Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: AYKTjxPe7ZkUr+n+noeloq6g6UHMjirJs0i9lacR1N8=
Subject key identifier: 75:49:8C:7F:11:1F:79:34:4F:8C:66:AE:6B:DF:39:27:F1:29:93:B9
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 01A16D5B2FF6C78C7E6DEFE6583D22AA1A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1A51
Signing time: Sat 24 Oct 2026 10:00:54 +0000
Manifest this update: Sat 24 Oct 2026 10:00:54 +0000
Manifest next update: Sun 25 Oct 2026 10:00:54 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: wVuVigcoL1YWvNe4qXYCgDXIeFspU6bokOy9Cu7KCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:2f:f6:c7:8c:7e:6d:ef:e6:58:3d:22:aa:1a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Oct 24 10:00:54 2026 GMT
Not After : Oct 25 10:00:54 2026 GMT
Subject: CN=75498c7f111f79344f8c66ae6bdf3927f12993b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:13:9f:d3:1e:6b:a6:71:82:9f:83:7d:f2:
d8:bc:a8:fe:00:3c:dd:5d:04:f2:18:2e:62:9d:77:
9b:2c:81:16:e4:cc:cd:ec:25:db:da:a4:0e:86:4b:
34:bf:04:6b:92:a3:b6:f8:69:aa:d3:ba:8a:59:bd:
7d:06:5f:48:54:20:93:2e:a2:46:aa:13:b8:bc:08:
d5:4f:fb:6d:7a:72:4a:f4:f6:70:8e:10:ff:06:02:
e0:9e:0a:70:c5:37:a3:0f:97:ed:79:8d:d2:21:0d:
25:d5:16:cc:ff:86:7e:35:42:c8:e0:5c:f9:63:ea:
8c:f0:95:61:4c:2b:50:39:92:08:e7:2d:2b:42:10:
5f:75:45:cf:7a:fd:ac:ab:02:06:e9:02:6d:85:ef:
58:dd:b3:2f:40:b8:47:1d:14:fa:a5:ee:9d:2a:e1:
72:c0:53:d0:a8:c3:e0:38:3c:71:b4:2e:bf:ff:c5:
ad:f7:8f:b7:4c:dd:bb:98:97:8a:ef:3a:69:12:12:
75:b7:b1:76:6d:09:27:af:e0:68:b6:2e:93:93:0c:
24:4e:ba:f5:31:43:72:db:c8:46:7b:53:0f:37:04:
7a:ba:c0:fd:1a:fc:3a:5c:3f:ea:b7:09:ac:56:30:
1a:41:c8:3c:bd:30:62:6b:3b:23:fc:29:be:e1:b1:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:49:8C:7F:11:1F:79:34:4F:8C:66:AE:6B:DF:39:27:F1:29:93:B9
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:07:64:40:4e:9a:af:c2:57:92:63:71:91:b0:39:b8:57:
75:9f:7b:b4:87:22:17:93:e8:11:58:9c:80:95:82:36:7b:0c:
68:fd:39:f4:88:61:1e:7e:e8:48:26:e4:09:ab:41:2b:f9:67:
16:f4:5e:f4:40:1a:41:4d:68:37:40:f8:78:f9:03:8b:12:c8:
7e:23:e9:45:b3:14:a9:0f:c1:8c:e1:b5:9b:f8:5c:f5:00:7d:
54:b5:4e:f2:64:f4:9f:60:06:d9:4e:a0:5e:3b:b0:94:00:de:
37:03:fe:94:d1:4e:b0:cc:bc:05:11:02:2a:a1:48:50:b6:71:
76:76:a3:13:c7:42:f4:23:2a:b0:2f:f3:f4:94:bd:b9:59:bd:
bc:2d:42:69:b6:85:ed:0e:c8:9d:74:c3:37:22:2f:e3:9b:41:
02:82:29:77:fa:74:2e:ae:8b:fe:67:14:52:6f:4b:d5:7d:f7:
d2:83:c0:02:e2:e7:88:e0:95:71:96:20:a0:4b:d5:14:3b:8c:
8b:20:d1:10:ef:e3:78:ea:aa:e1:38:9c:c3:74:9a:35:5a:28:
2a:fa:ca:68:80:41:1e:ea:04:12:46:fe:f1:ed:54:f0:f9:64:
60:7f:d0:cb:0d:2b:61:6d:55:0a:17:c3:d0:ee:12:bb:c3:b0:
85:26:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:26:29 2026 by rpki-client