Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier: fEuNWOk4vp3IIi4NF0unaDme+nw2bFU2aygxp6GVmXo=
Subject key identifier: CB:71:4A:71:E4:B9:0F:58:B9:3E:27:9F:C8:F2:81:8F:2A:3A:62:76
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial: 019D33E36F20D8A0FD6D8B0481916750E133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number: 0F6C
Signing time: Sat 28 Mar 2026 10:00:36 +0000
Manifest this update: Sat 28 Mar 2026 10:00:36 +0000
Manifest next update: Sun 29 Mar 2026 10:00:36 +0000
Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: KvFoc7RJrzLja4CwYGBVH2BVJ0QNYJ2o4aSX4LSs+JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:6f:20:d8:a0:fd:6d:8b:04:81:91:67:50:e1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Validity
Not Before: Mar 28 10:00:36 2026 GMT
Not After : Mar 29 10:00:36 2026 GMT
Subject: CN=cb714a71e4b90f58b93e279fc8f2818f2a3a6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:f8:37:0e:40:76:78:6d:83:72:4d:84:4b:
ef:a9:ea:97:9f:13:31:f5:69:da:7d:03:a9:cc:4f:
f9:d1:15:06:f0:0c:34:d2:f3:0b:9c:6f:dc:c9:fc:
b3:de:f8:55:92:41:be:3a:39:5f:11:f1:60:56:72:
23:19:90:66:43:47:0d:23:f9:e1:37:90:08:69:54:
6e:1c:21:66:0d:60:31:38:d9:3d:c0:37:b4:a8:f6:
1f:6e:11:01:60:f7:c0:ee:dc:36:d7:35:8f:3e:7e:
66:90:c2:96:19:df:85:d1:4c:c8:20:f0:5a:2c:6c:
c2:3b:9a:e8:f0:b1:82:d0:31:9f:0e:b9:af:6a:2c:
5b:56:c4:b3:bf:2e:70:21:0e:92:46:61:97:01:d7:
49:e7:cd:7b:bc:5c:d4:06:1d:2b:5c:76:0f:12:10:
80:2c:50:3f:94:af:02:1e:48:8d:d8:28:4c:e6:55:
21:2d:23:02:9f:e0:da:12:ab:ab:53:8d:7e:84:1d:
ce:9d:e6:75:fb:29:cf:00:cf:34:35:45:f6:0e:42:
65:ce:c9:65:4a:46:e8:ff:fc:c1:b6:0b:ea:dd:d3:
80:d9:c5:77:72:1e:08:97:fb:42:86:5a:26:35:d6:
af:69:f0:9b:8d:af:ad:81:88:b2:89:d8:7a:ac:1b:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:4A:71:E4:B9:0F:58:B9:3E:27:9F:C8:F2:81:8F:2A:3A:62:76
X509v3 Authority Key Identifier:
keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:aa:0a:17:44:01:a3:df:f3:67:d0:05:a3:89:fa:8f:9e:f7:
f7:f0:2a:43:fa:82:a2:ee:32:97:69:0b:bf:d3:ff:2e:ff:f1:
ad:2f:67:db:3e:0a:4a:1c:4b:4c:eb:1d:9f:a7:af:99:1b:02:
02:df:0a:7c:31:a0:fc:3a:9c:83:f9:81:54:0c:eb:36:05:48:
40:ca:6c:08:b2:c2:42:f7:2b:2a:fa:02:55:17:a8:11:71:26:
ba:9f:7b:2a:58:bb:9a:2f:13:ef:3d:8d:9f:2d:09:70:73:ae:
44:c1:30:4c:d0:f0:ed:bf:40:a9:ea:b4:76:81:cf:5c:9f:05:
9e:01:d2:ca:e4:94:48:fb:b9:62:c8:7d:d8:73:63:04:62:9a:
53:23:c0:c5:e8:19:13:f0:2a:30:ba:01:4c:21:ae:b4:96:86:
37:bd:17:28:9b:e7:22:22:17:06:9e:6e:61:95:86:44:44:7d:
95:51:f4:97:ef:37:09:1b:50:53:d2:26:ee:58:cc:82:8c:de:
e7:5d:ee:11:0d:41:93:1c:11:c6:2b:e7:d7:31:19:86:98:d3:
fe:83:82:51:01:3d:19:85:58:78:a0:47:60:31:f1:70:f0:51:
6e:3d:d8:ec:6a:fd:30:4a:64:d0:0f:40:ae:a5:10:63:1e:63:
b2:02:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:05 2026 by rpki-client