Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: a6leeaj8u5AkVj0R1BAT/Tjnxa3Q+MwbMl2MeI506JA=
Subject key identifier: A7:1B:4B:1B:76:3A:57:25:85:35:41:37:28:40:1D:09:87:47:B0:97
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 019D29977A9519DD9626833AEA82594611BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (hash: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ=)
2: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (hash: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY=)
3: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: iAlzKrWrVEg4cESil33ZLylW8+RG9waUhbA2If5ydjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7a:95:19:dd:96:26:83:3a:ea:82:59:46:11:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=a71b4b1b763a57258535413728401d098747b097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:56:a1:93:6c:5a:d0:a4:7f:15:d6:6d:6c:
7d:35:6c:1f:22:80:14:2b:2e:25:9b:c0:fc:5e:95:
28:ea:cf:90:d0:5f:5c:c8:14:f6:73:6c:6c:2c:6b:
49:ba:6b:2d:10:04:aa:65:dc:b9:f5:5d:17:48:bb:
36:1e:99:b8:d1:c9:8d:ee:81:06:36:8d:b8:a0:fc:
6f:8d:19:d7:d8:ee:8d:b0:ef:63:7f:c4:32:01:f3:
46:43:c7:b9:46:40:cc:1c:6f:99:b3:43:c9:98:d0:
49:74:b8:55:91:7f:db:52:ca:e7:13:5e:91:42:d7:
ba:25:61:eb:26:48:a7:03:98:dd:73:c4:00:ba:d6:
cc:f6:7a:7a:62:82:fc:9e:61:e4:7d:9f:c6:22:6e:
7b:41:b3:0c:87:ad:97:9f:c3:3a:b7:e7:cb:02:89:
b3:68:fd:4c:c4:77:ff:b6:c8:74:f2:9a:88:bf:0d:
15:b5:59:d0:56:a8:99:52:f7:e6:64:d7:53:2a:08:
5b:35:5c:d7:1a:45:0d:58:82:61:ab:2d:76:d3:40:
b9:ef:9f:12:33:ca:4e:24:33:a5:6b:9e:96:f4:15:
29:03:48:a5:70:c0:28:d7:4c:ed:cd:1e:b1:7a:b6:
e9:f5:2f:4a:fb:a0:d3:87:ea:9b:54:02:cf:d7:7b:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:4B:1B:76:3A:57:25:85:35:41:37:28:40:1D:09:87:47:B0:97
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:10:1d:0c:72:95:21:dd:e8:da:a7:a2:91:b7:65:2c:11:
b3:16:ac:69:58:63:85:bc:5d:ff:77:a6:1d:5a:8a:ba:4a:4b:
0b:9e:39:ae:13:9e:fc:e5:31:7c:71:8d:3b:33:d5:f2:d9:03:
56:e6:fc:ee:3c:87:b8:c2:ec:71:e5:4d:9c:1c:e7:59:f8:25:
a7:97:23:e0:b7:c3:4c:87:d2:60:35:be:ea:59:79:58:96:14:
76:89:3d:5d:ed:4d:54:9f:bd:8d:bb:36:96:9b:03:e8:42:a1:
e2:e7:b1:49:61:ad:cf:d2:9a:4a:cb:16:bb:bc:16:87:42:71:
43:5e:aa:8c:cb:35:e8:5a:e0:23:7b:a4:d7:cf:65:8c:d7:fe:
59:3c:65:22:64:a9:c1:58:28:fa:7c:fe:71:79:6d:fe:56:b6:
e9:af:94:be:61:44:78:6a:05:61:53:0a:29:1e:f8:3d:e9:83:
c7:26:4f:55:63:59:b7:95:0f:a2:86:ec:50:d0:09:47:56:f4:
6f:d9:e0:03:ac:36:7a:15:cc:76:e7:6c:75:ef:13:89:78:f2:
94:f7:58:8b:c2:83:46:c7:fb:bb:23:1d:cb:84:54:d1:ed:43:
3a:dc:b2:23:0c:47:bc:cf:72:13:03:74:5c:64:28:7f:e9:83:
5b:3b:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:07 2026 by rpki-client