Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
File: HitHgD4Tf9WetFz67ZNixDAxjt4.mft (raw, json)
Hash identifier: ML7d2QSKkh7Nt++JnaQ6SHg5T7c7Q78HyALltpc9JE8=
Subject key identifier: D6:17:00:09:22:0E:AD:8A:3A:77:61:26:DB:6A:D1:CB:E6:99:19:59
Authority key identifier: 1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
Certificate issuer: /CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Certificate serial: 01A181BEA7337755DA7F543B8AC8551BB594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:57 +0000
Manifest this update: Wed 28 Oct 2026 09:01:57 +0000
Manifest next update: Thu 29 Oct 2026 09:01:57 +0000
Files and hashes: 1: FAKw80vpI-mpfVtupkmvFk-yZPI.roa (hash: 473+Mp3hmze1LQyjXKCCeGguRS7ioXSZyLlwQX5dUjI=)
2: GZxpNzGC-1BStPRxl0AuXHTYpms.roa (hash: N5+X5onvfO8vCXWo09NVsFmRf/WIuQPxs6kWhVhvR6c=)
3: HitHgD4Tf9WetFz67ZNixDAxjt4.crl (hash: QrpXU+/KQ8OUn3DucKRYO3epndk4a5yjif0wy9SS8Mw=)
4: LRl7tzJxtNnx97ijDx7oqU2JGxE.roa (hash: 7BTG2mL/bSNfXC71H09Is4jffKot0dA2702ucToT2e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:a7:33:77:55:da:7f:54:3b:8a:c8:55:1b:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Validity
Not Before: Oct 28 09:01:57 2026 GMT
Not After : Oct 29 09:01:57 2026 GMT
Subject: CN=d6170009220ead8a3a776126db6ad1cbe6991959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:8a:be:48:0b:3c:c6:ae:37:70:30:b7:54:
c8:83:23:d9:8d:95:30:89:75:dd:ad:54:3f:71:d0:
db:7a:b0:65:dc:54:4f:76:d1:cd:54:ed:71:f8:7a:
61:a2:c9:08:28:23:55:d6:9f:69:42:68:a6:29:96:
96:fa:96:10:60:8f:45:9d:72:c0:5d:0e:78:b6:dc:
9e:36:43:e4:8b:fa:6d:74:3b:a2:37:2d:b4:aa:92:
c7:74:37:6e:c5:23:28:3a:42:b7:07:dc:1d:11:3f:
3c:68:d4:14:96:64:3f:5f:3e:3c:c4:29:7c:b9:0b:
74:cb:f6:2c:f7:c7:a0:1d:a4:82:cf:e8:b8:c6:9f:
f4:67:1b:27:65:cd:36:c8:f8:79:ae:32:02:07:65:
f8:65:23:5b:3e:bb:ed:88:31:c5:47:61:c7:04:39:
80:f8:d7:3b:e5:b7:21:a8:b0:0e:33:e7:0f:8f:e5:
00:bb:3c:be:fe:56:15:18:40:e0:b1:bb:66:20:8e:
01:3f:51:0a:01:9e:14:23:00:89:20:74:92:66:b9:
8d:ba:e5:58:62:dc:91:0e:b7:83:30:5b:0f:18:20:
b8:4e:ce:5f:d3:03:d6:f2:0b:0f:ae:9a:5f:ef:8c:
c6:9a:e0:fb:e5:fa:f3:ed:3f:b3:8d:c1:5b:07:05:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:17:00:09:22:0E:AD:8A:3A:77:61:26:DB:6A:D1:CB:E6:99:19:59
X509v3 Authority Key Identifier:
keyid:1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:49:a3:6f:99:d7:1f:71:23:33:31:da:83:55:4a:41:98:
6c:9b:54:d0:16:58:b4:71:13:e6:1c:82:2c:06:71:ed:56:ca:
b7:ab:7a:47:f4:ba:3c:2c:ce:07:a0:c3:cd:7d:ba:77:71:4f:
86:91:38:72:a8:86:6f:d4:bd:46:45:ff:38:c7:55:32:d3:99:
06:0e:e1:45:a3:08:a0:f5:8f:88:58:f4:7c:d7:7b:73:f6:f7:
a9:ce:35:d4:aa:37:27:37:42:85:dc:36:20:80:e0:50:d5:12:
d0:36:ea:83:c0:47:cc:8d:8c:eb:f5:f6:be:1e:86:3b:1c:60:
7b:7f:5b:76:b4:bf:c2:37:cc:2e:37:c8:1e:ad:8c:e7:76:00:
07:ee:15:6d:bd:66:f0:f8:9c:07:88:b8:3a:0f:53:a6:6f:a6:
12:fb:66:7a:1c:f8:97:1b:dc:1a:6f:4d:7a:d9:95:1c:f3:b0:
63:bb:7a:dc:fa:93:fe:44:57:96:d6:79:7c:aa:20:ec:24:54:
e8:f9:b4:d4:7c:d3:90:8a:86:f5:33:ad:46:9f:20:29:b3:01:
6e:51:cb:b0:34:a2:3c:a8:8c:a1:11:3b:37:a4:eb:a9:d0:29:
23:1b:b7:a3:54:4d:7d:3d:2d:19:50:2e:14:5d:33:ac:a3:8b:
ad:a8:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:39 2026 by rpki-client