Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: l1JuCPfIe5XIWjoyOQLgoRe+ICdZyHd2kRm4UoNNVcA=
Subject key identifier: 4F:8B:A5:B7:30:D5:6A:A6:B2:E3:0D:D4:57:72:DC:54:D0:06:54:D5
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 019D2816BADD98B78D0C4507D12228946E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0BE5
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: QHZtI0TxMZ2k5gh4+Au7+UB2fuM8i8W3Cxp8RCzrUlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ba:dd:98:b7:8d:0c:45:07:d1:22:28:94:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=4f8ba5b730d56aa6b2e30dd45772dc54d00654d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:e9:eb:6e:14:67:e7:13:22:3a:20:2a:74:
2e:10:07:21:1e:23:0a:5f:58:7c:9e:86:18:1e:b8:
0d:3d:3d:f3:b8:66:fa:df:b2:8c:8f:dd:38:48:06:
96:76:d4:05:c0:f9:b4:80:d3:ab:5e:4d:0e:94:23:
c6:c4:b1:d3:01:3b:8e:d8:2d:a7:dc:ec:b4:d0:0b:
c3:2d:bf:e4:b4:ba:a5:e0:51:78:b9:0f:43:f2:ce:
62:78:83:ee:60:2a:c4:c9:9e:bc:f4:a9:b6:28:59:
99:52:d8:69:ad:2c:fa:ef:4b:84:b1:61:1e:03:7b:
71:7f:b9:d8:a3:c7:94:02:4a:0a:a9:1f:67:56:fb:
a7:57:34:b2:32:c1:b6:97:e0:ab:8e:1d:5e:9c:25:
46:81:11:8a:63:af:3f:cc:4c:76:4c:d2:a6:a6:81:
46:c1:93:f1:1f:90:ae:d8:64:2d:8f:74:72:09:e7:
61:33:9d:56:e0:18:16:9d:61:cd:70:a2:e8:4d:b5:
46:1f:65:33:71:b6:de:36:5a:d9:8c:b7:11:84:7c:
7a:23:f8:0a:ca:8b:de:60:37:db:ed:f7:51:9b:68:
49:31:9b:28:35:7e:d1:c4:7a:0d:8d:36:1b:1d:f1:
3f:62:a5:86:44:cc:e0:bf:60:8c:cc:17:3b:09:03:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:A5:B7:30:D5:6A:A6:B2:E3:0D:D4:57:72:DC:54:D0:06:54:D5
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:48:2a:18:7d:85:33:0e:17:d3:95:10:cf:6b:8b:b0:20:8d:
e4:c8:78:f7:f2:63:84:35:d7:75:bf:d1:54:2c:c3:40:58:ab:
40:14:94:2b:e2:51:a8:10:79:5c:a4:5e:0f:f8:07:1a:8f:19:
c9:84:1e:de:83:11:7e:7b:2b:8f:2d:e0:9e:da:8f:24:ec:67:
06:44:5d:58:32:6c:4b:06:f1:90:84:1a:6d:ca:42:13:26:12:
16:0c:7c:cb:a1:6f:4c:7a:e6:b2:44:8c:13:f2:4d:23:ba:25:
b3:dd:2e:31:fb:2a:e7:a6:c5:01:60:5e:75:b4:e5:31:75:1f:
1c:5c:5f:23:8d:54:82:e5:f6:d7:38:9a:bb:b8:8c:a0:e8:1b:
71:20:3a:34:76:4b:45:ed:e9:45:73:f4:e1:de:ba:54:bd:fc:
74:40:ca:70:04:a3:89:de:96:2b:c2:d7:ab:f8:22:15:0e:b3:
a0:53:0f:24:ef:14:66:95:2d:f0:93:e9:dc:ba:f8:e4:38:23:
67:04:61:47:10:f0:43:e2:33:b4:05:f7:56:e6:83:a6:d8:82:
1e:aa:20:98:e0:7c:e8:28:28:eb:48:8d:e9:51:9e:48:43:35:
f4:2d:1d:f9:39:03:2c:d1:cc:14:f4:1d:9e:3f:10:87:8d:28:
00:b2:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:16 2026 by rpki-client