Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
File: HfLwyYo1F0lsTGnMiSvv68JYXOw.mft (raw, json)
Hash identifier: A/AOd35ul/n37496/6oyKSNcCn604kdwtyM2cmFYD3c=
Subject key identifier: 6E:71:BB:63:4B:ED:70:04:E3:F2:04:B2:66:37:92:44:AC:94:22:B3
Authority key identifier: 1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
Certificate issuer: /CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Certificate serial: 01A174DDAEF4E92A51F12AA584B332C40FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
Manifest number: C3
Signing time: Sun 25 Oct 2026 21:00:47 +0000
Manifest this update: Sun 25 Oct 2026 21:00:47 +0000
Manifest next update: Mon 26 Oct 2026 21:00:47 +0000
Files and hashes: 1: HfLwyYo1F0lsTGnMiSvv68JYXOw.crl (hash: TIuYrwLWghvbZke+xXpOdVfRh97mnys1RM6vhO8p9KA=)
2: pF9l91nD4u4wuf9MIQZvNcyh7JY.asa (hash: TVK8vGJ0DAiyKHB2yGjjbKMnxxCTa0TY3LOzLh2udVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:ae:f4:e9:2a:51:f1:2a:a5:84:b3:32:c4:0f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df2f0c98a3517496c4c69cc892befebc2585cec
Validity
Not Before: Oct 25 21:00:47 2026 GMT
Not After : Oct 26 21:00:47 2026 GMT
Subject: CN=6e71bb634bed7004e3f204b266379244ac9422b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:fa:4d:d7:44:0e:19:56:da:4d:2d:d6:09:
2d:04:e7:ee:76:0a:d8:ea:b3:89:17:92:e2:ae:26:
07:4b:0f:a7:0e:df:e1:ff:0d:58:5c:8c:60:bf:fe:
64:c5:5d:1d:e7:ed:8f:62:98:00:08:f1:95:35:2c:
22:ac:f8:bc:aa:b0:5d:a5:bb:3f:e1:1d:0c:82:a6:
e8:22:46:e9:98:99:91:64:90:63:87:b3:80:4c:1a:
32:79:39:03:83:e7:d4:fa:92:e2:ce:11:55:e3:89:
69:43:08:a8:e7:d6:52:5c:a6:0d:a0:cf:fe:a8:66:
5a:ce:af:c6:89:d2:a1:6f:9f:93:ff:75:db:20:35:
24:22:41:a8:91:61:48:10:9a:72:46:40:6f:51:d5:
68:77:af:29:fa:ee:e4:d2:f9:91:ba:6f:4d:3a:3f:
af:af:a6:2e:4a:a3:12:e2:31:44:bf:6a:8f:10:8a:
e0:33:ae:26:0c:47:ff:7d:1b:c3:8d:97:30:e5:3a:
0f:f7:5e:4f:75:e7:09:ca:f6:ea:1b:03:95:4b:c6:
b8:43:41:a5:54:bc:11:f4:61:f1:e1:71:5c:d1:af:
b4:e4:4d:4c:92:3c:77:95:95:0c:ae:94:e1:a3:a5:
f0:e1:e5:48:f5:56:00:ab:6a:00:3e:1e:04:e4:ce:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:71:BB:63:4B:ED:70:04:E3:F2:04:B2:66:37:92:44:AC:94:22:B3
X509v3 Authority Key Identifier:
keyid:1D:F2:F0:C9:8A:35:17:49:6C:4C:69:CC:89:2B:EF:EB:C2:58:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfLwyYo1F0lsTGnMiSvv68JYXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/750f6a-accc-4d75-9f85-c53cbaa97724/1/HfLwyYo1F0lsTGnMiSvv68JYXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ba:6f:d0:ac:68:6b:c0:2c:ea:42:75:4b:f0:1e:7e:fe:60:
f8:24:23:50:ae:c2:0b:f2:74:ea:16:94:78:33:9e:6a:c9:2d:
ec:50:14:8c:4d:35:43:fd:f1:f2:cc:5d:ca:80:ca:07:0a:eb:
6f:cb:dc:7e:52:e8:0f:11:5b:f6:3c:ec:c2:c0:7c:75:53:28:
f6:53:2b:3c:69:b7:0c:16:2a:4b:9c:6c:7f:2f:76:24:b8:05:
e4:4d:06:7b:18:d8:62:92:b9:2b:62:ba:6f:32:ec:cf:9f:7d:
5b:bc:92:5b:28:95:9a:11:cd:f2:0b:f5:f9:16:5f:92:0c:54:
c3:f6:6c:dc:a9:f9:64:ca:c1:57:2a:56:d0:2d:79:14:ed:9a:
5e:b5:1c:f0:12:d5:62:a7:f9:e2:69:be:11:76:e6:89:ab:3b:
bb:3d:c0:69:ff:80:61:bc:03:d6:34:32:e8:0f:4c:c0:36:a7:
00:70:9d:be:4e:60:63:76:89:10:1c:8c:23:14:0e:4a:f6:cc:
6b:38:83:f9:43:c5:e7:9c:2e:ec:41:89:6c:40:c0:fc:53:db:
d8:b2:e5:e6:11:d2:2d:82:b8:d3:b9:7f:53:c2:c3:c5:c1:52:
33:42:68:d0:ea:ab:7c:ef:57:d2:af:c5:90:a0:5e:d9:62:b3:
0e:44:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:30:54 2026 by rpki-client