Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
File: hRwTZejd_OV1mPvo3n6oesYD4iw.mft (raw, json)
Hash identifier: e2659RVd2LfaGYqguQQh4j3RKuHE9xFMs7x43kmseFc=
Subject key identifier: 37:4E:B4:5E:00:70:5D:E3:3C:33:85:C9:F2:33:F0:BE:34:99:B0:88
Authority key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
Certificate issuer: /CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Certificate serial: 019D26CCEC97741AA20FA26C15287853A339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
Manifest number: 0AD6
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: hRwTZejd_OV1mPvo3n6oesYD4iw.crl (hash: ykhrB4f22uvFtdXMJ1YSXvSGpXzf/O1Kpgv4NpKHZsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ec:97:74:1a:a2:0f:a2:6c:15:28:78:53:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=374eb45e00705de33c3385c9f233f0be3499b088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:03:66:bd:28:7b:5c:c8:03:06:7f:3d:70:
1b:63:72:55:60:3a:f5:40:13:8a:71:ff:b1:58:25:
02:e0:d1:48:db:f2:61:a3:2d:33:bb:39:54:32:a0:
a2:de:4b:4e:c7:93:39:95:2a:8f:09:b1:5f:61:7d:
6f:3c:7f:c6:dc:5b:b0:88:53:2b:b0:ec:95:eb:0f:
b2:02:7c:37:f0:f9:86:ea:14:79:77:58:7e:3f:5a:
d2:18:2d:01:fe:84:e6:98:8d:f8:e6:32:b3:f3:e6:
f9:1b:c5:50:b3:0d:e3:f8:ce:9f:af:e7:67:80:e4:
06:dd:b3:57:45:07:cd:41:f1:24:5b:54:fd:35:9c:
d5:e8:03:0b:25:91:08:78:8d:84:c2:e2:24:77:01:
e5:ca:2a:20:d7:51:10:bb:c5:69:68:7b:6c:76:c8:
dd:e8:39:42:64:d0:84:9a:7c:01:76:34:60:c3:c0:
b9:09:b6:3d:74:1b:c3:99:f1:5d:e1:a3:7a:25:af:
ad:f4:f5:a2:52:ca:7f:6a:0b:17:ac:e4:f7:19:e6:
6a:60:af:18:18:49:8e:d0:1d:3d:dd:5d:7b:10:85:
0d:f3:cf:12:21:e6:f9:0c:64:87:5a:b5:08:f9:71:
94:15:4d:39:0f:2c:0f:01:b8:a1:07:77:58:e6:cc:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:B4:5E:00:70:5D:E3:3C:33:85:C9:F2:33:F0:BE:34:99:B0:88
X509v3 Authority Key Identifier:
keyid:85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f1:b8:74:50:74:96:78:5a:8b:b1:19:68:a3:77:17:98:ba:
f9:3c:c3:e9:a4:7b:89:98:f7:09:f5:33:d2:73:61:54:1c:93:
6a:77:ea:15:e2:57:15:ea:2a:ad:1a:e8:46:62:5d:4a:13:94:
96:bf:e2:98:44:10:f0:97:10:7a:c6:22:09:71:1f:1f:42:9a:
28:93:f3:12:63:d7:07:f7:27:dd:b9:38:25:bb:0f:b3:33:0b:
ac:7a:7d:46:3c:be:41:8e:fb:2d:76:4c:c2:f8:48:e4:ad:45:
69:d6:c3:1c:e1:8b:7d:07:5a:78:c5:84:8e:c3:51:31:6c:34:
aa:33:08:47:7a:be:e6:3e:76:33:dc:56:e6:78:8a:14:76:62:
a3:8a:fd:7f:56:60:81:cc:9d:24:ed:f9:36:b3:3d:ae:e8:37:
4f:a0:2c:0e:76:d4:3b:0b:f0:34:1b:69:9e:04:cb:e3:4d:d1:
3d:43:eb:ec:ba:77:12:c9:c4:08:42:f9:f0:ef:33:63:4a:b5:
98:67:c5:e1:12:9f:0c:6e:4c:21:c6:f9:20:f9:ca:39:c5:0f:
a0:2a:02:28:be:81:0d:6f:76:89:80:54:15:79:18:30:c0:be:
e3:ce:f5:41:3f:ad:97:78:8b:e6:21:36:45:80:1f:2e:0e:8a:
32:12:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:04 2026 by rpki-client