Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: euFxYZg4tDRRreQ0Z8+mIorxZZxF4hfiCiiM4Ku0k0Q=
Subject key identifier: 91:B7:34:34:98:89:79:50:10:F8:40:72:BB:56:D3:92:27:B6:75:B8
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 01A177A7AD87D15C4C2452E2EAE34A97255A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 10:00:39 +0000
Manifest this update: Mon 26 Oct 2026 10:00:39 +0000
Manifest next update: Tue 27 Oct 2026 10:00:39 +0000
Files and hashes: 1: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: xVIYKMum1wW8BmAByLM19mi+R1bkL8ceDwYYrLnPlxk=)
2: xxEAYZPjZGUFGslrurHMaeLtIsA.roa (hash: r31Amyvct5exQwmbmgPrj5bGx7+Kws5esYO/01oko3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:ad:87:d1:5c:4c:24:52:e2:ea:e3:4a:97:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Oct 26 10:00:39 2026 GMT
Not After : Oct 27 10:00:39 2026 GMT
Subject: CN=91b734349889795010f84072bb56d39227b675b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:2f:77:3d:d9:e2:f3:98:1e:25:dc:6f:b0:
70:bd:a7:ed:a9:96:47:4d:be:f7:dd:1d:37:f0:d7:
98:96:3d:47:a5:f9:d0:12:24:25:71:ec:c8:c8:37:
f5:29:f4:6e:73:39:af:5a:c4:b9:cf:fa:87:3a:e3:
63:37:16:88:1d:5d:98:d9:bd:7e:89:19:fe:ee:53:
42:7b:cf:3d:28:ac:98:0e:af:5d:e7:ac:0d:b1:4a:
26:aa:fe:7d:3e:27:53:40:6a:c8:0b:e9:cd:f4:65:
58:0f:01:8c:e1:00:b4:8c:9c:1a:d8:eb:4f:27:7b:
0b:79:b0:7c:ad:16:9d:c3:4c:b0:fa:1e:44:c7:e1:
58:b2:12:29:ee:56:17:22:56:07:16:b9:25:8f:31:
e0:6f:52:82:69:50:79:0c:64:85:90:d7:47:22:6b:
77:65:57:7c:c8:ac:70:ea:10:00:6d:36:fb:3d:7e:
ec:1a:9b:cb:d6:dd:35:10:fc:a6:9c:c4:d5:5e:32:
5d:43:de:92:22:4f:e6:a2:c8:69:56:e2:58:63:61:
4e:b6:3a:71:27:59:2f:10:d9:d3:86:99:3c:df:51:
24:d4:69:cf:b0:6f:1f:ee:1f:d9:98:36:30:8a:8b:
0b:2e:b3:f9:5a:6b:99:ba:47:35:ba:b8:5b:21:9d:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:34:34:98:89:79:50:10:F8:40:72:BB:56:D3:92:27:B6:75:B8
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:c1:87:c4:59:4c:8a:0d:01:86:39:8c:8b:70:4b:d2:7d:
03:a6:b2:33:d1:39:13:f6:51:37:0e:ad:8a:d1:62:cc:2e:b7:
cc:d9:28:b9:3f:3a:f1:73:2f:ad:cd:be:30:b2:51:b9:4b:8c:
41:5c:b3:f8:de:ad:ea:ff:7c:a2:52:a0:54:61:a1:9e:8c:fb:
11:d6:be:fd:2e:97:96:3c:07:57:39:2e:da:f3:9c:a0:1f:3e:
36:b1:83:37:49:74:2d:04:93:46:1d:2c:99:09:43:41:7a:40:
11:0d:19:38:4d:b6:85:03:c2:34:2a:a4:fc:85:7b:0e:80:e7:
46:a3:5f:05:fb:6c:2e:37:98:7a:74:90:84:26:cc:37:43:c8:
20:6e:83:1f:27:8c:f9:82:ba:b5:54:d1:a9:b9:da:d9:6b:15:
6a:5c:62:e0:7d:3c:22:32:de:d5:d8:ab:ce:b9:d9:ef:92:64:
1c:5e:b6:5c:12:c6:e1:62:85:91:67:19:91:73:1e:1c:7d:e0:
db:62:24:ae:74:a3:93:24:b2:4a:05:6d:12:39:ed:0d:36:7f:
29:f0:73:57:37:8c:f9:d9:1c:0d:68:3d:da:88:e7:51:c1:20:
43:84:4c:56:da:5a:90:a6:bf:6e:23:85:1d:72:ad:b5:56:9a:
ce:c9:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:20 2026 by rpki-client