Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft
File: HA73NQ7-NSp2AezkHDGl-DhkVic.mft (raw, json)
Hash identifier: 6FCjetTdHYYJ0IrAVDta5FDDZyN+7x1OgVmwqn4xu3Y=
Subject key identifier: 0F:4B:62:56:69:DD:A1:D4:10:6D:F4:FC:FF:5B:96:82:4A:7D:34:20
Authority key identifier: 1C:0E:F7:35:0E:FE:35:2A:76:01:EC:E4:1C:31:A5:F8:38:64:56:27
Certificate issuer: /CN=1c0ef7350efe352a7601ece41c31a5f838645627
Certificate serial: 019D25F16ABD67CB86E25AE6F8563AA51C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA73NQ7-NSp2AezkHDGl-DhkVic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft
Manifest number: 01B2
Signing time: Wed 25 Mar 2026 17:01:11 +0000
Manifest this update: Wed 25 Mar 2026 17:01:11 +0000
Manifest next update: Thu 26 Mar 2026 17:01:11 +0000
Files and hashes: 1: HA73NQ7-NSp2AezkHDGl-DhkVic.crl (hash: Jry1S3PaYxSUffjoNds1p3mLEi+Pu7PVWS6byHT6nWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA73NQ7-NSp2AezkHDGl-DhkVic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6a:bd:67:cb:86:e2:5a:e6:f8:56:3a:a5:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0ef7350efe352a7601ece41c31a5f838645627
Validity
Not Before: Mar 25 17:01:11 2026 GMT
Not After : Mar 26 17:01:11 2026 GMT
Subject: CN=0f4b625669dda1d4106df4fcff5b96824a7d3420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4a:f8:0e:66:1b:10:00:6e:7c:0f:4c:fa:4c:
7a:5a:c3:60:d9:96:f2:6b:e1:77:96:fa:59:18:2c:
53:af:84:06:bd:44:8e:43:2f:e3:a7:67:bb:97:b0:
f4:b7:40:dd:a5:5b:2f:e3:98:a2:c7:9a:6d:68:60:
83:1b:55:3b:86:a0:b1:51:a0:ad:c9:7e:15:c4:51:
77:c5:32:c2:da:66:65:da:9a:39:f5:43:91:bb:85:
e5:e8:1c:61:ec:13:bf:e3:f2:66:0d:b5:14:c2:ee:
62:bc:47:c6:ae:0a:7b:45:a6:08:61:de:20:7c:81:
85:5f:33:72:e6:85:a2:78:2d:dc:b2:53:3e:aa:19:
1e:ff:95:e8:26:60:47:c9:44:5f:90:3e:f1:72:bf:
17:db:96:15:58:59:64:f6:88:da:ce:a4:44:8e:40:
44:3e:e2:ef:bc:39:92:06:b5:28:25:f8:47:8d:80:
cd:ce:59:7e:d0:19:43:5a:02:74:77:84:66:54:03:
14:db:35:69:e4:3c:01:20:ca:ea:2f:a8:94:24:6d:
f1:9e:59:ba:39:b6:24:70:ad:f9:4a:d2:f2:50:5b:
0f:fa:60:5a:ac:1e:5b:6b:24:d6:ee:56:a5:34:1e:
af:99:45:f1:c0:75:8d:9f:10:d6:97:27:11:64:90:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4B:62:56:69:DD:A1:D4:10:6D:F4:FC:FF:5B:96:82:4A:7D:34:20
X509v3 Authority Key Identifier:
keyid:1C:0E:F7:35:0E:FE:35:2A:76:01:EC:E4:1C:31:A5:F8:38:64:56:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA73NQ7-NSp2AezkHDGl-DhkVic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5e:08:f0:dd:29:bc:2b:cf:61:a2:a4:bc:07:88:c4:68:5d:
40:05:f6:7b:62:32:aa:59:ea:c6:8c:3d:63:0c:a0:7f:7f:2d:
02:3b:35:dd:93:49:81:20:c6:9f:ab:43:5d:96:ec:ce:07:6a:
6b:4f:ae:5a:d3:f0:e9:08:ae:cc:92:17:8e:c4:37:0e:d4:6b:
41:32:9f:15:c0:33:b4:33:14:43:e5:ae:13:31:bd:50:d1:23:
81:de:ba:9e:b7:ba:f6:54:ab:3d:93:82:91:0a:26:f2:3d:9a:
60:a7:5d:41:b8:2e:f1:8f:19:22:56:48:43:da:f7:35:8e:48:
e7:3d:d5:b9:64:55:30:8a:55:46:c4:bd:37:8d:a5:17:bd:13:
79:fe:1e:e4:8b:a4:e3:3d:b4:95:56:15:d7:50:ce:c9:42:f1:
1e:73:92:56:39:1f:e4:a2:d0:17:02:41:e1:08:ae:db:bd:f0:
3d:ef:4d:7e:7f:09:ef:5f:4f:f7:47:20:a5:34:bd:ae:09:70:
84:bc:35:97:82:f3:be:b5:b1:0b:1f:de:b9:31:66:c5:f4:84:
d8:94:b6:3b:56:8b:f4:3a:ad:0c:3d:19:6d:dc:3d:64:12:fa:
2b:60:31:30:01:34:4c:98:bd:f8:e0:c5:fc:3c:55:55:77:15:
7a:cd:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:32 2026 by rpki-client