Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: lRNd0ry6Eivrw19jFjo4u8PJ+wMJ04uGj0dsnrwOjHo=
Subject key identifier: FC:7D:E3:3F:17:A6:7C:B0:17:78:BA:7F:56:09:84:40:E9:98:AA:FD
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 01A0EC2F134B1F283D5AB65589752C53FBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1700
Signing time: Tue 29 Sep 2026 08:01:43 +0000
Manifest this update: Tue 29 Sep 2026 08:01:43 +0000
Manifest next update: Wed 30 Sep 2026 08:01:43 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: eWl1pBBKc/W1hXI7KE+Hn35pa0UDXTE7HBmydJSB8XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:13:4b:1f:28:3d:5a:b6:55:89:75:2c:53:fb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Sep 29 08:01:43 2026 GMT
Not After : Sep 30 08:01:43 2026 GMT
Subject: CN=fc7de33f17a67cb01778ba7f56098440e998aafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:01:23:7d:a7:78:9c:48:da:1e:ba:f5:6f:
dc:17:a2:48:17:31:29:39:97:37:4f:f1:34:f8:93:
ed:07:fc:13:f7:cd:15:7c:83:71:df:91:4b:c7:d1:
7a:45:83:33:8c:24:a6:d8:0c:4f:f8:7c:cc:2b:31:
d9:bd:4b:f1:23:52:21:ec:b3:03:3f:88:76:55:a0:
a8:fb:e0:57:eb:4d:3b:11:79:1d:6e:80:a1:cb:a5:
5c:16:41:da:0b:4c:b6:0b:12:73:0e:02:8a:b4:b4:
00:e3:84:12:d7:7d:63:31:40:ac:98:19:d4:66:90:
15:38:a7:9f:dd:d9:9b:e6:b1:d5:bc:74:3c:08:24:
bb:76:dd:b1:96:40:1b:9a:97:3d:7b:5c:9d:66:02:
4c:d1:d9:98:09:e7:92:1a:72:47:0e:98:2e:6b:6a:
03:92:d8:99:b2:de:9e:b2:60:34:89:aa:89:f1:9a:
1d:e2:7d:f6:26:0c:93:45:d2:c3:30:56:63:33:98:
b1:ea:52:af:d7:4e:3b:7e:9e:35:e6:82:8d:88:95:
71:1e:40:80:ad:60:d3:79:c4:26:76:50:ea:25:7a:
f3:bc:5f:3f:77:95:55:25:91:92:35:76:9b:91:76:
17:90:3b:8a:67:ed:48:81:76:1d:52:85:c2:7b:8b:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:E3:3F:17:A6:7C:B0:17:78:BA:7F:56:09:84:40:E9:98:AA:FD
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:31:dc:72:76:24:ae:ef:61:99:d0:7a:5d:9f:ac:f7:35:16:
f8:f3:d7:a2:3b:01:f8:eb:27:7b:bd:39:3b:a3:41:f0:60:9e:
12:e3:11:5c:95:51:01:a0:87:25:30:59:a7:97:2a:bc:13:d5:
0d:89:5e:c1:9b:22:a5:7a:97:1f:71:b4:ce:b3:a5:17:04:a7:
50:10:6e:33:46:dc:8b:96:69:af:d3:7d:27:0e:ba:c6:7f:fe:
93:ed:b2:4f:b1:6f:6d:c8:36:1b:4f:66:7f:77:eb:b8:87:67:
d8:6b:27:d4:15:6b:4b:ea:d6:23:09:e2:c2:b1:d1:b3:d7:27:
fc:cf:d7:06:93:93:5f:e4:1f:18:74:12:87:80:44:b3:be:36:
be:93:23:22:eb:82:c7:b6:df:73:2f:d4:1d:cd:63:22:ca:ad:
3b:27:ee:fa:0f:1c:18:f3:35:c7:d4:bb:57:e3:14:c1:32:b9:
f0:b6:98:92:cd:3c:35:bf:51:e6:37:b3:7b:89:ea:3a:f5:e0:
ea:3d:5c:15:b8:bf:85:e4:15:99:a5:e5:75:96:4d:7a:49:0e:
59:ac:0f:8d:a7:54:ce:7c:7c:63:27:83:15:05:1c:79:49:a8:
4d:f2:31:2c:30:30:c0:86:bb:7b:93:69:30:9b:6e:14:68:10:
e2:13:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:12:17 2026 by rpki-client