Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: rcVfaVbBvHE2WtZrPsgiaik3lq45kgHQmzJ1Hfndrhs=
Subject key identifier: EF:C7:82:19:08:60:9F:14:45:65:C1:B0:7C:52:1C:2E:16:EB:14:92
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 01A197D813F50BF26232B8989E494E09216C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1AD4
Signing time: Sun 01 Nov 2026 16:01:22 +0000
Manifest this update: Sun 01 Nov 2026 16:01:22 +0000
Manifest next update: Mon 02 Nov 2026 16:01:22 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: SLV0XC5aJCc263bRTMutm5/VUZFOzoTH5uP5r60ijZs=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:d8:13:f5:0b:f2:62:32:b8:98:9e:49:4e:09:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Nov 1 16:01:22 2026 GMT
Not After : Nov 2 16:01:22 2026 GMT
Subject: CN=efc7821908609f144565c1b07c521c2e16eb1492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:a3:a0:ac:f0:73:fd:14:64:5f:9f:2a:15:
84:b4:a3:ff:f3:11:30:3f:ab:b4:62:df:8e:d2:8c:
0a:fd:28:ea:1a:74:7b:54:7e:df:12:18:fe:b6:93:
27:b3:02:2b:5e:35:9b:e6:5b:39:af:7a:8f:25:b0:
94:55:88:bb:11:b8:2e:8d:45:2a:24:f2:95:9f:09:
62:d4:a5:c3:52:52:cf:92:f1:d4:78:38:db:ec:f2:
f0:35:b6:97:df:2c:00:dc:1d:d6:92:14:56:8c:f3:
69:e8:f3:2a:6b:bb:5d:54:9a:ce:99:e7:10:6f:cb:
49:6c:83:f3:e4:3b:a8:e5:50:68:f2:c3:75:70:33:
85:8a:e5:51:6f:07:c1:c8:15:ae:9b:4b:5f:54:c5:
f5:04:65:5d:14:2f:b9:d4:0d:fd:25:45:f6:b6:3f:
83:04:e5:11:96:c2:e8:16:77:85:46:a5:f1:11:08:
55:4a:f4:9e:bb:d7:9e:07:48:13:9f:3e:fb:91:c9:
6e:05:95:7b:17:6c:4e:b1:11:00:9f:16:94:a0:63:
52:b1:2d:c4:aa:b1:66:17:c8:66:15:1d:c7:c8:24:
9b:85:01:7e:2c:c3:85:26:b6:75:60:ee:bc:23:25:
a2:ab:eb:7b:37:94:dd:08:6f:f9:c2:fe:d5:c3:6b:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:82:19:08:60:9F:14:45:65:C1:B0:7C:52:1C:2E:16:EB:14:92
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:2e:99:32:34:30:38:14:dd:20:d1:48:a2:09:49:0d:7f:
79:38:86:e1:f7:79:84:3e:1e:5a:01:b7:33:2c:e7:65:13:17:
83:b7:93:bd:32:ae:b2:f8:bd:8a:c8:a1:d0:bd:28:f0:83:90:
0b:d1:a3:33:59:34:b2:07:94:b2:eb:d5:80:8a:b3:4b:e7:8b:
7d:04:42:82:be:3f:d7:4e:fa:c6:1c:c0:1b:6a:14:0f:3a:4d:
b5:48:7e:b8:01:79:25:30:9d:e6:4f:a5:25:0e:e5:40:3a:df:
3a:3a:4f:1b:75:4a:c7:50:89:af:6b:c7:f2:5e:d6:1f:1c:34:
7d:da:9e:54:4d:9a:45:fb:35:85:99:9e:1f:31:60:10:b6:ae:
98:a2:7a:ac:98:90:7c:37:1d:87:f8:07:26:ff:8a:8b:4e:d7:
e3:c7:86:61:4f:6a:16:94:c1:8e:3b:cd:58:39:79:e4:8f:4f:
15:9b:37:2c:0d:db:38:d7:12:97:2e:28:9d:f5:7b:0e:7b:2e:
8d:27:78:46:77:95:33:66:f5:55:ef:78:80:b1:12:2e:50:81:
cc:4f:c6:8f:5c:40:1e:52:2c:cd:7d:ac:db:21:2a:98:2d:b9:
ae:72:04:c0:1d:2b:96:2d:32:b4:15:90:5d:88:6e:ce:7d:38:
eb:fa:d7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGX2BP1C/JiMriYnklOCSFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi
YjBjN2IwHhcNMjYxMTAxMTYwMTIyWhcNMjYxMTAyMTYwMTIyWjAzMTEwLwYDVQQD
EyhlZmM3ODIxOTA4NjA5ZjE0NDU2NWMxYjA3YzUyMWMyZTE2ZWIxNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+SjoKzwc/0UZF+fKhWEtKP/8xEw
P6u0Yt+O0owK/SjqGnR7VH7fEhj+tpMnswIrXjWb5ls5r3qPJbCUVYi7EbgujUUq
JPKVnwli1KXDUlLPkvHUeDjb7PLwNbaX3ywA3B3WkhRWjPNp6PMqa7tdVJrOmecQ
b8tJbIPz5Duo5VBo8sN1cDOFiuVRbwfByBWum0tfVMX1BGVdFC+51A39JUX2tj+D
BOURlsLoFneFRqXxEQhVSvSeu9eeB0gTnz77kcluBZV7F2xOsREAnxaUoGNSsS3E
qrFmF8hmFR3HyCSbhQF+LMOFJrZ1YO68IyWiq+t7N5TdCG/5wv7Vw2t05wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/HghkIYJ8URWXBsHxSHC4W6xSSMB8GA1UdIwQY
MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct
YTcyMGFmODYxZmVlLzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl
LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehYumTI0
MDgU3SDRSKIJSQ1/eTiG4fd5hD4eWgG3MyznZRMXg7eTvTKusvi9isih0L0o8IOQ
C9GjM1k0sgeUsuvVgIqzS+eLfQRCgr4/1076xhzAG2oUDzpNtUh+uAF5JTCd5k+l
JQ7lQDrfOjpPG3VKx1CJr2vH8l7WHxw0fdqeVE2aRfs1hZmeHzFgELaumKJ6rJiQ
fDcdh/gHJv+Ki07X48eGYU9qFpTBjjvNWDl55I9PFZs3LA3bONcSly4onfV7Dnsu
jSd4RneVM2b1Ve94gLESLlCBzE/Gj1xAHlIszX2s2yEqmC25rnIEwB0rli0ytBWQ
XYhuzn046/rXog==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:54:01 2026 by rpki-client