Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: aDJDsoaC+E2Bne1AwrPZMvmQJRe2Z8A6tmTQ4XoYqGQ=
Subject key identifier: 75:78:C0:B3:A9:72:0B:5C:B4:7C:99:0F:6C:4F:3B:4D:7B:FC:BE:41
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019D2703E763E3496BD3D9FA7AB96F0B25B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: C5XEOKd3fauF5wNLgFLgU_UqhDk.roa (hash: gq6WkJtrJKgQndCeB0nR0Q6T7/UN9Av/CBIcRy+j3B8=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: e/UxjxdOApIHknkl839YGS+0BA8d/5LTttDsWBYRiYM=)
3: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
4: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e7:63:e3:49:6b:d3:d9:fa:7a:b9:6f:0b:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=7578c0b3a9720b5cb47c990f6c4f3b4d7bfcbe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:92:3c:d3:3e:77:c0:55:de:a7:31:3d:36:
bb:2f:db:70:2d:cc:25:c3:67:37:a2:ca:27:82:37:
5f:2c:82:42:2b:21:f3:79:90:3f:98:31:4e:99:08:
b7:c2:7e:72:be:72:ef:cf:4a:22:91:96:9a:cc:d8:
b3:c6:d1:2f:3a:b8:0b:3f:cf:22:48:78:33:18:f4:
d2:6a:7d:18:40:28:05:92:00:08:05:a0:12:2e:51:
89:51:c6:c4:34:d8:b1:79:f9:1b:c4:ec:64:ef:52:
59:0d:df:5d:5c:f7:2e:38:86:7a:80:22:0d:0d:4c:
96:39:a8:44:47:7e:06:5f:de:6b:1c:12:e6:73:9c:
31:86:e5:a2:a8:74:9a:9c:e7:f3:2e:ef:30:a5:57:
d1:3e:76:76:db:d6:e9:43:53:01:81:7b:72:16:1b:
bc:62:bd:a5:5a:0d:72:b6:cc:7d:4c:65:24:2c:49:
a9:1d:03:11:6b:df:b5:32:bd:52:5f:fb:00:68:df:
62:15:09:13:e2:5a:33:9b:7e:96:4a:cc:28:ce:13:
ed:09:72:83:c9:49:be:1c:9d:a0:dd:89:0a:df:ed:
41:84:ed:4f:bd:30:a9:b7:4f:cb:27:ef:2b:a9:22:
fb:3d:32:44:5b:32:77:df:bd:0e:72:29:05:e6:eb:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:C0:B3:A9:72:0B:5C:B4:7C:99:0F:6C:4F:3B:4D:7B:FC:BE:41
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:d7:96:d2:a2:cd:46:cd:bf:00:b7:81:66:72:ea:1e:82:
39:00:98:6c:ce:fa:ff:06:ce:4c:73:fe:e3:2b:48:bc:04:d1:
0d:6e:74:db:e2:f5:d1:59:18:a5:75:19:ea:c5:e7:c2:c5:ea:
a7:6b:c9:05:07:a1:89:ca:f1:2e:7c:51:79:18:6e:41:c0:2d:
71:33:ea:12:49:a8:d4:cc:a9:66:67:ee:38:c5:a9:df:70:9d:
e5:09:0a:e0:fe:c6:bf:41:06:3e:04:de:fc:87:3a:eb:03:7f:
5e:39:8c:cf:3e:8d:e4:37:9c:0f:b3:62:1f:33:7b:32:e8:81:
87:cb:f0:fd:42:f2:55:6e:53:eb:f7:8d:50:e8:92:0f:8f:94:
f8:22:35:ae:58:05:aa:84:6c:84:4a:cf:1b:b7:c0:30:26:1a:
11:79:ca:e0:ac:c8:e2:5b:79:91:24:89:60:f8:39:52:b5:bf:
18:48:57:91:af:58:21:f7:69:12:32:2b:26:f9:e1:a1:ef:95:
99:53:1a:eb:70:a8:0a:d9:3a:3f:10:17:fd:6e:f4:5a:68:af:
5a:48:f8:85:6f:17:49:4b:75:c0:1b:20:95:d6:fd:76:1f:71:
6d:6b:4f:2b:57:e3:b2:5f:e3:d7:50:47:7a:5b:88:6a:7c:99:
40:8e:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:10 2026 by rpki-client