Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: KaRU2lOUFrR7RaqusAKfK/E9UpP73JuiR4qRu4TaLOM=
Subject key identifier: 0E:A9:BF:91:52:2B:C7:F9:C7:F9:2E:6C:E4:AB:06:B5:F0:BF:AF:92
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 01A1833E801B06C81F000D514C255587C3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 1325
Signing time: Wed 28 Oct 2026 16:01:13 +0000
Manifest this update: Wed 28 Oct 2026 16:01:13 +0000
Manifest next update: Thu 29 Oct 2026 16:01:13 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: eo4ebVRmhQsImI7zL7fp48Wsei94lhg2r89UekRZ3r0=)
2: fhjiPT2anJIeG6_EcUfpiClL8vY.roa (hash: Q/zM0rv6/hH9pojseIfbtnQXW7H51tDnv9UAHPk6c9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:80:1b:06:c8:1f:00:0d:51:4c:25:55:87:c3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Oct 28 16:01:13 2026 GMT
Not After : Oct 29 16:01:13 2026 GMT
Subject: CN=0ea9bf91522bc7f9c7f92e6ce4ab06b5f0bfaf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:ff:eb:4f:06:81:25:b9:60:cc:50:03:5c:
66:89:c2:a8:b9:ca:cf:1f:dd:6d:55:98:68:7b:3c:
4a:0a:29:cb:ad:bd:30:96:00:59:99:77:fa:46:0a:
71:12:3e:13:4a:e0:1a:0b:82:9c:dc:0c:6a:eb:8f:
40:b5:0c:8e:e1:14:53:76:9d:d1:a0:be:36:37:db:
5e:f0:bc:7a:e3:cc:cf:bf:52:d6:d7:36:9b:6a:74:
65:c7:d0:73:1d:ce:1f:23:f6:be:02:ba:6e:3e:6f:
61:35:d1:8e:bd:86:ec:18:e1:19:3d:ba:ae:d7:8f:
bb:34:d7:f7:66:7d:de:b8:91:66:32:6a:d1:6c:9c:
3c:c7:0b:43:c5:14:c5:98:67:05:03:d8:db:29:74:
20:51:13:cd:d2:93:4f:4b:e8:40:b8:fa:57:6e:44:
f8:af:ec:74:05:b0:de:48:ed:3a:c5:25:de:7d:4b:
28:ba:32:2b:50:c4:82:5a:e8:22:0c:e6:cd:57:85:
2d:0a:6e:95:7b:81:f4:68:7e:c8:46:b3:09:f8:4e:
3e:55:a9:f5:bd:84:89:93:65:43:09:0e:05:27:0f:
7f:40:d0:08:73:05:96:fc:20:84:f1:53:b8:7d:b9:
22:8d:4f:80:0a:d6:8f:0b:84:62:c4:0d:df:9a:37:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:BF:91:52:2B:C7:F9:C7:F9:2E:6C:E4:AB:06:B5:F0:BF:AF:92
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:fc:ce:24:14:1d:32:43:b0:1f:7e:fe:38:dd:ac:48:28:
d4:96:35:af:10:84:bf:b7:ad:32:83:03:8e:44:4c:d5:69:d5:
f9:f9:3f:08:89:44:44:ab:96:22:36:80:56:32:5c:94:01:8d:
f9:43:90:f9:2d:59:fd:47:b9:e5:f9:03:b7:14:e8:d9:33:cf:
b4:0c:b3:78:7c:3a:53:ec:ec:69:44:c8:6c:6e:b2:40:57:19:
c5:b1:c1:4f:73:1e:e4:c2:cf:2b:24:4c:69:48:41:b6:27:3f:
39:12:5d:73:8f:ce:68:84:3c:85:13:90:fb:c0:31:f9:11:02:
58:47:f0:d1:52:5b:31:d1:0d:6c:2d:4f:76:c0:2e:8b:27:ee:
32:d0:1f:a6:a2:e5:bd:7d:7f:fd:f4:1a:5c:44:e6:96:88:18:
7e:93:44:93:6a:b3:8a:51:4f:9b:42:1b:b7:3a:fe:89:e8:13:
9e:07:50:33:8f:8b:08:98:62:82:48:fd:93:02:7e:5f:0a:6e:
cd:aa:10:64:10:84:7f:a7:28:b4:d7:2b:2a:e3:1c:c9:ba:94:
70:03:69:1e:6c:bb:07:36:d7:36:d4:cf:0c:91:54:77:8a:a1:
d9:13:0f:79:ea:39:b0:2e:25:c6:d1:04:a3:ef:0e:2f:17:33:
8b:2b:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:23:43 2026 by rpki-client