Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
File: HeL84IWat-AbhRy2Buvb1cAzgSU.mft (raw, json)
Hash identifier: HDqKbresxnWDdV1jMP6ZX/QhoTxUoeTXW89X8Bj6fvE=
Subject key identifier: A3:AE:EE:97:7B:9C:B9:AE:41:2A:8A:D7:0B:68:E3:25:58:49:0C:F3
Authority key identifier: 1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25
Certificate issuer: /CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125
Certificate serial: 019D25839A0D0EF728274CE0DACC027D5933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
Manifest number: 010E
Signing time: Wed 25 Mar 2026 15:01:14 +0000
Manifest this update: Wed 25 Mar 2026 15:01:14 +0000
Manifest next update: Thu 26 Mar 2026 15:01:14 +0000
Files and hashes: 1: Dqcp4RvQl7P2OEX63xUaN0DRBVg.roa (hash: IQ4Oj0h0gSI/GePJB5bn18PdQHZHOsSLQnCDVouxx7g=)
2: HeL84IWat-AbhRy2Buvb1cAzgSU.crl (hash: KsJUxlCh5qEZ6vZ3QACx9PLaXH1dKdlh76YsgPLQ09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:9a:0d:0e:f7:28:27:4c:e0:da:cc:02:7d:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125
Validity
Not Before: Mar 25 15:01:14 2026 GMT
Not After : Mar 26 15:01:14 2026 GMT
Subject: CN=a3aeee977b9cb9ae412a8ad70b68e32558490cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:19:7d:f5:ba:7c:bb:e3:e4:06:fd:15:8e:
8f:8f:d2:9f:b4:6b:a8:14:47:41:d5:cb:60:7a:be:
a8:0f:50:6b:be:60:72:4d:79:8f:0f:96:be:71:68:
d0:02:7d:06:f4:53:10:ea:3a:fd:dd:fa:a1:7f:27:
0d:93:16:02:96:19:3d:65:61:10:84:42:d6:43:79:
a2:b6:c7:8d:42:1f:ac:56:04:e9:a7:e9:4c:41:5e:
5a:a6:79:25:61:af:4e:a8:ef:c6:92:ed:d4:e2:ec:
df:4b:4f:3a:d3:03:c3:7e:37:63:64:85:1e:62:79:
f1:54:79:11:a2:5c:c7:3e:06:70:e7:fd:fa:5f:07:
0d:5c:2e:03:28:f6:80:73:b4:56:31:81:78:0c:57:
b3:28:b0:55:8b:dc:24:80:99:a3:1c:f5:83:63:56:
97:3f:af:8f:e4:cc:20:cb:ca:19:7c:33:51:d5:68:
7a:2a:38:8c:46:2c:9c:87:63:c1:38:42:3d:f3:7d:
c8:e5:32:33:71:44:4c:91:a6:3f:96:b2:dc:c3:b5:
6e:c9:5c:bc:f6:17:7b:fe:b5:08:97:c7:09:04:f8:
58:6c:6c:c3:d7:1e:88:42:c3:34:02:5a:f7:ef:c7:
61:9b:c8:74:3e:ec:2b:17:dd:d8:c7:d9:25:4c:81:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:EE:97:7B:9C:B9:AE:41:2A:8A:D7:0B:68:E3:25:58:49:0C:F3
X509v3 Authority Key Identifier:
keyid:1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:e0:9d:f3:ed:e3:8d:76:dc:ac:5e:14:cc:17:55:7e:8f:
d3:27:53:9e:33:00:97:46:67:d5:e8:f0:97:95:f8:1f:a7:fb:
de:ee:c8:bf:90:6d:0a:89:40:5c:7e:25:2c:4e:29:bd:e4:87:
5d:84:67:c3:1b:2f:36:b2:39:ea:df:0b:02:1a:df:a0:cf:0d:
64:b3:9a:c6:09:7d:9f:18:5b:f8:d5:08:3a:4e:bb:ee:bb:68:
4a:da:60:c5:bc:da:42:91:a0:00:ad:d3:87:97:f3:c3:41:b2:
cc:0e:a5:f0:ce:ff:c8:23:90:d0:75:f2:47:3c:93:a4:23:c2:
36:85:5f:ca:e5:fa:96:4b:a7:3f:56:1a:8d:d4:87:4e:41:bc:
aa:e5:aa:32:cb:51:46:07:66:76:11:fd:eb:a0:53:d2:f1:43:
fa:ec:97:06:41:51:aa:2b:02:89:2c:97:a2:1b:30:b8:9e:46:
2a:97:52:6e:fb:16:33:d7:0d:dc:fa:a9:a3:52:f2:d1:10:a5:
fd:71:aa:e4:7e:37:9c:b3:db:54:24:9a:68:d9:ff:0c:fb:0d:
32:b4:24:68:34:03:9e:06:e8:a8:86:fe:2b:86:a4:c6:e8:cc:
d9:8c:9d:bc:b9:36:61:12:87:72:5f:38:a1:df:32:55:a5:04:
d0:42:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:16 2026 by rpki-client