Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: oZ1N69AC2bU4ZJHvVXms4jTW9u+Q5cIw0N/50+UCj98=
Subject key identifier: 45:B9:FB:DD:AC:73:0F:77:9D:CB:B4:A8:9F:2A:2D:53:8A:AD:42:8F
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 01A17E182B98FFF00FACF2CEF58BA7B27ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 04A7
Signing time: Tue 27 Oct 2026 16:01:15 +0000
Manifest this update: Tue 27 Oct 2026 16:01:15 +0000
Manifest next update: Wed 28 Oct 2026 16:01:15 +0000
Files and hashes: 1: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (hash: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: ITX81iEHaEFX8JKNAAJ5F2ua0E7LrMQWbfvW28WNPmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:2b:98:ff:f0:0f:ac:f2:ce:f5:8b:a7:b2:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Oct 27 16:01:15 2026 GMT
Not After : Oct 28 16:01:15 2026 GMT
Subject: CN=45b9fbddac730f779dcbb4a89f2a2d538aad428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:4b:53:35:21:65:29:13:a5:19:8e:44:6f:
31:50:1f:cf:25:c0:a4:b2:24:e7:16:29:5f:77:b2:
49:41:1f:55:fd:56:94:10:02:bc:e5:da:37:72:d7:
c2:59:43:d8:35:8a:3c:f7:a4:9d:60:a5:5a:4e:0a:
50:23:8c:be:c0:21:46:fb:db:a0:65:fa:b0:f0:2f:
b6:58:59:fe:e8:87:fa:29:e9:36:84:10:b0:cb:62:
0c:f5:42:83:64:15:6f:f8:47:2b:0a:2f:c6:d2:20:
8a:e4:1c:3f:c2:11:a6:08:f3:b0:ae:2b:7a:ea:1c:
8d:48:d6:51:03:3d:8b:32:5a:d6:3d:ea:76:40:a0:
d5:27:cb:76:11:b9:d5:5a:26:d2:81:87:0a:52:b7:
12:d1:fa:3a:60:5d:30:f4:be:45:fb:1a:0a:f5:27:
70:e4:6b:25:89:4c:86:eb:54:5e:3b:c2:2b:91:9a:
08:f4:85:4a:6f:94:28:4c:30:05:cc:76:2e:35:24:
a5:4d:2a:8e:34:dd:5b:98:ad:c7:e6:ec:a4:9b:d7:
6d:45:41:eb:93:be:61:13:a8:a2:ad:44:9b:5a:96:
82:90:d0:2a:b5:4c:a1:5e:b3:4d:78:42:fc:61:b9:
ef:25:06:98:1a:d9:0a:b7:22:e1:85:3c:7d:50:1f:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:FB:DD:AC:73:0F:77:9D:CB:B4:A8:9F:2A:2D:53:8A:AD:42:8F
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ef:da:8d:f8:be:f8:6a:fe:bf:c7:b9:27:d7:c6:ce:ae:75:
da:49:6d:0c:4d:f9:05:af:72:ed:4a:10:e6:ec:ee:cf:7b:f8:
37:a8:58:86:97:09:5d:60:a3:2e:3f:5e:ef:1f:bc:9e:4f:75:
6f:86:cd:8d:8d:14:e2:af:61:47:98:ce:20:71:5a:55:b8:86:
f1:eb:ec:44:2e:fe:87:2c:f9:b7:c3:f3:cb:1d:0c:0e:62:33:
84:14:d6:5d:18:fc:06:3f:84:22:5e:29:fa:73:5b:00:1f:91:
70:6b:2d:fc:04:cd:aa:20:40:02:ba:aa:26:a7:41:37:d8:69:
3c:38:30:dd:a0:c4:bd:40:ec:5d:01:84:9c:55:5a:0d:38:61:
2a:97:c1:bf:d5:61:4e:c8:66:64:19:0d:5d:e0:d9:57:18:4d:
b4:78:8a:6d:a9:9a:90:60:5f:9e:69:13:19:ef:3f:f9:95:ff:
a0:37:f0:51:0e:e9:de:67:10:f0:a5:55:ce:f8:1a:2e:1b:e3:
23:18:14:f4:68:eb:12:ac:6c:a2:20:9c:68:b2:3e:59:6e:3e:
09:5d:e5:67:3b:4a:98:fe:e5:36:13:3b:53:4c:49:c5:b5:13:
05:50:59:7a:12:59:06:e5:43:ec:7f:c6:c9:b0:0d:cb:11:cf:
70:db:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:28 2026 by rpki-client