Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: r9XRC1C0aXgJqiw8k5DXFFjlgSS+PP+8yt9IVaabIZ4=
Subject key identifier: BE:EB:A7:E2:DC:C2:57:2F:A7:57:0E:C1:46:04:4B:61:4A:F5:59:26
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01A16B6C8728335C6CCB7406B1D23E0FA035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1A4E
Signing time: Sat 24 Oct 2026 01:00:36 +0000
Manifest this update: Sat 24 Oct 2026 01:00:36 +0000
Manifest next update: Sun 25 Oct 2026 01:00:36 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: 3mm34ZUoWTaoWC7OVwGgAUIWCMdZExSSi9gleyqgdVY=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:87:28:33:5c:6c:cb:74:06:b1:d2:3e:0f:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Oct 24 01:00:36 2026 GMT
Not After : Oct 25 01:00:36 2026 GMT
Subject: CN=beeba7e2dcc2572fa7570ec146044b614af55926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:ea:86:74:46:8a:99:dc:d4:16:a4:0c:fb:
95:a2:dc:f9:f4:4d:15:0b:e5:06:40:9d:99:9a:12:
fc:32:90:8d:9b:c9:cf:cf:5f:b7:7f:57:00:a8:d8:
88:a4:d3:d5:b3:62:77:80:a6:a6:07:76:35:2a:0f:
79:e2:fe:07:63:e1:22:01:c7:cf:f5:46:63:82:76:
bb:d9:74:b5:7d:cf:67:05:22:d3:59:73:0e:c5:e3:
c5:ad:72:cd:f3:e3:99:8e:b4:76:7a:5a:cd:5e:0e:
0a:15:a7:c1:c2:0b:87:17:a1:3e:80:c0:5a:63:ac:
51:6d:24:ba:cf:38:dc:52:b4:9c:3e:56:85:99:e2:
bd:13:18:a6:59:cf:8d:aa:b0:bf:08:59:bf:32:17:
31:5e:86:a9:f6:3b:d7:f8:c9:d5:b0:cf:53:45:66:
9a:40:bc:30:c9:93:90:eb:8a:84:2f:e4:d9:f9:87:
e1:ea:ba:96:67:34:1f:e8:fd:38:48:c1:99:0f:b1:
cf:de:b6:0b:d9:98:4c:0f:ec:ca:25:ec:3d:f5:24:
1f:57:ff:12:6d:54:49:6d:9a:4a:13:e3:f8:31:c4:
37:71:50:95:b7:6a:cb:34:f0:bc:d3:f3:be:a4:d3:
c6:69:70:55:cb:ed:a9:f4:11:ef:49:b8:21:9c:01:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:A7:E2:DC:C2:57:2F:A7:57:0E:C1:46:04:4B:61:4A:F5:59:26
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:98:77:0f:ad:f3:9e:8d:65:d3:05:99:64:dc:60:ba:a2:ad:
b0:c4:05:41:a1:f7:54:a8:37:b0:87:9c:c7:86:86:2d:46:38:
b7:23:48:4f:0f:40:84:3e:5b:26:ef:10:14:6a:d8:a6:64:2f:
2b:77:b4:08:0c:ca:4c:93:da:aa:fd:f9:86:f0:8e:b8:34:9f:
c5:28:ef:e6:42:f8:23:07:fe:f4:2d:ee:ba:fe:f0:f3:e5:45:
c0:ad:73:23:97:c8:a8:db:16:47:80:7e:db:ac:23:5b:f3:f5:
10:d8:a5:ae:d7:79:a2:3c:0b:0b:b3:b4:ef:70:25:84:3d:3d:
c0:c4:d7:0d:09:05:da:da:ca:13:8a:26:65:f8:71:08:ed:f2:
fd:93:9f:bd:08:3a:4f:78:aa:a6:ef:1f:db:a0:e2:05:c2:aa:
b2:5a:4a:94:16:53:b3:21:89:65:b0:5f:e5:85:c0:cd:99:0c:
d5:da:d4:7d:6a:3d:7f:61:6c:dd:d1:c0:17:d3:60:94:d3:01:
74:ea:39:1f:28:d5:9f:1b:4c:8e:48:d4:16:e2:32:38:90:4b:
05:92:ac:9b:6d:d0:20:af:c1:d2:a1:04:d3:30:4c:25:ee:cb:
d8:0a:67:5a:37:df:4b:f6:e3:22:52:9c:cd:b2:40:35:ec:cd:
bb:ac:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:32:32 2026 by rpki-client