Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier: NR8Q2wVXfkwkY2BgQwa817JMXapTmJIrhTVpNkpc2nM=
Subject key identifier: 2D:6D:A7:5A:6F:04:A2:1C:CF:30:41:3B:DC:F0:EE:D3:36:36:68:2B
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 019D2A3B507D6F1E8B8DFC19D4007E2BBE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 13:00:23 +0000
Manifest this update: Thu 26 Mar 2026 13:00:23 +0000
Manifest next update: Fri 27 Mar 2026 13:00:23 +0000
Files and hashes: 1: GqjpIwPCfuY9AEJq32U-7x8s2Xc.roa (hash: hBgV71RI9VW14WRnhYAdkQpWE93JgEHcBWlBuGyNBy4=)
2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: iojqUDMEoh8SgxtS2NYPtph83l86bUEuYrcn6CTBOMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:50:7d:6f:1e:8b:8d:fc:19:d4:00:7e:2b:be:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Mar 26 13:00:23 2026 GMT
Not After : Mar 27 13:00:23 2026 GMT
Subject: CN=2d6da75a6f04a21ccf30413bdcf0eed33636682b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:10:1c:46:74:f4:d3:62:d6:66:d5:f0:e0:
ad:2e:c3:a0:cb:eb:32:95:a3:74:44:b3:95:99:82:
44:1c:8d:a8:67:a4:65:2b:b5:e9:dd:c1:74:f3:fe:
ee:05:62:a3:45:28:dd:c3:85:4c:45:f9:f7:b9:50:
56:f9:8e:2d:44:ad:a1:a8:cd:f5:7a:f9:74:b0:25:
0b:f9:99:7e:b3:d6:e2:e1:89:bd:ad:48:35:61:7b:
0e:53:82:ab:c3:af:3d:96:e3:03:80:86:c9:c0:22:
38:fe:db:fb:02:00:60:6e:f8:d4:38:9b:fd:ba:20:
80:e1:38:5e:c1:76:ff:d2:b8:8e:37:67:2a:ab:22:
ca:21:f0:85:9c:b4:3e:25:75:d5:b5:50:55:43:b9:
3a:e9:a8:b1:77:60:eb:5b:af:95:c2:01:35:55:4c:
50:11:12:e3:20:43:72:dc:7f:89:17:5c:f5:49:de:
7a:ce:2c:0a:76:2f:1d:e3:b2:0f:91:1b:e9:bb:09:
2f:c1:f7:57:d7:f8:39:32:83:41:d7:cd:6b:b0:29:
3d:4c:10:77:bc:11:8c:b2:1e:92:aa:51:68:74:0e:
ae:dd:7f:4f:93:9f:82:6e:2e:0b:e1:e2:2a:01:0b:
33:b1:65:9e:88:e3:85:2f:59:6a:4a:e1:58:44:64:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:A7:5A:6F:04:A2:1C:CF:30:41:3B:DC:F0:EE:D3:36:36:68:2B
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:29:98:5c:14:0e:44:96:03:da:d9:1f:d8:f4:d2:d2:71:
d2:33:af:1a:4c:12:83:d6:4e:63:3a:2e:9c:38:ae:3d:30:ea:
f9:86:e6:c7:6e:6a:69:65:57:60:5f:90:d8:19:75:17:6c:95:
7e:63:2a:3b:30:d9:6d:c5:9f:a7:96:f5:ac:ae:36:ac:c8:e4:
ac:35:28:a2:09:dd:9f:65:4e:e4:b1:b8:23:e6:93:46:1a:90:
8c:66:92:ff:4c:c7:7f:f1:d1:b5:f9:3f:8a:00:14:a9:3b:d0:
96:e5:70:6f:e4:8c:fe:38:c0:e2:70:dd:a2:65:43:c9:d8:b1:
d8:9b:93:4b:de:b8:fc:6a:37:1b:63:fc:f9:52:61:76:9d:63:
c0:1c:84:68:29:e5:83:ca:a4:2a:3e:9b:c3:02:f8:49:c7:a5:
b5:8f:7b:2a:d6:03:c8:8b:b4:95:d1:b5:d1:0f:ad:88:67:86:
1a:c8:5a:9e:a0:05:d4:68:e7:5e:92:2f:da:d1:5e:49:5f:ef:
3e:2c:33:24:92:a4:52:c5:cd:01:93:5f:34:a7:3b:1c:28:1a:
a5:89:2c:f3:9b:7b:9e:70:e9:3e:a5:67:30:f5:11:35:43:c6:
f7:1a:e1:d5:d0:fd:12:3f:ad:83:7d:2a:4a:53:98:96:30:bd:
f5:63:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:27 2026 by rpki-client