Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: uGRngB/fweePCXZybnCuOnmhMQ6BYSOuiAb/FarUwRw=
Subject key identifier: 00:99:69:28:DE:8D:A2:87:41:1E:AE:39:42:12:CD:B2:E3:FE:39:1A
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 01A19243A99A6EDBFAE99AD636AA5EF56B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 1179
Signing time: Sat 31 Oct 2026 14:01:10 +0000
Manifest this update: Sat 31 Oct 2026 14:01:10 +0000
Manifest next update: Sun 01 Nov 2026 14:01:10 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: x3anxHO+d/qLzdilsZv7hhC9kzuBvDVzp0PTpv96N8Y=)
2: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (hash: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:43:a9:9a:6e:db:fa:e9:9a:d6:36:aa:5e:f5:6b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Oct 31 14:01:10 2026 GMT
Not After : Nov 1 14:01:10 2026 GMT
Subject: CN=00996928de8da287411eae394212cdb2e3fe391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:76:50:64:87:50:17:c8:f7:e7:0a:31:9a:ba:
fe:33:c3:fb:c9:83:b4:39:fd:1c:6e:14:02:46:a5:
2e:78:b7:7b:26:06:06:85:e0:5b:13:0d:ac:0a:bf:
28:c5:dc:bc:80:01:6b:c5:36:15:54:52:30:18:01:
d7:8a:cc:dd:84:69:4b:d8:59:d8:0e:b0:66:ad:9a:
0d:68:1e:c4:2c:49:4b:3e:71:16:f0:55:fe:37:3f:
db:33:58:68:7e:fa:0a:01:25:71:ae:04:d0:01:82:
d4:a9:7c:5e:cf:24:92:1b:ad:af:a3:c5:2d:ae:fb:
99:56:31:0c:8d:bf:a1:7a:eb:29:c7:cc:21:b4:37:
c6:29:83:e8:12:9c:5c:62:f8:d2:a7:c7:0a:49:7e:
bc:c1:65:97:1a:d5:1a:25:3b:e4:38:7e:76:7b:e3:
4b:25:18:0e:df:c4:f7:86:53:24:bd:56:b6:95:d6:
52:4f:b8:36:f9:a7:a0:52:48:b1:41:08:0a:72:65:
28:31:a3:d6:78:06:5d:92:c7:1f:eb:cb:ed:93:f0:
da:25:cc:15:30:02:2b:5e:a4:fa:d4:16:b4:2b:6d:
12:b1:fb:4a:56:55:71:97:d6:78:a7:77:cb:2f:d0:
f3:fb:a4:30:eb:e7:8e:f4:c9:c7:5c:8a:b2:e4:21:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:69:28:DE:8D:A2:87:41:1E:AE:39:42:12:CD:B2:E3:FE:39:1A
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:76:d9:ed:67:8d:9b:cd:70:00:dc:1e:e4:6c:fa:69:3d:
9c:6e:10:98:92:83:e0:9f:92:fa:2c:51:88:2e:f4:4f:e0:c0:
59:e4:6a:34:a1:90:05:eb:82:76:93:26:c4:16:24:a1:c4:3e:
84:66:1d:1e:81:90:b4:dc:34:bc:e2:f2:90:ba:96:11:a5:73:
a8:7c:17:3d:4f:34:d1:9e:fb:fc:fd:12:92:f4:c5:d2:53:0b:
75:35:ab:4c:95:4f:a3:de:91:4b:1d:8d:02:77:58:a9:b5:c0:
97:45:fd:6b:bc:30:0a:01:e0:0e:1d:68:a1:bf:72:b3:17:a9:
96:30:e7:9a:30:a6:d3:9a:96:5e:1a:6a:1c:78:ba:cc:87:ff:
5e:3e:cc:cd:02:01:22:80:dd:91:0c:41:47:da:00:f4:54:01:
e9:be:18:13:29:ac:2a:89:dd:04:47:c8:d2:21:3e:97:22:c8:
23:80:ab:5a:95:24:ab:bc:16:2b:58:b3:d1:9a:33:c1:74:2f:
f6:93:39:f0:20:fa:0b:ff:19:d6:bd:f7:82:5d:fb:f4:3b:5a:
ec:58:5e:b2:2a:c6:d0:06:90:57:e7:35:96:b0:83:a2:ba:9d:
8d:3a:a3:2d:0e:6e:85:41:6f:47:e4:46:18:da:3f:f3:c3:82:
51:0d:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:59:46 2026 by rpki-client