Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: ZOtrl32WXiGFzz98ND0oloyhFvkGu46pqhZh9iytEoo=
Subject key identifier: DB:A2:02:35:1D:B0:CE:0E:31:FA:10:6D:BC:AE:F0:D9:E4:18:C2:18
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 019D2704315611F69C6C0B4E8A1B1B6835EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 0917
Signing time: Wed 25 Mar 2026 22:01:19 +0000
Manifest this update: Wed 25 Mar 2026 22:01:19 +0000
Manifest next update: Thu 26 Mar 2026 22:01:19 +0000
Files and hashes: 1: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: 39kqUpDfTLJwX57Z8mzJbqWbR2cVbACYQ2rVtHXHFjQ=)
2: hBZaHAyGtqRnE1DvLWWpXGTmsPU.roa (hash: hJDZYJp6gaUMZ+FxtfpKN3lHq8XA9oWvb1C80fIulho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:31:56:11:f6:9c:6c:0b:4e:8a:1b:1b:68:35:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Mar 25 22:01:19 2026 GMT
Not After : Mar 26 22:01:19 2026 GMT
Subject: CN=dba202351db0ce0e31fa106dbcaef0d9e418c218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:7e:1b:ed:b2:f1:2c:70:1e:b2:1d:e0:f7:
87:1a:a9:a0:fd:d7:dd:98:79:89:7a:1a:d0:05:20:
87:34:3d:87:c9:28:9c:60:5b:85:e9:7b:b5:0b:08:
4a:51:7d:df:b6:06:f3:a0:3b:63:23:3e:b8:2b:87:
1e:b7:88:c6:ae:5d:4f:75:e2:ea:fb:7f:ad:37:f6:
fb:75:4e:b4:2a:04:fc:f9:8d:cf:ff:86:10:c4:bd:
a0:82:8e:9f:c5:e6:84:9f:6a:fd:3e:6b:14:60:e2:
d1:af:ba:1b:4c:ff:14:ae:b2:1e:84:fd:cc:bd:7f:
38:01:bd:30:19:1b:e0:b1:fd:ee:b7:ae:53:5d:b2:
85:e2:68:ac:e3:54:07:24:b0:2f:b3:6b:04:63:84:
9e:63:a2:6d:88:bd:5d:af:f5:bd:f3:67:cd:3b:ca:
0c:37:b4:19:67:8c:ff:81:da:3c:2b:e7:02:05:7d:
ac:a3:da:a0:bf:7a:7f:94:88:a6:1c:07:f8:9e:0e:
dd:61:58:2d:e1:e9:8e:09:01:2d:80:da:b5:e1:3e:
2c:3d:1e:e0:c7:b7:48:42:ac:f2:55:c5:13:fa:44:
6c:5d:7c:81:44:bf:0c:aa:44:66:55:04:97:e4:6a:
1b:d3:3d:a8:86:fb:f0:d0:ce:10:1b:53:3e:18:02:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A2:02:35:1D:B0:CE:0E:31:FA:10:6D:BC:AE:F0:D9:E4:18:C2:18
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:a8:f9:cf:17:8f:0f:b6:10:7a:29:dd:49:42:d2:a9:46:
6d:a2:f0:dc:c3:4b:bc:06:fa:e9:bc:1b:66:a6:48:4e:a3:35:
46:53:d3:24:bb:30:61:6c:50:25:2d:4e:54:9a:9b:5e:36:81:
00:a5:e3:3a:13:fb:2b:0e:77:c5:d7:99:db:47:9c:fb:d4:62:
5e:f9:17:c5:2b:ce:8e:95:98:3f:88:d4:db:67:67:93:d1:50:
06:ea:dc:10:77:1f:20:8c:95:9e:82:d2:bc:7c:76:69:54:df:
39:7d:5c:3f:8f:d4:45:55:57:8d:42:2a:cd:cc:1f:4e:a0:78:
0a:d3:3e:bd:b9:f1:d1:e3:44:db:be:c7:83:01:c3:97:d1:e3:
bd:30:e0:ab:39:32:b5:97:24:5a:50:97:ba:b8:58:9b:aa:60:
03:f4:09:cc:b8:26:01:2b:11:22:e7:7d:64:72:82:d2:5d:1e:
27:c3:27:df:02:29:97:a8:30:a6:a4:53:6d:37:92:23:6d:43:
c8:df:bd:75:f7:ce:98:33:74:10:28:70:cf:d3:f7:d7:97:9d:
b8:4d:cc:be:7d:ba:b2:14:67:07:f0:28:99:47:9a:e8:48:29:
da:6d:84:6d:f9:bc:69:b7:48:35:e6:da:d5:66:df:0d:ee:14:
bf:54:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:31 2026 by rpki-client