Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: QPOOdyvMPTkQmj+YV2b2sLIPEUB+mEbUyvGoEoj0XeQ=
Subject key identifier: 1F:5C:0F:0B:D1:5C:F1:38:F7:A2:42:4C:92:F9:1F:39:E6:2B:5F:55
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019D273AC06F15532C90F6AC31F09A1C7E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 11E4
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: byYWYoiuWitUVdDZlPsLllxyAQ3IjrvQ3AYbv1SWhg4=)
2: 7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa (hash: 76UePjEP+wElQI63EJrAUQNqnmL6+mG0ZmW2QHArepk=)
3: ICKtn9FiA8o1E110emXc1Z_9SHM.roa (hash: VFWWvtCtDRylV3Kwhn/OLe+sEMZLlpEgPe5DOIGJ9cA=)
4: bRiAj1-hf7sNdEiD1YkRkRllIpg.roa (hash: QwlE0RKPjkh4vpQe1ZoXKOsV7QKRd+qV+VA/PdPxz0M=)
5: iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa (hash: sekPzygHUOkEd1ly9r7LBo/JOh0iiRtcIXhoK8Xl8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c0:6f:15:53:2c:90:f6:ac:31:f0:9a:1c:7e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=1f5c0f0bd15cf138f7a2424c92f91f39e62b5f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:af:c9:ae:f0:bf:2a:14:d4:a1:0e:09:c0:
e0:74:55:4d:d9:fa:9f:42:f9:92:95:32:96:e0:a9:
12:18:9b:65:6b:ae:dc:e8:08:ee:a7:9b:0b:94:e9:
38:e1:77:11:9c:65:9a:5f:3d:98:f6:6b:1f:76:b3:
6b:7c:fb:35:e2:f1:f3:aa:bd:e6:b5:1e:6d:49:34:
ff:56:c3:6b:31:4d:66:c7:d8:28:ce:5a:e4:35:3e:
11:7d:dc:45:9d:b0:6b:34:9f:f7:98:8b:11:15:af:
de:b9:11:5e:c8:dd:0c:3f:6a:87:bb:67:aa:ab:50:
87:7f:cf:da:b8:52:6a:21:bb:2e:94:97:2d:6d:3d:
3b:81:30:6f:3e:91:70:9d:be:67:15:46:98:59:16:
a5:ea:6e:04:08:92:83:cc:a4:b7:98:20:0d:d0:16:
b7:a4:ae:89:8e:ac:68:21:2c:f6:4c:b7:d0:a6:d8:
d7:f3:88:aa:06:7c:4c:7d:87:cd:02:b7:89:d3:ce:
b3:1c:bc:97:1c:df:75:01:25:e1:a9:75:9d:f5:d4:
04:35:a3:92:bb:7b:02:6c:80:03:b0:29:fb:fc:cc:
1f:84:05:11:36:1a:34:9c:1e:9d:1d:d4:96:71:fd:
af:2b:16:89:2f:b7:44:27:11:75:c0:88:64:53:b3:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:0F:0B:D1:5C:F1:38:F7:A2:42:4C:92:F9:1F:39:E6:2B:5F:55
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5e:46:40:73:6e:e3:95:ed:c3:7b:68:f9:ad:79:93:3f:14:
a0:52:b4:88:e0:d7:cb:94:21:a0:9c:ab:ff:b1:81:48:67:d1:
45:c8:3f:e8:c8:ee:f7:06:99:ba:69:fe:0d:82:d2:43:8a:3e:
3c:c7:3f:d9:0f:a4:f3:2f:d8:df:50:7a:5f:3d:92:0a:28:74:
9a:2c:ad:c9:2e:7e:d1:6c:a9:8d:e0:7b:09:81:4c:bd:69:e0:
d5:dc:b7:9c:3f:1f:99:12:f4:88:28:91:bb:bd:c9:e7:cc:ee:
68:9c:7c:a7:83:82:a3:ea:35:6e:5f:59:ca:b9:0d:f2:cc:cc:
83:b9:06:95:2d:7c:f5:63:90:39:b8:99:1c:f8:6b:cf:41:85:
62:4a:51:92:95:0c:4e:72:4b:02:98:ba:a8:9f:31:9d:fe:1a:
16:dd:63:6d:30:82:c6:16:9f:18:ed:3a:81:e6:a7:31:76:1b:
20:d0:9e:db:10:45:00:ec:02:f0:7a:e1:b7:66:f4:5a:19:0d:
0e:12:af:b8:1c:0e:18:81:ab:c5:0d:07:9c:6b:20:87:98:e1:
5c:f9:33:6b:d4:6c:79:38:4a:91:2b:c4:26:f0:d4:cf:d4:2e:
12:b3:4a:bb:71:50:cb:b9:64:45:cd:07:99:b6:a9:ec:e9:d8:
33:9b:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:23 2026 by rpki-client