Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: jddnCSYrXhxGRiOlk3eKT7isCEhzUVKjTTiHt1P8IZo=
Subject key identifier: FE:77:33:20:49:C6:2C:D7:41:91:B2:80:A9:9A:CD:E5:95:03:E7:63
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019D2C61260B900779032ED061B28D4A17BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 1576
Signing time: Thu 26 Mar 2026 23:00:57 +0000
Manifest this update: Thu 26 Mar 2026 23:00:57 +0000
Manifest next update: Fri 27 Mar 2026 23:00:57 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: rPmcdl+vaJcr23Jr88LZQKmxU0iCV3EzMUnaVNgqIII=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:26:0b:90:07:79:03:2e:d0:61:b2:8d:4a:17:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Mar 26 23:00:57 2026 GMT
Not After : Mar 27 23:00:57 2026 GMT
Subject: CN=fe77332049c62cd74191b280a99acde59503e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:47:1f:23:0c:df:5a:a6:71:52:32:02:1a:
49:f1:c9:cc:a0:8e:91:28:69:54:1e:2d:df:be:81:
d5:df:ce:55:29:1c:66:db:d6:86:09:b6:4a:a3:a4:
c3:68:55:6f:69:38:c3:2b:46:30:a8:a6:bb:a0:38:
b6:b8:1c:1e:8d:68:b0:c2:dd:43:57:68:a2:6f:45:
b5:f3:fc:d1:34:f0:2a:67:93:ec:9a:8c:b3:0f:02:
c2:5a:8f:3d:af:53:73:c9:0d:cf:ae:5c:f6:1d:ad:
19:05:12:22:92:e2:f6:2b:cc:9a:6f:a5:05:4b:3d:
ed:5f:77:f7:1b:b7:0a:68:29:6f:82:08:a4:da:58:
60:f6:6e:7c:1f:d6:c7:62:42:05:79:4c:b9:5c:d4:
e0:d1:6f:18:c6:ca:d6:ab:01:7a:7a:7c:59:9f:bc:
08:c2:d1:e1:2f:c4:23:18:6a:3b:a0:af:18:b1:04:
31:a3:96:69:e9:1a:b6:47:8a:02:d2:11:1d:3b:b4:
82:7b:30:27:0d:1e:aa:54:13:2c:aa:51:6e:1d:33:
35:46:f1:f8:39:a3:1b:95:67:6c:1b:8f:de:02:a3:
8e:a1:93:0f:4c:50:28:24:35:08:9a:d7:4f:ce:9c:
5b:3b:ed:0f:89:ab:22:d0:d0:4d:62:60:64:ec:97:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:33:20:49:C6:2C:D7:41:91:B2:80:A9:9A:CD:E5:95:03:E7:63
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:a8:23:39:14:b3:b1:1f:69:38:b0:22:69:59:6d:9d:95:
ec:4c:28:1e:ee:f9:8d:a4:d7:aa:d7:63:a7:4b:37:92:58:20:
c9:f7:d8:a9:48:46:f4:ee:21:4e:c2:11:ec:ca:04:f3:d3:b9:
83:0b:c7:ed:41:73:9a:71:8f:bf:e6:65:15:d8:88:9e:91:1e:
78:35:da:2b:2e:6b:57:08:45:a9:9d:75:01:af:55:59:ee:49:
f8:6e:cf:60:91:0e:be:e9:04:28:36:63:40:44:9e:93:19:f9:
d1:66:d8:4e:d2:d2:bf:1f:20:0c:e0:3d:c3:78:48:f1:f6:06:
ff:7d:ec:7e:ab:ce:1e:a3:dc:e0:74:17:d0:43:9f:0a:c2:1a:
74:3e:71:4b:f3:6c:bf:71:8d:94:23:f6:4a:71:09:53:e8:66:
db:42:1a:a5:74:f3:a2:b3:60:34:14:f5:2a:71:9a:c1:33:c6:
17:a8:2c:56:19:7b:86:83:d6:27:5e:38:02:e9:f2:61:42:9d:
3f:31:31:66:cc:c8:bb:f8:56:7f:27:b7:0e:1b:87:a0:87:f6:
3a:b4:e8:2f:b3:8c:30:5f:a9:a6:62:db:d9:0f:ba:30:e0:36:
bc:eb:7e:4f:5d:4e:cb:5c:6d:1c:e8:47:0c:5e:91:f8:ab:57:
b4:1c:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:41:55 2026 by rpki-client