Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: DetdMN/ONx7BP37tnzqiXwPz9QIqAg4f+DYcRjMtfmM=
Subject key identifier: ED:82:CB:2C:28:56:70:2B:41:66:11:19:55:70:0B:10:61:59:20:B3
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 01A1931FD69DE86DE2B459EB9D283219F1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: 014A
Signing time: Sat 31 Oct 2026 18:01:39 +0000
Manifest this update: Sat 31 Oct 2026 18:01:39 +0000
Manifest next update: Sun 01 Nov 2026 18:01:39 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: rYCOk4iD1edIIJKrF/1rfu2poxe+c7pjXZ1OgSn0JYY=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1f:d6:9d:e8:6d:e2:b4:59:eb:9d:28:32:19:f1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Oct 31 18:01:39 2026 GMT
Not After : Nov 1 18:01:39 2026 GMT
Subject: CN=ed82cb2c2856702b4166111955700b10615920b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:2c:bd:7e:56:79:aa:13:6f:d8:56:82:ac:
48:ec:ad:37:0a:69:57:18:43:98:73:66:40:53:4f:
86:76:9d:72:4f:1e:62:cb:79:1a:85:be:ac:bd:4a:
b4:00:cf:cd:ac:ef:b2:05:cc:1c:46:f4:3c:65:ad:
81:64:95:0c:c0:0e:cf:18:d5:98:fa:68:67:53:59:
f2:a0:a8:7a:7c:79:e2:33:50:52:75:d7:4f:4a:bb:
a6:e3:0c:36:5b:54:61:72:1a:f3:fc:63:84:aa:f8:
fe:14:fd:8b:49:7b:bc:8f:15:22:52:90:60:40:2f:
6d:c8:84:8e:31:10:b0:25:b4:7a:91:ff:f7:f7:27:
0f:b7:a6:fb:f2:72:dc:98:5c:a9:13:12:66:11:86:
e6:84:6b:fe:a3:70:96:11:9e:1f:61:96:a3:9c:59:
bb:96:7e:96:a7:61:ab:02:95:e0:b7:43:86:44:80:
70:62:9c:ae:6b:77:13:61:5d:6a:95:a0:e5:90:32:
83:d6:f6:71:cb:9f:2d:6b:ce:48:c0:b6:56:f1:51:
f5:06:d2:92:45:92:9b:e5:97:32:24:7c:7e:17:8b:
81:70:76:2e:39:67:14:d6:ca:44:a5:5a:f4:7e:a6:
ea:cf:f0:e3:73:2b:4c:f0:e9:b7:32:e0:cb:3e:14:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:CB:2C:28:56:70:2B:41:66:11:19:55:70:0B:10:61:59:20:B3
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:ee:bf:c7:bd:9d:99:e7:1d:8d:bf:b8:b1:75:a5:24:92:
72:08:e9:0d:2e:91:ac:f3:f1:a6:d4:93:35:40:aa:dd:db:1b:
ba:21:0f:34:30:cd:c8:4f:d5:d8:c4:3d:e8:e1:b2:1e:0e:42:
18:a1:d2:e8:52:e6:24:b7:8c:47:71:76:06:a6:63:36:b8:7b:
32:8d:5f:4e:09:55:44:98:7b:5f:83:b1:e2:95:24:5e:bd:5f:
85:e8:9a:b1:eb:99:c4:c2:b6:df:28:e0:2b:1f:be:19:36:49:
92:6a:6e:c1:30:7a:c4:03:7c:a8:d6:e8:ba:95:08:44:6b:d2:
4e:52:71:dc:c6:b5:2f:0a:f0:66:ae:c6:b4:e6:f7:bf:a9:b3:
83:d6:e5:c5:8b:66:b7:c6:23:10:77:1d:44:77:ad:78:cf:d0:
b8:b0:73:8b:88:ec:50:af:03:1b:a1:3a:f6:26:b3:d6:65:32:
ce:fe:a9:6f:9e:e2:51:3c:1c:c7:2f:03:b8:20:06:18:ba:86:
ee:e8:dc:65:42:73:29:7d:c5:14:4b:85:4f:3d:b4:78:6c:7d:
e4:bc:af:dd:41:f8:6a:95:a2:cc:6c:1e:b4:7b:7a:ca:e3:d9:
d4:8e:e2:c0:f4:d4:eb:6f:a8:69:f3:bd:4a:54:fd:b0:71:d8:
2e:65:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:02 2026 by rpki-client