Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
File: hWlFRtV2UOyEZtOS0X-jQylgFUA.mft (raw, json)
Hash identifier: FenoiWSwYK5Pz5YTxKLvPHQcO+lmxoFEvIlWvn8ycVM=
Subject key identifier: F9:DF:E5:75:61:71:2D:CF:B7:63:C7:56:DE:FF:D8:F3:A8:58:AE:40
Authority key identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
Certificate issuer: /CN=85694546d57650ec8466d392d17fa34329601540
Certificate serial: 019D28BB909E76A34166BD188B40DEA17C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
Manifest number: 0268
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: hWlFRtV2UOyEZtOS0X-jQylgFUA.crl (hash: hOu/NGqQbpURny1wO4H7XTtObPfPH6u/dK1MH2GyE1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:90:9e:76:a3:41:66:bd:18:8b:40:de:a1:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85694546d57650ec8466d392d17fa34329601540
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=f9dfe57561712dcfb763c756deffd8f3a858ae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:9c:1f:df:f9:15:52:0a:01:1a:fa:ea:bd:
e9:2d:85:13:ad:a2:1c:33:f7:2d:81:2f:db:d0:2b:
6f:10:2c:ff:e4:69:ab:d2:5f:8d:9a:f2:b9:7b:70:
30:bd:4c:1a:7c:39:41:64:78:20:d9:f2:88:8e:b1:
10:a7:7f:3d:3e:4b:d3:ad:98:55:3d:43:bc:7c:03:
07:35:4e:08:e9:74:48:38:fc:d0:2a:96:12:60:9e:
bf:9f:8f:c0:ef:b6:a9:7e:b4:58:2f:78:bc:a9:d1:
e1:0b:c8:fa:1f:6f:4f:4a:cc:a9:6c:4a:1c:02:93:
47:53:1d:2c:a4:ea:08:74:7e:ba:17:83:e4:35:54:
67:e0:e2:ed:6b:bd:78:8a:5c:9a:c7:d9:fa:cd:12:
b3:c4:b0:ad:34:e0:ef:30:11:64:5c:99:50:47:8b:
2a:7a:13:8d:40:16:39:36:9e:13:c9:db:f9:72:86:
69:b4:24:71:72:5e:35:6a:80:97:d5:56:54:bf:4e:
31:4d:33:61:ed:53:9a:66:ed:20:48:03:11:7e:84:
d3:2c:db:55:28:f3:2a:44:3c:73:3e:f9:64:bf:4b:
c3:61:39:2e:75:a5:8a:82:30:5a:ba:27:1a:90:a1:
76:cf:ef:4a:a8:81:2a:94:0a:13:64:b3:cd:11:e8:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:E5:75:61:71:2D:CF:B7:63:C7:56:DE:FF:D8:F3:A8:58:AE:40
X509v3 Authority Key Identifier:
keyid:85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:3b:e0:2d:0c:30:de:7f:eb:ca:34:b1:11:9c:b8:88:26:
bd:62:c8:03:5c:26:ae:2c:3a:36:38:c3:be:5b:e6:89:8f:0b:
af:4d:e4:45:cc:1f:aa:d9:78:39:67:c6:5e:e2:56:25:6f:77:
c8:81:5c:ac:3f:90:1e:57:bf:73:cd:f8:fc:86:11:9f:bd:a6:
f1:92:f9:1c:d4:42:60:77:98:b5:8b:49:d8:63:94:02:2b:22:
24:8c:9b:e4:b3:60:5b:0f:8b:23:60:29:e3:16:e2:c7:da:52:
bc:9e:49:4c:7a:a6:e0:e2:92:ce:3e:8d:78:d5:de:ab:e0:61:
a0:10:3d:f6:66:50:02:e8:35:80:23:6f:c7:28:e3:01:69:e5:
51:a0:c0:9d:c1:f0:83:4e:36:e4:e3:e3:74:35:92:fa:4f:b1:
d7:7e:d0:ce:0c:2a:ae:96:2c:1a:87:35:91:8b:17:09:15:01:
41:9e:d2:7c:4e:89:ac:f3:e1:20:09:79:e2:66:5e:09:7c:ce:
82:d2:7f:27:4e:5c:5c:d1:c4:8b:0c:67:60:61:0b:87:2d:4f:
b3:bb:6c:58:1c:ad:b0:58:5b:a6:a6:6c:76:ed:76:de:51:0a:
a9:75:21:91:b9:e5:79:ce:71:06:59:96:ae:db:68:12:f4:ae:
30:16:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:24 2026 by rpki-client