Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: raSaR5S9uvOh/xC50eu9nW4X/426IBV1aHt8kTQZc1c=
Subject key identifier: 42:EF:29:3F:62:3D:ED:46:C3:C6:AC:E4:C9:A9:4A:40:53:87:20:6D
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01A128E7E97968AD070A057B5B1FA790BB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 069D
Signing time: Sun 11 Oct 2026 03:00:49 +0000
Manifest this update: Sun 11 Oct 2026 03:00:49 +0000
Manifest next update: Mon 12 Oct 2026 03:00:49 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: hwA3A2ejj88HWA0lx4rr/KFlOl+sox1CInvAvxmP6to=)
2: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (hash: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=)
3: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (hash: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:e9:79:68:ad:07:0a:05:7b:5b:1f:a7:90:bb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Oct 11 03:00:49 2026 GMT
Not After : Oct 12 03:00:49 2026 GMT
Subject: CN=42ef293f623ded46c3c6ace4c9a94a405387206d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:e6:67:a7:56:5a:a0:7b:56:17:f8:9d:34:
5e:c2:99:23:0c:4b:72:11:d4:7a:60:43:a1:e3:c6:
14:25:d3:16:39:1b:d5:3a:9b:33:66:c6:b2:ec:f9:
8e:8b:27:ce:24:0a:2b:d3:2c:39:1a:71:ca:44:c0:
18:30:f9:89:b2:a1:05:54:c4:a8:4c:03:15:35:45:
27:17:78:ed:96:11:6b:6c:19:8f:cd:d4:bc:ac:cc:
30:a2:b4:14:0e:b4:e1:41:7f:f4:c1:9d:8f:20:e4:
cd:3f:02:c0:e2:47:55:be:02:7b:3b:e0:89:8a:b0:
5e:fa:99:0d:ad:c9:2f:a8:af:63:70:29:17:cc:e6:
51:25:f7:b8:db:ec:0c:16:cb:5a:3d:6c:fd:82:6a:
69:ef:9e:4f:4b:66:83:0b:d3:3a:c6:75:db:45:25:
6d:f8:56:b5:fd:7b:fa:d1:44:4f:dd:2a:19:22:eb:
43:1c:5f:fb:7c:90:13:e5:f0:08:d1:7e:17:ea:1b:
71:0c:36:5f:75:32:96:1f:6a:ef:8c:2d:19:2a:1d:
c5:23:7b:ad:2a:85:03:17:ba:36:ba:da:78:54:ff:
8f:0b:fa:ff:b9:72:30:1b:20:13:e1:40:73:d8:e5:
21:aa:bc:3d:48:11:77:4f:cb:ef:68:85:77:88:7c:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:29:3F:62:3D:ED:46:C3:C6:AC:E4:C9:A9:4A:40:53:87:20:6D
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:64:dc:d1:0c:33:e3:cc:40:64:8e:16:6a:48:e6:55:0b:8a:
dc:84:95:96:7c:21:7c:98:88:a7:55:3c:57:28:63:4f:d9:f0:
98:a4:f1:09:81:bb:89:32:c9:6d:8f:3b:1a:67:80:2d:63:d7:
4b:83:96:45:16:2b:d3:e6:a5:a8:fc:fd:8b:b5:7a:93:4d:ad:
74:9b:c7:d7:12:7b:01:12:36:95:a3:56:ee:71:7f:23:4a:07:
e1:84:71:38:ab:51:6c:90:98:6d:ce:04:b7:a0:b9:9d:42:35:
9e:b0:51:32:71:49:4a:3e:b3:4f:78:c0:b3:c5:e2:b9:58:1d:
b6:d5:58:b1:01:0b:4f:4e:7e:8e:db:d7:51:2c:72:d0:c6:0f:
a9:c8:39:04:a3:3f:56:83:c3:5c:7e:84:bf:76:d2:e8:dd:c6:
44:9a:19:e2:d0:12:32:dc:45:86:f8:64:59:97:f3:c6:59:a4:
11:3c:38:e3:73:a6:60:d5:9b:2c:f7:59:23:ad:02:d7:2d:b0:
f4:60:74:38:16:70:e0:85:52:95:fc:55:b8:fd:64:83:39:47:
2f:b2:48:69:56:fa:26:14:d8:12:c9:d7:d1:ca:1f:79:77:53:
47:bc:f8:42:1d:73:d0:75:78:39:fd:01:00:1b:01:e8:aa:fa:
d2:cd:d7:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo5+l5aK0HCgV7Wx+nkLsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjYxMDExMDMwMDQ5WhcNMjYxMDEyMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg0MmVmMjkzZjYyM2RlZDQ2YzNjNmFjZTRjOWE5NGE0MDUzODcyMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ijmZ6dWWqB7Vhf4nTRewpkjDEty
EdR6YEOh48YUJdMWORvVOpszZsay7PmOiyfOJAor0yw5GnHKRMAYMPmJsqEFVMSo
TAMVNUUnF3jtlhFrbBmPzdS8rMwworQUDrThQX/0wZ2PIOTNPwLA4kdVvgJ7O+CJ
irBe+pkNrckvqK9jcCkXzOZRJfe42+wMFstaPWz9gmpp755PS2aDC9M6xnXbRSVt
+Fa1/Xv60URP3SoZIutDHF/7fJAT5fAI0X4X6htxDDZfdTKWH2rvjC0ZKh3FI3ut
KoUDF7o2utp4VP+PC/r/uXIwGyAT4UBz2OUhqrw9SBF3T8vvaIV3iHy7vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELvKT9iPe1Gw8as5MmpSkBThyBtMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWTc0Qwz
48xAZI4WakjmVQuK3ISVlnwhfJiIp1U8VyhjT9nwmKTxCYG7iTLJbY87GmeALWPX
S4OWRRYr0+alqPz9i7V6k02tdJvH1xJ7ARI2laNW7nF/I0oH4YRxOKtRbJCYbc4E
t6C5nUI1nrBRMnFJSj6zT3jAs8XiuVgdttVYsQELT05+jtvXUSxy0MYPqcg5BKM/
VoPDXH6Ev3bS6N3GRJoZ4tASMtxFhvhkWZfzxlmkETw443OmYNWbLPdZI60C1y2w
9GB0OBZw4IVSlfxVuP1kgzlHL7JIaVb6JhTYEsnX0cofeXdTR7z4Qh1z0HV4Of0B
ABsB6Kr60s3XVQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:33:33 2026 by rpki-client