Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
File: HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft (raw, json)
Hash identifier: HSZEBHj/z/hTsq6SKVwK8S9gKRmhsIaWh8A52Pqwge8=
Subject key identifier: 32:BC:9C:DC:41:D2:22:86:0D:B5:5C:DA:63:EF:AD:2D:54:CB:14:92
Authority key identifier: 1C:94:E2:F6:65:C3:ED:5A:12:2C:40:46:8C:C4:C0:64:14:70:3C:12
Certificate issuer: /CN=1c94e2f665c3ed5a122c40468cc4c06414703c12
Certificate serial: 01A14BABBE9B2E3CB7D2BB3AD6116A2796EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:48 +0000
Manifest this update: Sat 17 Oct 2026 21:01:48 +0000
Manifest next update: Sun 18 Oct 2026 21:01:48 +0000
Files and hashes: 1: HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl (hash: WRWIwlYmTY6U7FyJC8Kb8zyotfnWUO1U6QjKY//XwFc=)
2: Q7_fgWKsBc4B4O9A9Oysi85FRtc.roa (hash: jFoA+OD+m0hRjQbafIBz80/kGVUMJlfVN/1TjjfmogY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:be:9b:2e:3c:b7:d2:bb:3a:d6:11:6a:27:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c94e2f665c3ed5a122c40468cc4c06414703c12
Validity
Not Before: Oct 17 21:01:48 2026 GMT
Not After : Oct 18 21:01:48 2026 GMT
Subject: CN=32bc9cdc41d222860db55cda63efad2d54cb1492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:28:59:b5:16:04:c5:38:69:8b:bf:ed:a7:
8d:56:46:03:47:c7:90:28:e7:2b:37:05:34:ff:7f:
84:94:a1:f8:6b:cf:01:10:bb:f1:8d:a4:3f:d9:0b:
cb:d4:27:b2:dc:62:1d:b6:2a:8b:f1:60:20:94:8f:
bc:ed:5a:20:a9:65:28:13:3e:7a:08:f0:4b:73:bf:
63:94:75:29:eb:26:8a:89:b8:e2:f1:f9:6f:f9:cf:
d4:aa:f4:b9:22:9f:b9:38:df:68:76:08:f2:eb:70:
50:d4:bc:4f:61:fd:d8:a1:06:0d:6e:5d:dc:54:56:
16:31:a0:a5:01:8f:cf:c0:b3:ce:39:2e:64:ba:a0:
20:cb:9b:88:9c:d8:d7:1b:72:3d:9f:97:95:dc:b0:
7f:b3:e7:65:a4:2c:38:71:44:bf:7e:f0:9f:49:81:
77:3a:b3:dc:f8:47:6c:03:06:c3:23:10:e8:ca:78:
99:a2:3b:e6:54:f9:95:d2:07:99:06:c1:3d:7e:77:
fe:1e:8c:43:b8:69:7d:09:18:59:0c:17:ae:41:25:
b4:35:b3:b5:1c:1e:a5:5b:ee:c3:06:98:b2:2a:f0:
24:17:c8:ad:e7:92:b6:42:e7:6a:21:e9:c2:01:51:
a1:11:32:06:a4:d3:a2:69:d3:62:bc:8a:e1:4d:c5:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:9C:DC:41:D2:22:86:0D:B5:5C:DA:63:EF:AD:2D:54:CB:14:92
X509v3 Authority Key Identifier:
keyid:1C:94:E2:F6:65:C3:ED:5A:12:2C:40:46:8C:C4:C0:64:14:70:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c1:47:b5:8b:96:cf:f8:ac:c8:c8:2e:d6:47:65:18:ba:26:
72:44:33:5f:f5:b5:3a:74:90:d2:26:87:17:59:82:0c:76:6e:
cf:62:be:1f:17:1d:2f:4d:ed:2b:3c:de:e2:b3:5c:37:a2:4f:
f6:46:2a:0b:43:84:9d:86:7e:74:0e:8e:61:bf:db:af:50:af:
4f:08:9f:0e:bf:d0:f9:f1:b0:6e:19:af:b9:dd:49:f7:1a:e7:
62:67:44:0c:aa:f6:30:4f:cf:a6:9c:45:e9:8d:6a:db:85:1f:
b1:07:b0:3d:a5:2e:67:52:c4:23:d6:cd:8a:5c:9f:86:a0:99:
6e:29:17:5f:a6:ee:72:84:70:8c:fa:7b:ca:56:77:1b:a6:db:
0d:28:7a:8e:86:3a:19:94:8e:95:8d:11:2b:ae:1e:7e:ff:35:
d2:18:1c:83:58:71:9a:44:98:24:8d:d6:bd:07:3e:ee:17:3b:
ea:60:bf:34:ed:46:24:41:06:5a:51:74:e6:db:3c:52:1b:51:
b9:f5:e3:8f:85:3c:f1:4e:f9:0a:7f:10:a0:19:a7:1c:27:dd:
2f:9d:b7:c5:80:c6:c0:a3:17:6c:03:16:7b:5a:98:a2:6c:d3:
e9:d9:61:9b:96:b9:2b:e2:d7:b6:63:b3:a9:a4:2d:8b:f4:b1:
86:c0:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:41:36 2026 by rpki-client