e9:5c:20:f3:9d:f5:f8:af:d0:
89:46:7c:cb:da:19:fb:08:09:e0:59:e0:d8:45:c3:44:e6:c7:
7d:8e:df:56:d4:8d:60:b0:91:f4:e9:a4:f1:65:4e:f1:b6:4c:
8d:98:55:49:0c:78:d9:d8:b6:4f:d7:bc:9a:c1:f4:57:3a:ab:
d3:6c:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:14 2026 by rpki-client