Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: /3vR1v4EtofdlfVXytzEw8MAz4L7jUGjYe9wQ6iicvw=
Subject key identifier: B3:2A:41:D2:1B:4C:C3:3E:DC:42:E1:1B:D0:E3:58:C4:0B:50:97:BB
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01A192433853A3680D6B88DEFF6DB9E45997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 143C
Signing time: Sat 31 Oct 2026 14:00:41 +0000
Manifest this update: Sat 31 Oct 2026 14:00:41 +0000
Manifest next update: Sun 01 Nov 2026 14:00:41 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: fG//DFo9fAVBmaLlamlYkilLo25Lq48jJxb+cbdqG1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:43:38:53:a3:68:0d:6b:88:de:ff:6d:b9:e4:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Oct 31 14:00:41 2026 GMT
Not After : Nov 1 14:00:41 2026 GMT
Subject: CN=b32a41d21b4cc33edc42e11bd0e358c40b5097bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:ec:3d:97:a2:4e:4b:7e:c2:a5:85:5e:e9:
1f:1c:9c:44:5a:7e:62:d1:3a:75:8f:17:50:d8:c7:
6e:99:ff:7a:f9:69:45:97:7b:a0:45:e1:05:23:1b:
54:16:fe:d7:62:9b:b9:a6:d0:0c:9f:57:6e:c3:8d:
03:7f:05:53:b5:e3:37:08:aa:a4:3f:3d:9d:59:ad:
6a:b8:7e:3d:3f:9f:37:55:9d:23:a7:9c:d4:88:a2:
ab:7e:00:10:02:28:50:ba:23:80:20:9a:d5:a1:2e:
da:65:54:c7:b2:0e:5d:8f:aa:2e:1e:c8:f9:ff:cc:
eb:13:40:20:7c:d7:26:a5:23:bd:81:9c:73:7c:2a:
ba:e0:58:9c:6b:11:28:62:71:c5:4c:51:0a:3e:d2:
1e:08:c8:1d:3f:31:1e:29:eb:c5:65:e6:c8:97:8c:
cc:0d:45:92:91:75:4c:ae:56:02:e1:ac:d6:ad:a9:
26:37:20:84:35:f9:d4:a5:65:29:3f:f1:98:21:3a:
ac:49:e0:42:01:30:38:9b:d5:8d:2f:02:b3:4e:1b:
7d:04:81:bd:fa:37:96:b6:89:ec:da:b5:89:12:b3:
50:c1:eb:f3:e1:e7:63:53:8e:9e:29:94:ac:19:b6:
6b:42:c8:fd:50:28:60:42:06:b1:ca:8b:55:f7:f0:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:41:D2:1B:4C:C3:3E:DC:42:E1:1B:D0:E3:58:C4:0B:50:97:BB
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:31:cc:af:6f:23:e3:86:96:6e:5e:b1:35:d7:24:7c:da:
19:2b:d1:67:66:ab:c9:41:cf:2f:ca:05:ea:4c:28:2c:bd:93:
f3:c6:1f:52:40:f1:bf:31:f5:c4:d2:ca:36:cb:c1:ad:11:f8:
85:76:65:83:2b:28:1f:55:03:d7:f1:50:b3:b1:62:88:8b:ab:
59:df:d4:8d:8e:c2:91:64:cc:78:de:e4:1f:40:31:1e:cb:41:
35:94:3c:8a:e1:90:29:58:26:24:c5:c5:bc:82:64:c3:95:6e:
b7:19:ed:a1:94:d6:4c:b5:23:5e:90:c4:f2:96:6b:16:e3:0f:
28:aa:9a:b5:1f:e4:a5:0b:d8:45:d8:f1:d4:30:1c:07:43:f2:
c8:ba:f6:eb:a8:90:89:54:e8:3b:b0:41:b5:7c:c9:c7:7e:19:
63:15:73:23:09:1f:3f:d6:3f:26:1b:90:a6:2d:82:27:10:00:
54:85:62:f5:fd:97:2d:30:99:b7:d5:c7:eb:c8:5c:15:6f:05:
07:45:b8:c9:86:3f:fa:21:fe:e8:b3:50:80:0d:a9:34:2a:bd:
67:5a:01:d0:ae:d6:b5:8a:82:86:eb:11:3c:e4:71:c3:34:fd:
0b:4c:e5:44:28:50:84:e2:b8:29:00:aa:b0:02:a6:12:a7:be:
b0:f5:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:33 2026 by rpki-client