Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: oN1vIzY14clG7YAhVzY8u1bLaHe9SQxiWByJeyL03tk=
Subject key identifier: CA:A6:55:8B:74:B7:33:5C:7A:96:D9:ED:E5:12:23:D1:2D:03:CA:23
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 01A11B63EB4ED5AF780D431DA5E15BE76FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 11C9
Signing time: Thu 08 Oct 2026 12:01:35 +0000
Manifest this update: Thu 08 Oct 2026 12:01:35 +0000
Manifest next update: Fri 09 Oct 2026 12:01:35 +0000
Files and hashes: 1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: XKk7gsL6MEuVJS+EazTTUcv2i2ChruzbT0f8tq7zspY=)
2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:eb:4e:d5:af:78:0d:43:1d:a5:e1:5b:e7:6f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Oct 8 12:01:35 2026 GMT
Not After : Oct 9 12:01:35 2026 GMT
Subject: CN=caa6558b74b7335c7a96d9ede51223d12d03ca23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:0a:43:21:59:da:3f:85:d3:6d:f1:51:27:
cf:86:1a:10:7e:21:4c:80:5b:31:8f:b2:fc:8b:50:
2d:fe:a7:e1:49:57:02:e3:53:5a:95:e9:cf:02:d1:
b0:d7:ab:3c:8a:d5:bb:82:70:7a:73:b6:8c:71:4a:
98:63:47:69:25:77:77:70:44:7a:54:a6:b5:b0:88:
18:db:4c:f3:0b:cb:ca:1c:4d:da:57:e5:52:24:22:
a6:82:27:6d:72:9d:7f:6a:f0:14:3a:73:a9:b2:c3:
5c:c8:fd:86:43:c3:cf:3f:69:81:7a:ca:8c:56:49:
42:40:1e:6b:52:8a:28:1c:30:f2:0a:23:b1:ea:89:
0d:64:5e:2c:be:89:b8:7f:77:69:aa:8f:6a:5a:77:
cf:32:3b:e7:27:97:12:6e:57:35:52:fb:bb:dc:4a:
b0:cb:57:ae:2b:44:a8:1e:81:a4:0f:a1:65:ff:40:
8c:22:c7:91:7b:bc:ff:be:4a:db:87:d3:4d:05:fa:
01:5d:29:34:1c:50:c3:cb:9e:fd:07:5d:14:30:cc:
b8:dc:69:41:24:3a:43:bc:89:cd:25:08:a3:84:52:
3d:51:9e:d0:05:65:ce:3c:f4:f1:3f:20:51:42:99:
59:57:0d:05:b6:89:1c:bf:71:e8:56:e8:50:e1:4e:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:55:8B:74:B7:33:5C:7A:96:D9:ED:E5:12:23:D1:2D:03:CA:23
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7a:3c:2f:cc:6c:f7:d7:15:89:03:f8:86:10:ee:5a:8e:47:
43:51:44:98:b4:d3:e0:c3:ee:6b:9c:ca:5d:dd:7e:40:f5:c3:
de:c5:c7:a9:35:a6:37:1c:5d:c5:4d:29:2c:2f:61:78:7f:31:
8e:b1:12:6f:aa:8c:8a:50:f8:02:5c:a2:84:9e:dd:93:56:5d:
c5:0e:a9:61:27:96:63:b0:f3:92:0a:ab:3c:c6:a2:50:ab:da:
d4:32:f9:a7:fc:4e:84:9a:10:84:7b:b1:08:b1:5e:2b:68:20:
c0:d6:5d:5d:99:e0:d3:27:bb:7f:7d:61:11:f0:c3:31:e3:07:
87:0c:58:3d:04:4a:94:c1:55:dc:01:fc:89:18:49:fd:a8:81:
ab:14:2d:00:2f:ea:7f:67:49:e1:f5:93:8f:1a:54:4f:7c:66:
f5:63:2a:c5:b1:81:19:65:6c:e1:47:6d:43:ee:da:97:62:b1:
79:26:71:ff:a5:31:d0:40:ba:c7:a6:c8:1b:a2:95:ab:ab:db:
12:8e:07:cb:3a:cc:0d:42:8f:27:11:46:d2:59:85:50:f0:76:
9f:d0:2d:32:3d:02:cb:5f:4c:90:f2:42:4c:21:45:fd:b1:47:
76:51:4e:df:52:c4:a2:2f:d2:02:a4:e1:56:c0:4f:b1:c3:7f:
f6:e2:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:51:27 2026 by rpki-client