Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: QcZIIVPjihhjzzlZ4ww0KWNgwExTG0ZivBp03AN9H4k=
Subject key identifier: C5:25:05:64:0F:7F:24:36:A1:76:89:E3:67:CD:91:61:61:0F:DD:3C
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 01A173263D9AA7AD1EBD578CACAC1E09BEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 1AC4
Signing time: Sun 25 Oct 2026 13:00:48 +0000
Manifest this update: Sun 25 Oct 2026 13:00:48 +0000
Manifest next update: Mon 26 Oct 2026 13:00:48 +0000
Files and hashes: 1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: JImlGbSAlKtgyqrP1t9yMk3aAb2KQM/yEbboQa+VLE0=)
2: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
3: h0uAOEUI-ibYSxCIsCByTHYtsZM.roa (hash: 73z7ExdVrQpDFxLXve4S4EigI54vXhrIVOhvporYAcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:3d:9a:a7:ad:1e:bd:57:8c:ac:ac:1e:09:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Oct 25 13:00:48 2026 GMT
Not After : Oct 26 13:00:48 2026 GMT
Subject: CN=c52505640f7f2436a17689e367cd9161610fdd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:d6:cc:d1:76:9e:0d:8d:bb:34:51:ad:24:
27:50:10:8a:ee:2b:83:b3:55:4a:0b:2f:2c:9a:15:
f2:7e:d8:63:35:0b:6a:d1:d8:9c:73:e0:1e:76:29:
7e:f8:c6:a7:86:76:c3:ce:a9:60:bd:23:73:f3:a8:
34:96:d8:ff:4f:e0:ce:ce:c1:b6:7f:dd:64:72:47:
e5:61:77:97:7b:ec:89:d8:cd:fe:5e:bd:50:ff:1f:
d8:1f:18:90:17:58:e6:53:49:21:43:a6:1e:dc:2c:
86:51:95:f4:6d:cc:d9:60:68:6a:1d:84:43:19:d9:
74:73:a0:10:7f:5e:65:90:b2:d0:83:1f:08:e4:18:
c0:d2:db:ef:c6:04:57:22:c2:0d:98:02:dd:ff:18:
cc:db:91:ec:c6:1a:3e:54:f0:c1:fe:31:60:4e:e9:
ec:01:fa:a3:8d:c0:f3:41:5b:41:3d:7a:2e:0b:57:
7f:85:0a:da:dc:38:6d:04:c2:a0:bb:0e:c7:c5:32:
f3:74:ee:32:85:96:9f:1b:9f:07:13:bb:a8:c8:9d:
02:86:fc:08:bc:59:02:91:3a:c0:a6:ca:b0:41:77:
6b:bd:b5:4e:4f:80:bd:89:55:87:cf:bd:26:b9:2f:
b6:16:d1:09:b1:c5:0a:4a:9a:68:2d:b9:d2:d4:df:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:05:64:0F:7F:24:36:A1:76:89:E3:67:CD:91:61:61:0F:DD:3C
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:9a:86:d8:0d:d1:cd:8d:20:58:7a:07:36:39:a4:ce:36:
d4:fe:25:e0:58:f7:5e:0b:15:59:23:7f:eb:00:ac:12:0e:34:
2b:0b:57:3d:10:d3:0a:8c:d4:c5:ce:98:3d:55:46:54:88:c3:
33:a4:a5:b8:61:1e:f3:e1:ff:d8:43:4d:5a:ab:f9:72:1e:46:
40:f6:03:07:04:cf:e4:db:ae:c2:82:14:1a:8a:6e:b7:19:e9:
2f:db:cd:0c:a1:3b:c6:f3:f3:09:cc:11:e4:fa:4f:9e:77:27:
ca:77:84:79:00:7f:95:5d:5a:60:77:8d:38:cb:67:ed:4f:f2:
da:8b:2e:82:38:03:cd:8f:0b:36:65:e3:81:86:97:1e:ef:32:
75:2b:73:bf:01:21:7d:30:10:c5:e1:9f:d7:a3:fd:4d:ae:82:
98:ac:76:fa:24:b8:e2:4a:13:70:52:ad:37:53:8b:e5:73:87:
39:43:91:e6:e5:4c:2e:5d:21:c4:76:82:4f:ce:33:83:51:b4:
46:1d:41:0c:59:76:2e:ae:a7:1f:56:aa:5b:da:e8:8f:f8:9e:
4c:8e:b9:fa:dd:1a:7f:86:ec:0a:49:d1:50:fb:a6:1b:61:f2:
9b:e8:a3:b2:6d:b8:c4:ab:bf:24:99:a1:41:6b:14:1d:09:09:
0b:83:0c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:46:09 2026 by rpki-client