Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: IvJfY9kxbXFvVvr9iTZtPaeBdINUjALnhZ/33WaxcP8=
Subject key identifier: 55:79:E3:93:7E:ED:3E:21:2C:47:10:58:3C:2D:3A:94:28:4E:70:84
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 01A18A533A96A69D2E7471B07233253CBDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 01:01:12 +0000
Manifest this update: Fri 30 Oct 2026 01:01:12 +0000
Manifest next update: Sat 31 Oct 2026 01:01:12 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: goSIZgsMPLjdiny1HBAh9C3nMNigSklmIiju0KSg6xM=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:53:3a:96:a6:9d:2e:74:71:b0:72:33:25:3c:bd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Oct 30 01:01:12 2026 GMT
Not After : Oct 31 01:01:12 2026 GMT
Subject: CN=5579e3937eed3e212c4710583c2d3a94284e7084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:5e:c6:b3:77:a0:60:61:49:3c:ff:a5:7a:
4b:4c:1c:c1:23:81:6e:63:fe:af:a8:b0:65:a4:f3:
69:16:d4:fe:ff:fb:f5:9a:bf:4d:85:1d:a9:0e:eb:
17:59:e6:a2:7d:bf:3a:2d:f5:9c:ec:4f:a3:ed:10:
31:75:e2:da:8a:bf:62:86:2d:06:e7:b7:aa:03:58:
67:b7:1f:86:e5:8c:41:d7:d5:95:77:30:ad:59:02:
76:c4:5c:6f:a0:72:87:cf:25:11:c9:d9:25:2c:a7:
ce:2e:0d:c5:84:87:14:17:6f:ea:7f:10:e3:d5:a9:
5a:e4:14:c7:b3:a4:6f:8f:ce:4f:ca:7c:1a:dc:fa:
16:dc:fa:74:bb:64:9b:ba:ec:55:3f:e2:40:a1:7e:
8c:00:69:55:0d:d0:49:16:e8:da:b6:1f:71:53:cb:
83:27:fb:a5:84:a9:01:ec:bc:e2:15:fd:b2:9f:d5:
ff:fc:3d:74:10:f3:9c:93:5c:e5:2f:bd:04:de:af:
ce:15:94:69:bf:26:84:c9:db:08:8e:12:fe:8c:6d:
d4:37:01:07:1a:20:a1:cd:0c:f6:b8:27:5b:d4:4e:
e2:91:62:3a:5e:b8:af:cd:25:78:9b:7d:a7:e3:1c:
b1:2a:6e:53:59:1e:b1:5d:05:23:71:86:9a:8a:a9:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:E3:93:7E:ED:3E:21:2C:47:10:58:3C:2D:3A:94:28:4E:70:84
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:ec:2b:f7:87:47:4a:95:71:50:38:87:16:48:a3:52:18:
fa:ba:c1:3a:25:46:a4:d1:87:ce:cc:ef:41:3d:57:b7:9b:cf:
b5:fc:2d:fa:ac:6b:3d:da:31:51:e6:68:55:e7:2c:9c:21:5f:
96:70:7e:4c:70:56:b3:b3:27:52:b5:e7:40:be:6d:62:bc:43:
d5:02:98:c1:8a:0a:40:4f:fc:66:ad:0e:86:98:fb:2f:5f:5e:
51:c4:39:e0:ae:d9:ec:ed:08:69:4e:24:15:fd:00:4c:e8:f5:
b2:12:df:73:9a:72:f1:13:79:08:0e:ae:0d:0f:53:87:75:a7:
10:1a:71:25:96:60:3e:a5:b9:76:eb:c6:60:a6:88:3b:ec:99:
71:dd:3a:25:0a:e2:dd:8b:81:a9:c9:0f:ea:db:59:e9:5d:1c:
72:83:11:29:52:14:ad:ed:91:b3:71:7b:8c:37:ed:0d:f1:42:
7c:8e:8c:af:3e:30:42:03:a0:8a:85:18:c3:b5:13:a0:43:f9:
bc:7a:ae:fd:d9:3d:7a:59:0a:b6:b1:ba:da:0c:f8:3d:6e:24:
b4:a1:91:79:17:06:9c:ef:58:f9:f7:be:88:02:78:25:a5:80:
a2:a7:2a:46:5a:87:da:20:30:f6:58:cc:8e:e8:72:91:cc:41:
cc:39:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:44:24 2026 by rpki-client