Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: ubX271NfdJUjhxBvo9VFoej20ukyfV5xGMmz4SZNLng=
Subject key identifier: 86:4E:DF:93:B3:6C:F9:A1:DD:E6:F4:2B:9C:6C:16:4C:61:8C:26:EF
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 01A153D2D5F652D2961BD895AF72BD88A687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 1883
Signing time: Mon 19 Oct 2026 11:01:28 +0000
Manifest this update: Mon 19 Oct 2026 11:01:28 +0000
Manifest next update: Tue 20 Oct 2026 11:01:28 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: cUDSgq2S86dGBtQlQ9niqh2RB7kSZ/Wrf9OEo44r6Q4=)
2: ZoMbhLRe32uOkMK8hwS9ali-Eqw.roa (hash: JRuU+ZyopWBcMt/8KJluZ75llM4qdJd/sZ4QglM1TbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d2:d5:f6:52:d2:96:1b:d8:95:af:72:bd:88:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Oct 19 11:01:28 2026 GMT
Not After : Oct 20 11:01:28 2026 GMT
Subject: CN=864edf93b36cf9a1dde6f42b9c6c164c618c26ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:f2:8b:35:00:65:dd:3a:cf:b2:dc:d0:f1:
fc:a7:03:02:6e:25:04:6d:6b:06:32:01:9a:e6:cf:
ed:33:a1:54:88:6b:bd:c6:04:1b:bc:e7:c4:dc:78:
0a:6c:e2:04:e0:d0:85:fb:73:ab:d2:f2:6c:00:ed:
70:b5:3d:fd:19:35:fb:b0:49:dc:ca:0a:8d:32:7b:
15:a0:c9:46:9a:61:b4:3b:49:01:e8:41:81:bd:d0:
03:e5:3b:5e:bb:cf:05:ec:d2:da:4e:c2:9e:11:fb:
ee:a7:7f:d5:57:01:97:fd:a5:99:07:7f:4e:64:06:
08:44:c8:ec:d6:f7:94:c1:02:a6:d0:68:36:dd:fd:
d5:53:c0:ac:48:60:38:31:43:6c:17:86:84:af:25:
83:d7:85:e1:ac:4a:e4:f7:78:95:80:ed:a0:12:d3:
7c:2c:77:80:03:43:7d:ac:2e:5f:a9:38:d6:aa:55:
df:cb:e2:e9:50:4f:52:e5:90:b7:c6:bc:24:08:d9:
ef:5f:6e:b2:88:99:f4:dc:a8:20:e4:57:dc:4c:81:
cf:e0:9a:42:78:50:f2:f9:f4:5c:c6:93:4a:6a:ef:
71:ca:a3:51:b8:5f:7b:4f:aa:96:37:a0:7e:6e:e6:
4c:ba:fa:f9:17:db:ff:a2:b8:80:85:e2:60:1e:84:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:DF:93:B3:6C:F9:A1:DD:E6:F4:2B:9C:6C:16:4C:61:8C:26:EF
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:23:7a:f6:e9:14:0e:94:09:91:a5:bc:78:d9:a3:05:bf:9f:
e0:05:d9:c4:b0:04:42:d4:6c:7e:78:3d:c1:5c:c4:5b:ee:c0:
29:0a:f1:e3:26:e3:db:ce:55:ff:1b:6f:8e:fd:68:41:38:08:
ed:df:50:b2:c9:1d:05:de:ed:ff:09:02:2c:1b:a8:cf:b3:cb:
83:2d:e6:a7:51:dc:da:e5:9a:d3:71:a0:5b:c9:52:15:4d:04:
48:76:07:a4:6a:92:b6:ac:9f:70:64:de:83:ef:de:76:ea:9c:
0a:f5:20:13:67:65:9e:9e:50:d4:bc:2a:20:59:60:37:ca:10:
a6:3a:7b:69:d2:65:ba:e4:c4:d9:28:73:e9:d6:6e:68:e2:c9:
cd:44:07:8b:eb:f3:65:80:58:c6:33:2d:32:bb:1b:3c:98:b7:
70:6d:ae:8d:5c:43:10:2b:18:c3:72:ac:55:63:1c:ba:e5:f8:
39:31:f1:bb:9f:85:d2:a7:61:ef:8e:47:29:4f:42:c5:e4:34:
cd:a9:94:da:3e:cd:78:24:9a:f4:f8:ca:8e:91:d7:b4:92:73:
ea:7d:ff:b2:70:6b:05:db:3b:c9:b4:cc:f1:10:36:f9:e2:29:
b4:37:44:af:64:2e:51:d1:73:7a:09:d1:12:60:5c:b8:85:d0:
ba:b2:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:10:33 2026 by rpki-client