Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: p0BQYEyua3PigmrjlhcSWxO2PqkN9uNsh6A/L4JFSNg=
Subject key identifier: 62:78:2A:1A:E3:6A:85:9A:58:F3:96:2C:C9:FC:37:33:18:62:A4:B5
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 01A176955B45B2979F4A64044AA2919C04FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 0796
Signing time: Mon 26 Oct 2026 05:01:02 +0000
Manifest this update: Mon 26 Oct 2026 05:01:02 +0000
Manifest next update: Tue 27 Oct 2026 05:01:02 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: ip0wahPOqW/GPd+/qVnACM9QEEKmuR0dz5L//XoLy9I=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:5b:45:b2:97:9f:4a:64:04:4a:a2:91:9c:04:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Oct 26 05:01:02 2026 GMT
Not After : Oct 27 05:01:02 2026 GMT
Subject: CN=62782a1ae36a859a58f3962cc9fc37331862a4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:09:8a:71:44:d4:94:4a:c7:01:af:3e:09:
97:b5:e4:af:33:9d:d9:b2:39:9d:e5:64:a8:bd:c1:
5b:14:b5:d6:2d:c1:4b:bb:3d:d9:6c:57:8c:57:73:
36:21:d1:5a:35:1b:df:15:5a:4c:4a:a3:a8:ab:84:
e7:20:02:8f:0d:b6:a3:f2:8a:13:77:9b:ea:71:8b:
87:da:25:9e:22:7c:cd:2e:54:9f:c1:94:02:4a:a6:
47:ab:17:86:5f:ed:b8:21:79:58:07:fc:ee:71:52:
81:9d:0a:eb:a0:b9:39:22:c4:13:18:29:ef:a2:43:
13:c9:11:af:b0:f5:94:b4:3b:fe:30:19:b6:1d:e3:
7d:4c:73:83:0b:72:3f:3f:46:31:42:af:ac:10:e3:
5b:04:7b:96:ce:7f:0a:2d:ca:24:58:98:cb:0c:f6:
7b:02:91:50:3d:86:b8:f0:85:d6:c0:4c:b0:89:85:
a6:81:ac:7f:0a:4e:bc:1a:66:1c:0d:14:0e:08:2e:
db:df:16:85:12:23:7c:81:9c:40:67:53:07:df:7f:
a4:02:8f:cf:ec:11:3e:53:2b:7f:15:50:25:d0:ee:
e5:12:3e:a9:60:be:09:33:4a:73:2d:92:03:ba:72:
62:4a:04:a9:fc:04:cc:b3:8e:fb:3e:5c:9a:06:78:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:2A:1A:E3:6A:85:9A:58:F3:96:2C:C9:FC:37:33:18:62:A4:B5
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5f:09:b0:1f:fe:1e:3b:d8:d1:9b:95:01:9b:1e:f1:4c:ed:
0f:44:23:d6:8a:b5:c4:71:48:d3:b6:8c:67:20:22:ac:81:56:
bf:eb:3e:51:5b:e4:8c:bd:3c:f6:d5:89:5d:dc:2d:1b:79:50:
fd:cb:c0:80:cc:60:d0:5c:c7:ed:54:a5:77:9b:60:c4:20:f1:
26:cf:10:7a:62:30:2b:7b:5b:cb:29:98:3b:af:b0:7c:37:7f:
73:d7:f0:75:a9:be:80:11:09:59:6e:b6:55:8f:d5:fb:52:80:
a7:4f:c5:b7:eb:b5:94:d8:bc:29:30:16:bb:b2:e0:5c:76:7d:
bd:1e:a6:c9:0a:66:07:d3:08:a0:5b:63:64:4f:03:24:c5:9a:
d6:cd:bf:e6:f3:af:e7:c9:4d:37:02:a6:72:cd:42:bd:ce:28:
11:5a:e8:bb:98:1d:37:f6:6f:6e:23:97:13:84:fe:d0:e2:f4:
59:ae:42:76:eb:1b:ca:6a:93:6c:6f:93:8e:7f:b4:32:b1:22:
b9:5e:c5:6f:f8:5f:24:98:48:fe:8f:57:fd:35:7d:e6:cb:d2:
2c:fc:bb:64:ff:d9:33:7f:9a:f8:84:62:49:2a:d0:51:ad:86:
39:2c:98:9c:ff:c5:2b:49:25:e1:5a:fb:0e:80:7c:70:80:8f:
b2:7d:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:05 2026 by rpki-client