Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: LTHrz73ihZ93IGwKlAV04fanEqL7irED4hA+XncaL2g=
Subject key identifier: 52:20:BE:48:06:CC:0F:45:87:78:55:2F:81:51:D3:44:F3:DD:44:01
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019D28167469E7DBF6F4D30D854489889B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: DaY5tGYZvMsDv7J6iEhLHHsrWbpxzAETNhW0smJaw4Y=)
2: u7HurLe1N6a5tmgpeAM_l46SL2A.roa (hash: FNqj3YMXJAvL9/wTL5cuE2GwV4N05I6EVIR6yQYxrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:74:69:e7:db:f6:f4:d3:0d:85:44:89:88:9b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=5220be4806cc0f458778552f8151d344f3dd4401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:e4:b7:10:57:e6:01:17:45:48:18:57:e2:
1c:e5:17:8e:74:90:de:eb:8a:d9:3f:ec:c2:64:28:
89:3a:25:d8:ec:f9:15:40:ce:d1:1a:3d:3f:5a:3a:
54:32:c7:ed:82:02:2f:14:0e:92:f4:2b:81:7d:08:
a4:32:0d:ed:5f:d6:38:9a:b4:e8:ff:25:e4:c0:41:
19:44:11:b8:a0:19:38:51:80:56:93:80:2d:54:35:
32:4c:14:ca:94:80:84:e7:0d:df:a0:c0:c8:5d:b2:
7a:0d:4c:53:b5:d6:f5:8b:ee:6e:61:3f:d8:4b:06:
d5:7c:81:f4:8c:79:c6:b0:e0:4a:9e:a8:57:ef:e5:
13:22:fe:4d:62:2b:f2:91:06:89:08:73:fa:37:36:
d5:e8:e3:54:4c:99:88:88:a2:14:f0:66:53:b3:ae:
2a:0c:42:a3:4b:cd:17:57:04:f1:8c:16:54:f3:2e:
af:b6:e1:e8:63:1f:9f:d0:03:d9:fc:79:9d:4c:7b:
69:d7:02:92:26:e7:e6:6e:dc:b5:ff:b1:c1:0e:7b:
d2:19:51:5f:2e:09:f4:cc:d9:1c:ed:48:7b:83:8f:
a2:4b:89:a0:25:f1:19:c9:ef:80:dd:bf:5f:5a:6c:
4b:ce:4b:23:8f:4d:a5:1c:44:d4:9f:ed:3c:74:da:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:BE:48:06:CC:0F:45:87:78:55:2F:81:51:D3:44:F3:DD:44:01
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:4b:2e:9b:52:1a:65:37:b0:ba:0f:0b:b6:0c:0a:eb:03:
d9:61:13:e6:de:04:7c:8b:ae:22:52:6e:53:c6:be:a3:dd:7c:
86:24:c7:a8:57:2c:4a:cc:92:ea:ee:58:7a:ef:e5:f4:26:87:
5a:0e:92:84:0c:f6:29:59:71:ad:86:38:75:68:1c:7f:4b:ed:
fa:e7:d8:99:6b:5a:96:ca:5d:63:9f:1b:71:b3:4f:d7:a0:5c:
e7:09:f3:1d:a3:a2:e3:30:8e:1c:e0:03:78:55:59:bc:02:fe:
29:44:5f:fc:c8:90:46:26:6c:b7:b4:3e:5c:0a:5d:80:3c:27:
1d:7d:46:db:a1:4f:36:32:21:80:37:19:1b:67:7c:03:ad:6a:
ae:5e:83:ef:aa:b0:cc:e0:aa:e4:ab:6d:a5:31:b0:40:52:bf:
14:11:8e:d4:34:59:4d:c7:d6:ce:1f:d0:03:68:95:f2:a0:6f:
3c:ef:35:fa:f5:a4:9b:13:0a:50:46:b8:ed:11:d3:61:9f:ef:
b9:42:f1:4a:f5:2f:23:90:5a:92:57:af:cd:9a:5d:72:3f:4d:
ae:eb:0f:69:36:00:e5:7c:e2:61:6f:d1:1b:f9:d7:1c:22:de:
aa:a2:3e:08:b1:08:e3:70:b9:d5:2d:3f:00:08:dd:b0:19:72:
c5:5d:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:03 2026 by rpki-client