Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
File: HIomETq5OUUuR1b21T9XcRRQYpA.mft (raw, json)
Hash identifier: agt3uCOcnw3vGAoU0mNpwRqZXPlAsd72ce7lqj+zXj0=
Subject key identifier: C8:AC:E8:60:B6:D9:1C:7D:77:08:73:29:FA:58:AD:33:6A:DE:2A:73
Authority key identifier: 1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
Certificate issuer: /CN=1c8a26113ab939452e4756f6d53f577114506290
Certificate serial: 01A17DE14C4D30EC13CF130BDB3C26B4DF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
Manifest number: 0204
Signing time: Tue 27 Oct 2026 15:01:19 +0000
Manifest this update: Tue 27 Oct 2026 15:01:19 +0000
Manifest next update: Wed 28 Oct 2026 15:01:19 +0000
Files and hashes: 1: HIomETq5OUUuR1b21T9XcRRQYpA.crl (hash: HJG9pPb6pL2pjanvHNrPFllC3c1ZEWXbV46oeaJ4IVQ=)
2: kfHOguahwmoMsyRaQw8pUo9cNfU.roa (hash: 9xDfD3+rs0UdeCP8bqBepaOJdTPshbSNDRJXUgbGRxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:4c:4d:30:ec:13:cf:13:0b:db:3c:26:b4:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8a26113ab939452e4756f6d53f577114506290
Validity
Not Before: Oct 27 15:01:19 2026 GMT
Not After : Oct 28 15:01:19 2026 GMT
Subject: CN=c8ace860b6d91c7d77087329fa58ad336ade2a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:64:49:0b:8d:96:a6:3b:61:b3:68:42:20:
9a:a1:8b:e4:67:86:ff:23:32:ec:62:34:38:45:e2:
53:01:cd:09:a7:fd:2f:fb:63:6a:5e:33:ae:dd:40:
7f:1f:ff:3b:98:64:21:42:0b:5e:33:ca:95:8d:f6:
fb:7f:3a:e2:10:1b:f8:3c:e3:44:74:be:96:7c:20:
16:73:36:2e:f8:cd:c6:9c:46:87:8b:8b:a7:f8:4c:
c3:49:b3:93:cd:f1:41:a7:55:14:76:a1:a2:bc:0d:
60:d7:70:f1:74:72:87:7a:e1:63:74:de:db:4d:9a:
f7:39:63:50:c8:91:e4:05:56:44:b9:4d:16:bf:64:
96:5e:c1:1d:fa:6d:95:c6:2e:16:64:3a:8b:72:40:
1e:45:b5:0a:af:26:50:9f:d9:63:3b:81:9c:34:8a:
15:36:3c:0c:59:41:ca:67:76:ad:14:78:10:97:8f:
a5:80:ed:e4:b6:b6:f5:a9:9d:c3:fe:87:10:2d:fc:
01:5c:ed:b4:42:87:cb:39:0d:3c:0e:0f:24:dc:ef:
93:4d:df:73:c6:5e:9f:78:fe:a4:bb:d3:9f:3a:3a:
f0:fb:a7:49:92:fa:cc:30:e3:7d:c6:da:9a:97:11:
05:0f:33:9f:39:23:a0:4e:07:21:de:4a:08:03:5a:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:E8:60:B6:D9:1C:7D:77:08:73:29:FA:58:AD:33:6A:DE:2A:73
X509v3 Authority Key Identifier:
keyid:1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bc:ca:54:fe:d8:ba:e5:38:eb:61:aa:ed:72:45:6c:bc:f5:
b5:df:a8:1c:09:3d:ae:7e:4a:bc:dd:97:3e:82:73:7f:ec:53:
0c:9e:82:78:96:98:c8:9e:b4:01:45:a6:93:03:55:87:be:e6:
c9:6f:83:93:98:b6:e9:93:11:ae:17:d6:db:de:44:ef:3a:af:
5b:a5:b4:ef:1a:11:0d:46:d6:e6:88:2e:5b:ec:18:a2:38:e9:
cc:bc:44:bd:d6:4f:a7:09:0d:51:c9:6a:52:5b:2f:73:f8:cf:
f6:ce:f8:8d:2d:c9:0b:83:db:78:db:f5:e6:48:9b:1c:16:a3:
7a:4c:a6:b3:9e:11:3f:d0:88:2a:43:83:48:c7:e4:0e:30:cc:
92:94:5b:81:96:ba:10:b6:c7:65:55:19:22:94:1a:70:2a:4a:
84:7a:6f:b6:7f:44:6a:0f:6a:29:2b:a5:06:d6:c3:4b:2a:52:
83:57:05:02:5c:11:2d:55:43:47:8e:f4:39:e8:9a:2f:a0:d7:
f8:fa:de:71:47:f6:23:84:d0:cd:ea:96:d3:d2:92:57:9b:20:
0d:4d:db:bd:77:af:f7:a7:00:7b:31:46:d6:bd:40:d5:de:ee:
dc:52:13:12:e5:c9:72:67:e0:f4:4b:28:4e:f0:e2:38:f9:73:
65:f0:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:34:57 2026 by rpki-client