Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: STXai7o9+ha10BCYyryaz+fSucxpgaCAlNeX8rrLy88=
Subject key identifier: 7A:C3:EA:42:B2:51:BB:31:CF:E6:AD:C9:C9:3A:C5:06:25:78:A3:64
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 01A031EDC06DBF795B016C510903EFF2DEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 03FB
Signing time: Mon 24 Aug 2026 04:00:59 +0000
Manifest this update: Mon 24 Aug 2026 04:00:59 +0000
Manifest next update: Tue 25 Aug 2026 04:00:59 +0000
Files and hashes: 1: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (hash: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: Hu3foqjnsh+KeOEiZ/QPh7svLnJ9k1jw6im+MAx+w4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:ed:c0:6d:bf:79:5b:01:6c:51:09:03:ef:f2:de:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Aug 24 04:00:59 2026 GMT
Not After : Aug 25 04:00:59 2026 GMT
Subject: CN=7ac3ea42b251bb31cfe6adc9c93ac5062578a364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:c5:16:ee:c2:63:6f:94:5e:93:c5:1d:52:
3b:d7:be:5f:0c:5f:a8:c1:28:71:da:bc:5d:f7:60:
62:67:31:de:9b:b0:70:c2:60:8b:c0:2f:5b:95:da:
8d:61:1a:b0:c3:d4:f3:03:f7:c8:a3:a7:18:ee:ef:
1e:11:f7:e4:02:87:dd:3c:46:e4:b5:93:38:81:16:
44:e8:40:f9:c5:a9:4f:b6:1b:76:83:51:e0:70:29:
58:24:33:c9:41:ae:3f:75:6e:ff:09:78:9a:fe:ab:
03:0b:97:77:4f:56:be:ad:24:69:9a:01:7b:b3:b3:
80:79:19:40:c0:ca:9d:18:6f:07:56:c0:73:d8:89:
1b:b1:a8:5f:9f:b2:7d:90:66:59:00:a4:f0:e9:98:
0b:b3:ca:71:69:41:8f:3b:0d:ad:2b:c3:2b:ef:14:
00:d3:31:24:65:63:29:de:b2:e3:a8:d3:f5:2b:3b:
34:10:48:32:15:1e:88:f7:77:32:54:a2:31:14:8c:
17:13:9a:db:e7:d0:3c:a4:46:87:89:2b:c4:8a:0c:
8c:06:58:f7:f9:b2:8a:4d:ee:a9:f7:0d:15:8c:b3:
2b:43:18:04:fb:93:0f:72:3c:d1:f2:9d:53:b9:c6:
4c:95:ad:d6:9f:fe:94:58:ff:6a:ad:5b:6c:6b:c9:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C3:EA:42:B2:51:BB:31:CF:E6:AD:C9:C9:3A:C5:06:25:78:A3:64
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:f8:9d:cd:96:18:35:99:07:f7:60:1c:ad:3e:d1:eb:35:
bd:fa:30:4c:85:90:b6:4d:0a:28:4c:7a:79:a8:64:6a:99:c2:
f7:1c:a0:e3:7c:7a:9c:2c:66:75:a8:37:be:7a:07:b3:ad:6d:
70:fb:d2:f8:1d:53:c7:f6:d1:b2:db:c5:fa:fb:c6:cd:34:80:
1e:bf:b2:61:8d:a7:a0:7f:81:87:2d:a7:0e:47:03:7d:06:95:
df:49:47:01:bc:76:bb:ae:a8:50:d6:c4:6d:73:aa:17:e0:c4:
7d:a1:0e:28:16:bf:47:99:f4:9a:de:ef:f0:bc:e7:e1:13:7e:
31:98:76:76:b7:25:cd:44:30:4e:6a:3c:69:b1:3e:da:e9:7c:
03:20:c3:8d:27:48:d2:06:2e:2e:73:e2:f2:23:e1:fe:3f:f3:
9a:9b:19:3f:d2:c5:67:0c:06:fe:2b:61:db:13:16:05:6f:2f:
ee:44:f0:46:d1:e8:f9:bc:28:a5:de:de:fe:76:33:0e:0f:73:
5b:08:12:98:8b:cc:52:0f:31:82:94:52:07:f4:1d:a5:cb:bb:
0d:04:75:42:29:b8:45:a2:fd:fd:57:56:04:be:27:a5:70:e1:
22:7a:b2:2b:4f:d9:72:6a:69:87:84:a8:c8:3d:b0:c7:53:ac:
dd:d7:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:49:23 2026 by rpki-client