Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
File: hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft (raw, json)
Hash identifier: eN8hxKwSGWoXa9eaDoZAMX22cNwE0Q5Yr0m66cK9ovc=
Subject key identifier: 6E:51:98:58:90:37:80:54:82:CC:5C:F1:60:C5:0F:19:E4:9A:54:93
Authority key identifier: 84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
Certificate issuer: /CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Certificate serial: 019D2704992D03C254D811AC7552F76BD33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
Manifest number: 0B6B
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl (hash: 0vH6O7GurmCHBwnmFAlUCw8sUZHVaRV8ZuhJPoMcqYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:99:2d:03:c2:54:d8:11:ac:75:52:f7:6b:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=6e5198589037805482cc5cf160c50f19e49a5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:48:1a:b5:f1:f0:1d:ab:07:86:41:c1:0a:
dd:8d:e1:af:2a:61:8f:a9:00:69:7f:be:42:bf:8d:
af:70:93:85:fa:cc:c8:38:dd:b5:ec:f6:6a:cb:3b:
eb:b7:9f:dc:43:98:03:00:08:7f:9d:9b:4d:a6:18:
2a:4c:2c:1e:23:2b:15:74:f3:bd:2e:7b:04:4d:aa:
88:43:e1:56:4c:21:87:a9:98:26:03:8b:f3:87:c2:
b3:d2:ec:f2:bf:c9:6b:36:49:a7:cc:d2:a4:cd:a6:
f4:ae:e2:f1:9c:50:42:11:76:25:21:59:fb:2c:b0:
8e:2c:12:59:1b:20:b2:cb:fb:0e:a0:be:09:be:46:
ae:00:47:e8:a2:2f:d3:01:06:ef:05:3b:0c:a9:ca:
7a:c6:cd:b7:be:e4:24:c3:dd:ab:c2:40:a5:a1:ea:
40:13:04:08:67:44:12:da:c4:e0:47:21:29:1f:d8:
e5:28:d7:7a:44:38:16:be:f0:b3:a6:d6:4b:17:c9:
57:a0:c2:c0:50:57:13:bd:99:59:12:15:3d:77:14:
4b:70:cc:2a:6a:36:46:67:92:fe:0f:bc:35:9a:ab:
3a:f6:bb:0e:a1:5d:6f:17:39:e0:89:cd:18:d1:ff:
5c:48:dc:05:96:d3:f9:5f:14:b4:9a:ef:7a:f3:a9:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:98:58:90:37:80:54:82:CC:5C:F1:60:C5:0F:19:E4:9A:54:93
X509v3 Authority Key Identifier:
keyid:84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:40:45:00:73:eb:5b:39:bc:83:ca:60:03:a0:68:50:3d:dd:
f4:4b:19:85:39:8a:d8:31:55:b6:d3:5d:3b:2d:d9:e2:e4:4a:
ba:ab:3d:85:37:49:cb:6e:9c:22:85:52:58:93:55:00:59:a1:
3a:3f:6b:bc:66:9f:2a:d6:bc:4a:1a:b2:06:4b:6b:ed:45:18:
67:6d:16:e2:0d:d1:d9:e3:56:0c:6f:c0:9f:9f:21:5b:21:ae:
b9:24:74:8c:52:e1:db:a4:40:65:d4:f9:12:53:c5:8b:d5:c5:
5b:65:a6:3a:14:4f:1d:bb:ab:2c:2e:0c:e1:41:b7:3d:50:34:
5d:74:ad:7e:b8:7a:b8:fb:a0:9c:16:72:c6:e4:70:3d:8f:f1:
83:a9:74:b6:fd:15:ec:0c:d0:0e:d8:d0:29:08:e3:10:e9:63:
ba:4c:bf:c7:0e:89:88:89:1e:5c:10:97:cc:10:1f:0f:11:db:
71:a1:85:0c:08:78:31:9c:84:c3:54:b8:58:04:a2:9d:11:8a:
be:4c:a5:5e:55:dd:2d:e7:e0:6f:bb:8c:dc:62:af:8a:01:d5:
b1:63:ce:29:50:13:31:b8:61:ab:cc:b9:fb:0f:4e:eb:fc:93:
79:cb:d1:24:ff:cc:f1:5b:8c:22:69:f3:59:ef:77:6a:02:58:
b2:20:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:22 2026 by rpki-client