Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: LvzuZ7vhTXhYCGLNeueMdVaVesyO23E8JNOQIMAIh6s=
Subject key identifier: E1:55:6C:14:21:EE:60:1C:A7:1E:70:CF:A3:9E:AC:82:53:18:27:69
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 01A17816647BF485CD4E3AE41221BAE07321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1A53
Signing time: Mon 26 Oct 2026 12:01:35 +0000
Manifest this update: Mon 26 Oct 2026 12:01:35 +0000
Manifest next update: Tue 27 Oct 2026 12:01:35 +0000
Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=)
2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: j/JiZCycW18SNKNDh/kmAZLFG/9Ob/gGB/dvfUDffCg=)
3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:64:7b:f4:85:cd:4e:3a:e4:12:21:ba:e0:73:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Oct 26 12:01:35 2026 GMT
Not After : Oct 27 12:01:35 2026 GMT
Subject: CN=e1556c1421ee601ca71e70cfa39eac8253182769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:a4:a6:36:d0:66:a5:e0:11:47:d7:03:41:
70:46:7f:84:88:6b:15:b3:3a:19:36:dd:49:56:1c:
75:20:61:96:5f:f1:5a:ee:04:bc:f4:3b:ee:e3:22:
2a:04:17:20:90:e4:1d:bd:47:ff:b4:22:16:62:1e:
ba:85:45:73:48:d6:b9:9e:34:6c:ad:4c:a4:ed:2d:
25:61:04:6a:d5:d7:c7:0b:36:93:d3:52:a2:36:44:
50:0b:02:0e:37:00:da:d4:23:cc:01:08:9e:1d:3f:
43:8d:29:4d:bf:41:2a:f9:22:ab:82:dc:6e:d8:2b:
4d:80:f6:70:1a:a4:77:fb:8a:bf:17:db:5e:c3:ed:
0f:b4:9b:45:85:f5:9e:87:b6:4d:d3:85:2f:6f:47:
00:66:71:31:46:58:b1:b7:e5:f0:ba:93:bc:b0:ba:
37:bb:3c:02:46:a5:be:9f:48:91:11:bc:cd:c0:ff:
c2:c9:9c:7e:a1:ca:35:de:4b:f4:9b:2b:6c:43:67:
b6:c5:e6:74:16:0c:5b:6e:a4:83:80:34:cd:4a:54:
74:b2:46:2e:27:ee:59:52:93:57:41:39:e7:58:b1:
9e:6f:95:0e:40:b1:74:6f:f1:1a:54:20:22:a5:83:
35:69:47:29:e9:81:55:1f:df:59:11:d1:b7:3c:1d:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:6C:14:21:EE:60:1C:A7:1E:70:CF:A3:9E:AC:82:53:18:27:69
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:39:aa:18:42:94:a8:ee:8f:7a:a4:bd:14:4a:36:00:5b:
6a:8d:66:00:e4:61:7d:f7:5e:6c:d8:b9:d1:14:9c:4e:88:b7:
37:d5:a2:bb:3f:2c:75:c4:55:30:15:d0:24:0b:1f:dd:e7:08:
dd:c4:73:9f:22:5c:b2:f9:06:9e:d7:a5:77:be:1c:19:32:1a:
c0:08:ce:13:eb:6a:23:cd:1f:0e:5f:c3:a6:4c:18:83:91:75:
3a:13:9c:61:fb:60:40:a5:31:f5:89:58:82:68:43:3b:32:2f:
8f:52:7e:54:5f:ce:1e:c9:10:0a:a4:dd:6f:37:3f:71:af:5d:
2a:a0:51:bc:dc:ed:cf:96:03:a2:8b:64:b0:ef:f3:43:5d:d9:
b2:91:ce:5d:ed:88:ff:6e:1c:09:4f:30:6c:e0:0b:1d:0e:0e:
d0:7e:0f:0b:4c:63:da:e9:9c:8e:9f:b6:6d:3d:4c:a6:99:23:
5a:14:21:2a:30:dc:66:ed:61:5b:f3:36:a1:3f:da:73:e0:94:
69:33:f3:8e:d4:91:60:c4:f3:d2:57:eb:fc:93:b2:62:e5:10:
82:de:6b:4d:be:5d:3e:1a:dc:53:45:c6:b7:74:82:27:27:ff:
50:57:ed:bd:85:f3:4a:b9:a2:9d:9d:a3:a8:44:82:3f:7e:ad:
55:2f:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:21 2026 by rpki-client