Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: fP2/eoIv5JeeyzgxjFfcUVtO6EhFQb5dRJMnC3ZmL8Y=
Subject key identifier: 57:AB:C7:79:92:8D:D1:04:6F:9C:EF:5A:20:E7:73:AA:B0:11:8A:6F
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01A17BBB1B3D9F4E2F61C3F1340888668B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 1074
Signing time: Tue 27 Oct 2026 05:00:22 +0000
Manifest this update: Tue 27 Oct 2026 05:00:22 +0000
Manifest next update: Wed 28 Oct 2026 05:00:22 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: vOmYz/WeMlAW/x/Vo28T97MykXcr91O8Ohq8XAaJLIo=)
4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:1b:3d:9f:4e:2f:61:c3:f1:34:08:88:66:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Oct 27 05:00:22 2026 GMT
Not After : Oct 28 05:00:22 2026 GMT
Subject: CN=57abc779928dd1046f9cef5a20e773aab0118a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:ed:d4:97:e4:da:b2:cf:b4:14:4e:d7:82:
df:73:f2:f6:50:84:c0:5e:ac:f3:0e:0e:36:ee:d6:
1d:09:52:d3:29:1c:0a:77:39:1a:6c:0f:ea:89:56:
5a:29:d9:8b:23:2f:f4:7c:ca:9b:33:cd:84:f6:2d:
ed:0a:83:8e:2c:8f:47:cf:e9:31:2b:c4:3d:d7:3c:
4a:ba:84:ed:b3:32:f1:a7:a6:16:d9:39:ec:a5:fb:
4b:ee:7d:96:aa:f5:74:58:c8:62:da:36:7b:02:1e:
7f:00:7d:55:4c:f6:76:26:44:56:a5:e0:14:b9:f6:
fa:e3:26:d9:e9:2d:e3:cb:05:36:63:d5:39:09:ef:
44:cd:ef:1d:6c:30:b9:e1:a5:10:ba:da:62:17:75:
40:1a:f5:d3:3c:69:24:2c:02:1b:5b:c1:5d:7d:8a:
c3:19:40:f6:87:d0:61:d1:70:64:e4:00:97:30:b7:
ca:e1:ca:13:94:06:d6:33:74:cf:41:e2:d0:83:7a:
4f:3b:04:2e:d1:e8:fd:21:3e:c4:6f:55:22:52:4e:
59:d1:5c:10:6e:8e:3e:d2:e6:99:47:93:08:3a:d2:
1b:be:72:ed:16:1a:24:83:d8:ba:51:9e:70:27:51:
9d:b2:70:27:7d:05:d3:59:b8:e2:3a:5d:7b:ab:f7:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:C7:79:92:8D:D1:04:6F:9C:EF:5A:20:E7:73:AA:B0:11:8A:6F
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:c1:48:d2:6b:a6:86:5f:56:55:15:41:85:02:e6:4a:e2:
58:2c:d1:bc:9e:1d:86:96:d6:bb:ca:89:41:ea:84:5c:84:36:
09:7f:c0:0e:af:13:cb:02:96:92:fc:17:28:35:b0:f4:c2:ea:
e1:3f:c5:c1:7b:6e:8d:18:af:02:9d:96:a0:35:ed:73:4c:ed:
24:c4:57:20:b4:51:6c:4f:6a:52:a1:6d:9e:b5:18:f9:46:2e:
5c:64:cd:89:ab:76:22:e0:9a:22:7d:42:92:39:7f:46:9d:9d:
b6:b8:24:30:a2:ad:1b:80:88:d0:1e:1e:88:82:aa:e7:69:8a:
d5:e8:e2:2b:a5:7e:8e:fb:1e:58:8d:ca:3e:25:3d:28:ba:8b:
54:53:d5:e7:fb:90:85:b4:31:5d:e3:78:39:c0:3a:28:6a:ce:
ed:f2:53:b3:88:17:67:5c:3b:f2:22:b2:56:2c:b7:43:1f:86:
d2:2b:59:93:be:a1:7d:48:9c:24:eb:0e:71:ee:ed:d5:4e:80:
f0:21:82:7d:33:9b:78:14:2b:ab:27:77:a2:5e:75:a9:16:e6:
af:19:63:d6:53:51:35:12:c3:39:4d:43:ea:9c:b8:73:e4:42:
49:05:b5:30:2d:2c:60:2b:45:10:6a:72:36:8c:fc:c0:a2:71:
f3:cd:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:13:47 2026 by rpki-client