Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File: Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier: O8A7ZqDizRrx5LiNCD3G7efiPksh/XGC2k6OtZZdrW8=
Subject key identifier: 4E:20:A6:E8:F8:97:67:2C:BD:5A:80:A7:C5:EE:7F:E1:3D:22:CD:ED
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer: /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial: 019D265F1BF6E532BB1215778E9129ED5978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number: 1798
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: GohamsNU8MM1U6z5b7n3x0oegw5d5L4YjRcDA/SGd7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1b:f6:e5:32:bb:12:15:77:8e:91:29:ed:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=4e20a6e8f897672cbd5a80a7c5ee7fe13d22cded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:62:5e:80:ab:2c:54:1d:a8:39:80:c9:1a:
51:7a:89:71:c6:b6:b9:ed:fe:71:fe:fe:8d:cb:37:
ff:35:82:2d:62:47:5b:90:14:77:c7:38:34:6f:38:
9f:ae:85:02:65:c1:9f:68:fe:ce:85:51:f8:d6:7f:
e8:c3:cd:e8:57:5c:33:50:c5:bb:ec:ba:49:6e:b1:
53:52:ba:10:a7:41:ce:0c:d5:5a:53:07:9f:48:f4:
c5:a9:db:1e:b6:1d:a3:8e:8a:50:df:29:50:a6:5d:
22:45:49:5b:0c:2c:1c:4c:fe:f2:13:41:62:52:03:
8b:03:12:98:68:01:37:db:b7:71:32:aa:3c:28:27:
03:f8:48:a2:1d:bb:d1:e4:d4:a3:c2:dd:f7:f7:95:
2e:b6:8f:5d:5b:c0:1a:9d:98:aa:7e:97:3e:86:ed:
88:76:47:1f:4b:8e:6d:41:d1:af:57:3a:e9:1b:af:
d1:24:06:4f:f8:8a:ea:e6:32:14:ca:48:4d:88:1a:
0e:76:81:62:9d:ec:b9:6d:15:25:e5:bc:b0:67:1a:
62:76:10:cb:54:9b:dc:4d:6b:74:52:ad:d0:39:81:
1d:b4:8f:14:0e:f2:3d:31:1c:7a:14:8c:4f:68:36:
71:9e:49:bf:1e:e1:64:3c:fa:cf:45:44:1a:f4:2c:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:20:A6:E8:F8:97:67:2C:BD:5A:80:A7:C5:EE:7F:E1:3D:22:CD:ED
X509v3 Authority Key Identifier:
keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4f:cf:73:25:7b:89:7e:be:32:bf:b1:a1:1d:c5:8b:41:6c:
35:19:2b:fb:d1:c9:81:ff:92:69:c0:e5:2a:54:97:b5:da:38:
5f:05:bf:1c:0a:24:d2:03:de:f8:8c:a1:85:f7:b9:90:29:24:
80:93:48:80:4d:8a:4d:7c:7d:8e:0a:7d:47:55:0f:23:71:e2:
f9:8d:39:23:48:61:9e:ac:16:7e:8f:06:36:16:41:ca:c3:a9:
d9:f5:c4:4d:32:e5:f2:04:8b:34:0d:87:ce:5b:fc:39:2c:91:
64:c0:2c:fa:bb:78:6a:23:dc:82:5f:3c:f1:51:74:61:0f:e6:
ac:f9:1f:07:02:60:e3:4c:3b:d2:6f:db:23:64:b8:fa:f4:c0:
db:df:ad:3c:21:e7:ad:f9:d5:6a:dc:76:c9:d7:fa:d9:6a:3a:
ad:18:0b:0a:a9:76:7b:8e:0f:81:4b:fa:b5:39:c3:1e:a0:b6:
26:df:e8:5e:a2:d3:ac:73:d0:aa:12:fa:ea:be:64:53:e2:e4:
e0:6a:ae:32:76:d6:fd:99:da:a7:e5:eb:9d:3a:35:56:ea:1c:
3d:78:9e:18:56:4e:4e:19:41:59:47:50:6d:27:f3:be:73:a1:
d2:b9:81:74:2a:ce:da:3e:2f:59:62:5c:3b:f5:51:3c:ac:c1:
25:6c:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:34 2026 by rpki-client