Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
File: hHypPNDOjUlqTNkjidTXsiB0T3g.mft (raw, json)
Hash identifier: lEU9JMrjZMNwRsH1huCulshdLdpIDxcorQ7Kn0XuG3k=
Subject key identifier: EA:22:F3:37:9C:77:76:FA:CB:28:AC:2C:17:58:55:90:62:3B:4D:88
Authority key identifier: 84:7C:A9:3C:D0:CE:8D:49:6A:4C:D9:23:89:D4:D7:B2:20:74:4F:78
Certificate issuer: /CN=847ca93cd0ce8d496a4cd92389d4d7b220744f78
Certificate serial: 01A18262F0006C180BD0E0FA71A538E6DFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHypPNDOjUlqTNkjidTXsiB0T3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
Manifest number: 018D
Signing time: Wed 28 Oct 2026 12:01:24 +0000
Manifest this update: Wed 28 Oct 2026 12:01:24 +0000
Manifest next update: Thu 29 Oct 2026 12:01:24 +0000
Files and hashes: 1: hHypPNDOjUlqTNkjidTXsiB0T3g.crl (hash: QBEQYYcAayscjAngzyjQt3G3eM2YKqwqoRVZQABMITs=)
2: xCiY3nX8uoDJZB9zg6bY7Xqx-Qw.asa (hash: WvhH8RuJyfdWqZ9IZPEjWSY4dIG3+tKUFvJ+HKnCERU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHypPNDOjUlqTNkjidTXsiB0T3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:f0:00:6c:18:0b:d0:e0:fa:71:a5:38:e6:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847ca93cd0ce8d496a4cd92389d4d7b220744f78
Validity
Not Before: Oct 28 12:01:24 2026 GMT
Not After : Oct 29 12:01:24 2026 GMT
Subject: CN=ea22f3379c7776facb28ac2c17585590623b4d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d7:cc:aa:2a:16:0c:af:46:0e:c4:69:cd:19:
cc:ad:56:99:08:bb:43:6d:c9:94:ba:43:db:1f:ab:
39:fb:ff:1d:24:6a:04:e0:7c:69:76:47:fb:65:eb:
3f:d6:0c:a4:74:73:4d:cc:82:b6:0e:cb:56:81:13:
2a:4e:c0:91:93:80:eb:75:d9:d7:f7:4c:f6:c7:3e:
9c:04:43:4a:f6:7a:e0:9e:ce:68:4f:b0:b6:03:77:
ab:a0:a8:6a:9e:32:84:af:b5:ab:41:b5:e2:f4:d2:
8f:e9:cb:eb:9e:d8:2d:b6:aa:da:77:c7:ba:21:8b:
94:72:96:0e:27:40:f8:c4:38:f6:55:da:38:ac:f2:
d2:8e:c3:70:7f:bf:61:d1:8e:4e:08:11:5b:33:cf:
7e:de:70:9c:b5:18:c1:42:51:16:66:5c:44:c8:01:
a7:d4:91:9f:f9:ac:16:2f:c7:6b:c9:68:7c:0f:91:
8c:4a:b7:a6:14:80:33:21:04:a7:6d:76:17:45:aa:
53:79:96:c9:ce:61:fb:4c:f7:a9:84:06:98:de:2b:
89:92:8a:7d:df:6c:b1:90:9a:5b:05:78:03:e8:d4:
b2:0d:61:61:58:89:84:ae:74:42:62:1b:9e:09:fb:
8e:bd:03:26:81:46:16:38:27:ea:60:4c:13:6a:e4:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:F3:37:9C:77:76:FA:CB:28:AC:2C:17:58:55:90:62:3B:4D:88
X509v3 Authority Key Identifier:
keyid:84:7C:A9:3C:D0:CE:8D:49:6A:4C:D9:23:89:D4:D7:B2:20:74:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHypPNDOjUlqTNkjidTXsiB0T3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/883289-ed23-423f-8bca-99df7bd2bbd9/1/hHypPNDOjUlqTNkjidTXsiB0T3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6e:81:ef:67:d7:dd:a1:76:fc:bb:bf:0f:ab:75:3c:2a:29:
3a:fd:e0:29:6f:84:9f:1a:55:cf:bd:9f:0d:9c:c5:f4:64:82:
16:86:21:01:57:d8:4d:d1:f4:5a:1d:af:29:8e:40:76:33:c0:
66:c0:d1:5e:85:d8:dc:6f:84:cd:88:3a:83:d7:93:4b:c0:b9:
36:3b:e3:51:fb:8e:79:54:75:18:3d:f3:2d:19:12:98:51:7d:
e9:c5:fa:67:7b:a3:72:a8:58:0c:1a:2c:ce:33:dc:7c:01:58:
86:10:43:b0:f9:3a:e9:f0:32:61:ff:d6:df:6a:07:c6:b0:0a:
aa:b1:af:ad:f1:80:c7:9a:90:4b:ac:f2:6f:2b:1f:d5:b2:79:
51:4d:1c:88:df:6b:d7:b7:72:93:46:67:76:4d:29:88:03:80:
11:b2:db:8a:12:c9:db:f8:bd:d5:d0:40:b7:14:1d:1f:df:94:
0b:dd:d3:3a:63:4d:57:d6:26:c8:16:d4:bb:47:0e:8f:06:e9:
48:f2:cb:bc:3e:8f:b7:75:86:70:cf:3b:90:76:40:d8:74:a6:
f7:4d:06:dd:ac:6e:f5:47:b2:42:4b:81:0d:59:af:33:49:48:
bb:27:87:39:8f:8f:ca:ec:47:ac:70:b2:0e:fa:d0:42:62:52:
5b:03:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:23:30 2026 by rpki-client