Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: 7hBVPevEjCD3RGD9fAVP73K3FiiuIxw7ytZFJ4Q9vNw=
Subject key identifier: A3:D5:4E:A8:4E:FC:F7:9A:8E:78:D2:12:2A:EE:D0:D8:0F:FB:BB:23
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 01A17694EE7F86BBEFBCD74C887187EC97FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 01F2
Signing time: Mon 26 Oct 2026 05:00:34 +0000
Manifest this update: Mon 26 Oct 2026 05:00:34 +0000
Manifest next update: Tue 27 Oct 2026 05:00:34 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: a51upAIAT7qxXwL9euh7i2CjMpbzf4dshUhPLXdRa+U=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:ee:7f:86:bb:ef:bc:d7:4c:88:71:87:ec:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Oct 26 05:00:34 2026 GMT
Not After : Oct 27 05:00:34 2026 GMT
Subject: CN=a3d54ea84efcf79a8e78d2122aeed0d80ffbbb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:e0:97:bc:4d:69:24:1a:18:cc:7a:23:2f:
35:08:3b:8e:86:5e:58:ac:7c:e1:0a:14:7a:90:1f:
7a:59:49:ff:34:39:44:fe:32:4b:ca:7e:f7:5b:60:
13:e2:c8:05:c5:29:57:4b:fe:0a:1c:c7:60:e0:a8:
3c:e7:89:1b:33:2a:08:9d:c5:1d:e7:5b:89:12:22:
c4:91:85:c5:0b:8d:8b:06:58:a5:3a:2e:02:50:e4:
11:ce:eb:0b:e0:2d:c5:c7:dd:ec:88:ac:47:ba:0b:
e6:c6:4d:0b:8c:02:26:b6:f6:80:9f:06:f2:82:3f:
15:dd:ab:a2:e3:1a:3e:b5:7e:3b:ed:86:ee:a7:3f:
b1:62:3b:e3:22:fe:95:ba:6f:91:02:e2:7e:30:ea:
96:9d:ca:23:71:7b:bb:83:8e:c7:e3:2e:12:cf:45:
b6:95:41:a5:b9:8d:f6:2d:5d:c3:57:81:8f:0e:a5:
49:64:a3:09:fb:e5:19:45:d9:9a:2b:28:fd:af:30:
aa:53:b1:1c:e3:01:17:97:eb:28:cf:02:f7:fd:60:
b1:50:82:23:62:20:69:5d:a6:39:f3:ce:92:78:f6:
86:b4:91:16:d4:51:7a:f3:7c:bb:e0:b4:bc:88:45:
1b:f3:f2:d6:53:c7:68:ad:86:aa:56:65:f4:91:86:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:4E:A8:4E:FC:F7:9A:8E:78:D2:12:2A:EE:D0:D8:0F:FB:BB:23
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:32:0e:a8:4c:e6:22:da:a1:e0:0e:71:b3:30:5d:5d:41:ea:
24:79:1f:dd:ac:2c:0d:33:63:24:75:09:29:eb:33:95:3c:d8:
79:b0:20:ae:4a:ed:9a:09:04:8c:f3:d3:60:2f:d2:90:b9:cc:
01:5a:11:75:48:c7:16:50:28:4a:1b:5c:89:4c:fe:8a:89:73:
ca:24:39:17:ed:12:01:c5:ad:4e:13:e5:b9:ad:40:9d:72:61:
88:db:0c:5e:b1:21:4a:3a:d5:78:0f:69:a3:bc:b2:99:13:be:
0b:f1:3e:30:9a:49:d9:b5:52:23:42:89:dd:0d:c0:18:4f:35:
92:6d:b2:17:cf:99:ab:07:27:06:cb:75:0f:e0:9b:43:fc:d0:
83:a7:a6:d9:f5:5b:f2:63:cc:68:8f:06:40:6a:03:43:46:6e:
ff:45:52:41:b9:8b:db:b6:1b:8a:85:26:7a:22:95:f7:66:51:
13:9e:da:e9:70:90:73:4a:e1:d7:19:88:79:dd:02:00:ee:4d:
93:75:22:e0:dc:2f:65:ef:bf:1a:17:34:0a:f3:c6:2f:01:93:
ac:1f:07:2a:8a:b5:b4:8c:76:66:3a:48:01:b1:e6:72:7b:78:
dd:9e:4e:b1:65:61:d9:33:0d:1d:26:65:f0:4c:74:22:94:bb:
fe:b8:fa:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2lO5/hrvvvNdMiHGH7Jf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMThkYzUwMzZkN2ZiYzBkY2FiZjMzYmNjYWFkMTBiMTdj
NTI4OTcwHhcNMjYxMDI2MDUwMDM0WhcNMjYxMDI3MDUwMDM0WjAzMTEwLwYDVQQD
EyhhM2Q1NGVhODRlZmNmNzlhOGU3OGQyMTIyYWVlZDBkODBmZmJiYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HPgl7xNaSQaGMx6Iy81CDuOhl5Y
rHzhChR6kB96WUn/NDlE/jJLyn73W2AT4sgFxSlXS/4KHMdg4Kg854kbMyoIncUd
51uJEiLEkYXFC42LBlilOi4CUOQRzusL4C3Fx93siKxHugvmxk0LjAImtvaAnwby
gj8V3aui4xo+tX477Ybupz+xYjvjIv6Vum+RAuJ+MOqWncojcXu7g47H4y4Sz0W2
lUGluY32LV3DV4GPDqVJZKMJ++UZRdmaKyj9rzCqU7Ec4wEXl+sozwL3/WCxUIIj
YiBpXaY5886SePaGtJEW1FF683y74LS8iEUb8/LWU8dorYaqVmX0kYYSRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPVTqhO/PeajnjSEiru0NgP+7sjMB8GA1UdIwQY
MBaAFB8Y3FA21/vA3KvzO8yq0QsXxSiXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhqY1VEYlgtOERjcV9NN3pLclJDeGZGS0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85ZDA2YWItOTY1Zi00NmE3LTg2YzMt
MmIwODJkMmRiNDFiLzEvSHhqY1VEYlgtOERjcV9NN3pLclJDeGZGS0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85ZDA2YWItOTY1Zi00NmE3LTg2YzMtMmIwODJkMmRiNDFi
LzEvSHhqY1VEYlgtOERjcV9NN3pLclJDeGZGS0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0DIOqEzm
Itqh4A5xszBdXUHqJHkf3awsDTNjJHUJKeszlTzYebAgrkrtmgkEjPPTYC/SkLnM
AVoRdUjHFlAoShtciUz+iolzyiQ5F+0SAcWtThPlua1AnXJhiNsMXrEhSjrVeA9p
o7yymRO+C/E+MJpJ2bVSI0KJ3Q3AGE81km2yF8+ZqwcnBst1D+CbQ/zQg6em2fVb
8mPMaI8GQGoDQ0Zu/0VSQbmL27YbioUmeiKV92ZRE57a6XCQc0rh1xmIed0CAO5N
k3Ui4NwvZe+/Ghc0CvPGLwGTrB8HKoq1tIx2ZjpIAbHmcnt43Z5OsWVh2TMNHSZl
8Ex0IpS7/rj6xg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:30 2026 by rpki-client