Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
File: HaNLZnNvDOLx8BzL9o-POcWTsUo.mft (raw, json)
Hash identifier: 5b1qnsysNODEzITX3YWHinbk4mhSAJV8aFB5s8Sz7cs=
Subject key identifier: 84:E3:8A:D8:CE:FF:7F:2A:62:45:9D:FA:BA:63:58:D0:A9:A4:5E:28
Authority key identifier: 1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
Certificate issuer: /CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Certificate serial: 01A167FD8D3083CB38F2FE916E3E001D5A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
Manifest number: BD
Signing time: Fri 23 Oct 2026 09:00:32 +0000
Manifest this update: Fri 23 Oct 2026 09:00:32 +0000
Manifest next update: Sat 24 Oct 2026 09:00:32 +0000
Files and hashes: 1: HaNLZnNvDOLx8BzL9o-POcWTsUo.crl (hash: J8eDmBRaU+lPGtbhF5Xn8EQzdR+BBeEx7Y5LVG6b0+0=)
2: HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa (hash: TluwUtP/kelzS2bBdGIVZTA/Ws/ztuwX5Nxy5OsnNB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:fd:8d:30:83:cb:38:f2:fe:91:6e:3e:00:1d:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Validity
Not Before: Oct 23 09:00:32 2026 GMT
Not After : Oct 24 09:00:32 2026 GMT
Subject: CN=84e38ad8ceff7f2a62459dfaba6358d0a9a45e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:0a:6f:99:7a:90:3c:da:26:e2:8c:6f:46:
51:f3:b0:9a:f3:12:82:20:bc:f5:6e:db:db:75:4f:
3a:5f:af:a5:e3:99:5b:85:c2:d1:0f:1c:e4:57:d7:
4b:ad:70:06:ac:2a:f8:fa:44:74:4e:4a:d8:42:3f:
b6:33:4a:d3:aa:78:c3:7d:a5:22:5a:e0:f2:dc:2a:
70:94:40:83:d4:97:08:aa:05:ae:a8:14:70:b1:25:
49:1f:83:b3:08:57:ba:45:42:6b:89:45:cd:51:fc:
31:4f:1b:98:46:6e:7f:c8:72:de:84:d4:9d:5b:37:
b5:f0:97:df:52:fe:04:ba:0f:5e:b3:be:a5:bc:76:
64:fb:82:80:b2:f5:7c:34:d3:b9:5a:a4:2d:90:21:
4e:97:ce:49:c3:70:b8:2d:61:17:3b:e6:52:fd:c0:
60:91:65:dd:59:5a:16:64:7e:fa:0d:10:e4:33:f6:
19:db:a1:30:19:4f:eb:a3:74:ef:7a:b4:5e:97:db:
2b:7a:ef:99:b0:62:96:bf:7a:35:f5:c6:58:0e:b4:
7e:42:ff:c8:70:4a:a3:57:ad:c0:77:90:2c:f7:60:
2e:fb:96:03:83:42:07:09:cb:f1:f5:fa:52:08:cf:
0c:bf:a0:ff:78:fe:ef:50:39:e2:eb:24:95:df:41:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:8A:D8:CE:FF:7F:2A:62:45:9D:FA:BA:63:58:D0:A9:A4:5E:28
X509v3 Authority Key Identifier:
keyid:1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:48:b0:5f:1d:67:e7:0c:86:89:6b:8c:16:30:ba:89:41:
68:d0:34:bd:3c:2b:b9:6a:6d:51:aa:2e:e3:98:32:19:34:b8:
f3:08:af:ca:a5:a2:a7:e1:9f:ae:03:8f:e4:2d:38:34:81:44:
c9:a2:e5:a2:3b:42:dc:5d:16:fb:a0:70:5c:16:2a:d9:6a:bc:
24:d5:77:f7:bc:0c:b8:5a:9f:bc:4f:71:ce:e8:58:8a:2c:c8:
62:e6:90:06:83:c0:32:b7:db:95:84:5c:de:82:f7:11:37:9c:
dd:1c:5b:ba:25:62:c1:98:96:6c:47:63:18:ca:50:f2:ff:17:
eb:1e:cd:9a:53:4b:88:d1:04:98:6d:41:be:97:84:56:e0:23:
f9:ad:6a:c3:e8:9f:0e:c1:6b:a1:1f:83:63:45:87:c3:d4:3d:
57:be:24:3f:05:d4:8d:69:86:b0:ae:0c:a1:29:33:82:52:b2:
3a:98:17:be:1b:ea:01:c9:85:03:6b:b0:5c:28:ee:f1:d1:f4:
79:42:f1:09:26:b3:a6:cb:d9:38:42:2a:61:04:cb:41:aa:98:
df:cc:30:f9:cc:d7:2c:d3:f8:d4:10:d3:c1:9d:50:54:a6:d6:
41:a7:f4:6c:15:69:f4:5d:fd:72:f5:38:c1:07:2a:c1:48:03:
0d:34:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:17:11 2026 by rpki-client