Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: ieWcBJaj0ldGPb4/DnJTpIfNm215oBtcoKQvZFTdS8k=
Subject key identifier: 75:6A:9F:4A:F7:D6:E5:F8:6C:9B:36:11:2F:D8:F3:D4:E7:77:99:C2
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01A06E70DCD3DD1F4CE7061B3C3936FF906F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 19CB
Signing time: Fri 04 Sep 2026 22:01:25 +0000
Manifest this update: Fri 04 Sep 2026 22:01:25 +0000
Manifest next update: Sat 05 Sep 2026 22:01:25 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: jQN6zZqkSFzsWAg4bLs//u28p2RlIgvrXFv5IFf6+50=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:dc:d3:dd:1f:4c:e7:06:1b:3c:39:36:ff:90:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Sep 4 22:01:25 2026 GMT
Not After : Sep 5 22:01:25 2026 GMT
Subject: CN=756a9f4af7d6e5f86c9b36112fd8f3d4e77799c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:cd:63:a9:a0:0a:ae:c2:95:b4:5b:ed:50:
8d:21:e4:1b:0a:d2:04:74:04:e4:84:59:7f:f0:6d:
b4:b2:65:4e:53:a2:70:9a:19:49:38:cc:43:f7:a2:
c8:0d:6c:00:b4:2d:d8:9c:60:41:af:5e:9a:29:69:
7f:1e:02:b5:f0:46:88:3b:d6:0e:c1:dd:d9:96:6a:
26:bd:c5:7c:d8:0f:ef:a2:2d:1e:15:71:9d:d4:21:
f3:8c:3a:a2:b9:a6:c1:66:cf:7c:ce:99:26:8c:a5:
08:73:1b:71:19:70:6b:cb:ef:54:14:0d:27:cd:ee:
89:14:fc:2c:6e:4b:8c:50:d3:c5:11:fc:17:7c:fd:
64:0b:65:81:e7:b8:c6:68:94:b8:4c:8d:82:4b:84:
81:f0:a8:25:ca:fb:ba:ab:0c:7b:ef:b3:32:f1:77:
b8:39:bd:2b:27:c6:b0:21:b1:e9:9a:96:96:2d:25:
7c:ed:89:8f:03:5c:f1:fb:97:0a:f1:e4:2d:bd:81:
b3:8c:53:d2:8b:eb:f8:16:5b:06:f7:b4:4f:88:e9:
99:3a:83:c7:da:77:4b:82:5c:2c:c9:28:a5:f6:2c:
00:e3:36:f1:27:22:bb:fb:7f:99:9e:7f:80:07:72:
ec:45:d2:78:ea:93:92:19:87:4b:c1:7a:b1:4d:9d:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:9F:4A:F7:D6:E5:F8:6C:9B:36:11:2F:D8:F3:D4:E7:77:99:C2
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:18:d6:e6:bc:c6:85:a1:f5:8c:ee:19:af:0d:a4:5f:dc:fb:
01:9b:cd:f8:81:f3:e0:27:a1:c8:83:27:3c:1c:94:78:f0:ac:
04:78:76:35:f5:a5:05:6a:e4:3c:c6:af:94:8f:1f:ec:80:94:
a8:8c:a5:67:7d:14:7c:19:e2:be:d2:36:9a:25:24:58:e1:6a:
e3:2f:03:99:49:28:28:b5:e4:a1:4e:e2:37:6c:8f:05:90:3f:
a7:77:c6:46:13:ac:27:ba:52:85:47:91:38:df:37:8d:92:53:
de:73:c3:8b:c0:0c:1f:99:ae:09:21:90:80:01:5d:ee:9f:e2:
d0:0f:c4:77:99:95:a7:9f:c2:74:c0:6b:ea:ca:22:f2:05:ac:
bf:2b:5a:f2:59:b4:92:45:c8:60:63:e6:61:7a:12:d3:42:44:
3b:81:e1:47:26:c5:3c:07:cb:82:d4:54:5b:f3:28:64:4b:f9:
58:7b:72:da:1e:1b:71:f5:ec:eb:f8:69:9c:ed:af:ab:16:9f:
3f:32:20:77:67:be:72:9b:d9:d8:0f:d1:35:1d:3d:4c:1f:38:
55:cb:c0:7f:d5:de:71:47:65:3a:31:dc:13:7f:c9:05:ee:69:
89:08:e9:ff:35:70:fe:f8:72:16:f1:30:40:d4:de:6b:70:74:
6e:0f:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:20 2026 by rpki-client