Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: CObOMp1hUeA/uKe061AvFgia+Pop8EkAWhT7kHOVBwM=
Subject key identifier: 06:E1:E9:C4:0F:C4:DA:20:18:DC:7F:0C:32:C5:8D:37:E3:3F:92:B2
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 01A03A82EE5BBF7451345319D07ADE739CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 02D7
Signing time: Tue 25 Aug 2026 20:00:54 +0000
Manifest this update: Tue 25 Aug 2026 20:00:54 +0000
Manifest next update: Wed 26 Aug 2026 20:00:54 +0000
Files and hashes: 1: A7gdTozlE7zRrXKXDLcPEaNjotA.asa (hash: LtgWFqcTRBP1H850Ju61/YqXC3qpOWS2Y1oOH2LdB34=)
2: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: pATY9qHB0LpGiLz8tOZ3IVEC6ecb17eQe4grZT+34yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:82:ee:5b:bf:74:51:34:53:19:d0:7a:de:73:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Aug 25 20:00:54 2026 GMT
Not After : Aug 26 20:00:54 2026 GMT
Subject: CN=06e1e9c40fc4da2018dc7f0c32c58d37e33f92b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:7d:07:75:82:ce:3d:0a:04:46:d8:54:23:
67:77:82:66:c8:19:25:a6:7c:ca:b0:1d:5a:c8:b5:
6d:b2:ac:e9:a0:75:ca:a1:61:45:ca:b3:29:cd:4a:
9b:27:e5:64:5f:f0:13:1c:f6:c5:15:61:f1:bf:b3:
70:82:0a:87:2a:6a:45:42:b5:91:1a:a9:d7:e8:5b:
68:3f:14:b9:bb:bd:54:79:29:96:68:45:83:73:fb:
98:0d:d6:63:ba:79:b8:8a:cf:76:8e:d3:18:dd:bf:
36:de:fa:8c:fd:ff:c1:8a:75:15:03:84:41:c3:02:
2a:d4:f3:52:7e:82:ef:1b:81:05:f3:68:6e:2e:b6:
d7:3e:c7:b6:77:a5:ae:34:67:66:b2:bb:14:9a:f2:
49:34:80:6f:9f:67:b5:d6:40:28:6e:70:ca:1b:3e:
92:62:66:08:2c:6c:2d:be:0a:60:8b:e6:fc:bb:5a:
65:c9:33:2a:c7:45:82:35:1f:7d:b9:72:d6:7e:cb:
36:d5:ea:df:ae:32:e9:ea:7e:6a:5c:29:ba:83:f6:
3f:bc:d4:13:36:67:6f:bb:18:3f:3a:2b:2b:b1:d6:
ec:a8:6d:4f:60:ad:18:4f:cc:e1:21:81:34:56:60:
f6:36:2d:7e:98:7e:95:ed:e4:69:89:86:2c:27:3f:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:E9:C4:0F:C4:DA:20:18:DC:7F:0C:32:C5:8D:37:E3:3F:92:B2
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:6f:ae:78:d8:80:0a:18:1c:99:1b:af:c2:e2:9f:cc:e3:
e5:eb:03:57:e2:5e:77:b1:4b:c3:08:ac:23:03:95:12:34:3a:
f0:17:7d:f9:71:4f:79:69:d4:0e:8e:06:f6:b4:90:52:11:b9:
d9:81:45:e0:1f:ad:f8:d9:05:40:a2:ca:50:bc:4b:78:07:b3:
40:7f:68:c8:49:b2:90:53:5c:85:a0:ce:ed:b9:12:ee:57:ae:
c6:d1:5e:1d:ad:21:9c:1a:7a:35:4d:33:c7:f8:3f:ac:75:39:
28:35:d9:f4:cc:4a:f7:ed:ce:6b:dc:ea:3b:4c:6c:f6:58:e7:
3a:a9:f2:17:af:b6:1b:44:22:3d:25:9d:e9:52:f1:e8:d1:8e:
24:97:94:26:5c:1b:2b:f0:d1:df:8c:65:7a:dd:61:00:25:d2:
9b:19:1a:c5:bd:14:b0:b6:69:2d:93:ca:ab:21:84:29:31:a0:
2f:4c:9d:56:c1:9f:81:93:59:5a:19:00:83:ed:22:77:08:c7:
81:c6:fd:a7:11:a5:c3:26:2f:db:90:b6:bd:f7:bc:9a:95:cc:
85:d2:30:2a:60:7a:4e:d8:3f:66:f3:7f:6f:6d:33:cf:9a:37:
4e:5f:b7:10:16:7b:cb:f3:f1:aa:2a:dd:c7:7e:07:80:fd:db:
5b:f6:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:41:02 2026 by rpki-client