Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
File: hkl2gukwfEaHk1AIFzFH0TKijGQ.mft (raw, json)
Hash identifier: hj8IATQYC2nyu/h2Klzobiu8Buzb84Ekjx7fMJm45AQ=
Subject key identifier: 48:1F:12:5A:B1:77:8D:74:2F:5D:B6:8D:A8:55:8E:1E:FA:99:3F:B2
Authority key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
Certificate issuer: /CN=86497682e9307c4687935008173147d132a28c64
Certificate serial: 01A1811989FE8227FD15BD70DCB89A51F599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
Manifest number: 1694
Signing time: Wed 28 Oct 2026 06:01:36 +0000
Manifest this update: Wed 28 Oct 2026 06:01:36 +0000
Manifest next update: Thu 29 Oct 2026 06:01:36 +0000
Files and hashes: 1: Me7XtuRdIVZUbFTlkKpYNs199RM.roa (hash: 2FYoEiQSEHRljfdP8hVbR34ZxR+Jq9T0ORhGnMfjG70=)
2: hkl2gukwfEaHk1AIFzFH0TKijGQ.crl (hash: 7mnKAtLQbMw6LNhPASyYPJyxB81CLxTwJ2VdS8ESl0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:89:fe:82:27:fd:15:bd:70:dc:b8:9a:51:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86497682e9307c4687935008173147d132a28c64
Validity
Not Before: Oct 28 06:01:36 2026 GMT
Not After : Oct 29 06:01:36 2026 GMT
Subject: CN=481f125ab1778d742f5db68da8558e1efa993fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:31:3c:b3:3c:21:b3:3f:cf:90:39:ce:d4:
2b:7c:37:7a:9f:15:da:67:8a:c2:72:e7:8d:1b:bf:
c3:c5:70:5c:ce:6e:02:9d:5f:d8:84:ce:1a:e7:9a:
c5:4f:9c:59:b1:8a:08:7d:04:3e:6c:46:d4:da:79:
cb:bf:b6:bf:eb:27:c3:b7:f0:d7:f2:a1:9b:78:67:
21:01:4d:4e:16:1d:e2:49:4b:b5:fb:ad:a7:00:1f:
ad:8e:04:26:19:0b:bf:4e:b7:58:61:68:e0:23:04:
c8:1d:6a:d2:38:c5:1e:a7:5d:4e:49:e6:14:88:e7:
5f:e4:56:dd:cb:e5:03:9f:c1:f5:0f:04:ab:0b:9b:
90:51:77:e1:8a:bf:34:9a:cc:3d:8f:8b:03:2b:9b:
23:ba:38:1e:07:02:cb:67:3e:d8:5d:6a:60:65:09:
f1:0f:21:90:7d:d5:f9:34:85:65:29:96:da:c8:6e:
85:67:8b:9e:87:b1:19:66:b6:e2:ce:7b:15:1c:2a:
33:aa:22:6b:93:97:0a:5c:c0:d5:f2:45:5b:1a:34:
c9:a3:f9:77:b5:9d:17:98:99:e6:9c:34:59:e6:15:
36:92:83:d1:6d:5d:07:84:f6:f4:9a:6f:1a:1d:8f:
c1:b0:80:70:51:aa:92:b3:c3:b2:7c:35:74:e9:7f:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:12:5A:B1:77:8D:74:2F:5D:B6:8D:A8:55:8E:1E:FA:99:3F:B2
X509v3 Authority Key Identifier:
keyid:86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:96:4c:72:f0:ba:cd:84:84:b3:d2:71:23:a4:b4:ae:e0:
18:9f:3b:51:70:c5:4d:76:1f:a2:30:be:c4:4d:17:d6:1e:bb:
85:83:7b:a8:75:3d:c1:07:f1:ef:4e:30:aa:d7:54:7b:de:8d:
51:db:27:39:04:9a:e1:22:c5:e0:91:66:57:73:32:37:cf:c7:
ff:85:e6:91:62:42:01:86:f7:a4:8c:bf:a6:18:2e:3f:af:e3:
8b:86:5d:0a:65:7b:55:aa:6b:b3:f1:9c:c5:51:d7:6c:d7:c7:
03:98:28:f5:ee:57:e1:2f:4c:a3:5f:54:47:6a:e8:f7:93:da:
3a:8b:03:6f:a1:27:fe:96:ab:17:34:b5:5b:a3:4c:d7:c9:a7:
5d:d8:be:fd:d9:68:f4:50:a7:61:86:d1:27:89:3f:6d:32:97:
a1:03:54:2a:60:fc:c6:2a:41:c2:a8:a1:43:af:fc:e7:97:8f:
6d:20:57:d2:35:54:e6:61:80:a4:e2:5b:b9:4a:f6:21:a1:08:
80:09:76:55:f4:a1:80:87:67:0e:17:bb:89:da:cd:af:df:80:
dd:80:b1:56:04:dd:ee:3d:00:2a:16:f5:50:ad:2a:65:7b:e8:
1a:93:fb:bf:33:df:66:34:7c:ed:57:15:0a:48:b0:48:41:b0:
3f:7d:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:38:07 2026 by rpki-client