Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: kGOrIH9RBClHjprr8AY2fUbrgOwML3L3LuW3UIOsnCM=
Subject key identifier: 67:99:17:98:F3:F0:D7:B8:86:38:AC:E2:B6:F9:77:9A:59:17:59:37
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 019D284DEC988ADE21164DC1CB56EA8FF28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 08E5
Signing time: Thu 26 Mar 2026 04:01:28 +0000
Manifest this update: Thu 26 Mar 2026 04:01:28 +0000
Manifest next update: Fri 27 Mar 2026 04:01:28 +0000
Files and hashes: 1: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: cYu0nAJuoax38pyKkWkugzSQ++tspj2NjaF4egMl8Z4=)
2: q8akKFKswGsTj_WpjK3bxZW99G8.roa (hash: bvAmYcYZDJUEx6RPMDdQf7Ot5ZQUyjU6PmIDVWJ3Sco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ec:98:8a:de:21:16:4d:c1:cb:56:ea:8f:f2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Mar 26 04:01:28 2026 GMT
Not After : Mar 27 04:01:28 2026 GMT
Subject: CN=67991798f3f0d7b88638ace2b6f9779a59175937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:47:94:e2:d5:3e:7e:33:c0:c0:1b:a1:ff:
85:cd:41:70:8d:c0:1d:e0:5d:1b:43:41:31:11:a9:
1c:06:58:ca:1d:8c:15:52:31:3b:26:00:e4:a2:21:
c3:b2:ba:8c:29:47:3b:a2:93:62:75:02:7a:06:70:
ec:a3:09:e8:81:30:93:cb:7c:0e:c7:1d:43:87:ac:
af:aa:61:22:ae:23:dd:66:8e:25:be:2e:1d:2b:d1:
36:b9:07:8e:91:ae:5c:90:4d:54:69:c8:e1:de:df:
9e:52:02:08:82:54:42:a9:43:9d:10:d4:04:71:21:
c8:84:83:84:c6:e0:00:d2:7e:4a:7b:55:b4:b8:54:
e3:50:a8:3f:91:f9:7e:e3:44:3e:d5:06:7c:ae:a9:
9b:24:61:ab:1c:72:51:d1:25:e4:40:18:1e:2f:ce:
90:40:f0:6e:4b:16:cb:61:0c:33:8d:81:92:21:82:
ce:cc:5a:d7:2c:8b:57:08:d6:87:60:06:2c:53:89:
30:bf:42:4b:ba:8d:d7:5d:ad:82:2c:23:96:b6:62:
7c:37:ec:f6:c5:dd:6b:91:d6:60:94:49:a3:f7:47:
bf:4c:5f:a4:a9:08:50:6f:7d:36:dd:57:f5:8d:73:
13:d8:00:02:15:50:28:6b:f1:52:07:f9:cb:e4:83:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:17:98:F3:F0:D7:B8:86:38:AC:E2:B6:F9:77:9A:59:17:59:37
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:55:4f:15:2f:69:3b:48:a0:e8:2f:e2:c8:b3:28:7e:8b:27:
6b:13:c9:f0:2c:d8:15:9d:94:2b:00:e8:6e:a1:56:31:53:bf:
50:1a:a1:1c:d4:5a:3a:ce:ee:16:a0:41:dd:39:43:c9:ae:da:
79:df:2b:e3:4e:c6:a5:d8:03:5e:37:83:d7:1f:e1:da:9f:f7:
0e:c2:f9:34:cb:9e:53:c3:5f:d0:70:f6:9e:b5:56:be:47:c6:
f7:7a:b6:a9:70:5a:9a:ce:3b:3a:a9:e2:a4:57:2b:0a:2f:36:
bf:6c:ac:6f:cd:b0:d3:86:13:bd:2e:db:71:3f:5a:20:b8:2b:
89:2e:1e:1b:55:42:eb:cb:f7:53:78:97:f4:57:ee:e5:0c:75:
0b:71:9c:9a:6c:4f:cf:a3:18:b2:cd:49:28:b8:05:e7:44:9d:
3f:9a:9c:97:f0:26:e0:61:1b:7c:a1:53:97:9e:10:fe:ac:02:
ab:60:18:69:24:09:a5:22:ac:fd:22:38:78:35:8f:f7:8a:37:
51:b3:9f:9c:c0:8a:52:2e:a8:f5:31:ab:65:5d:0b:06:9b:66:
b9:14:92:86:c9:dc:a7:01:cb:16:bd:b1:c2:ed:a6:29:c5:e1:
34:52:07:ef:2f:2b:8c:f1:ac:69:60:4c:4d:a5:68:bb:1d:50:
3c:38:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:38 2026 by rpki-client