Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
File: HnTfStSP8hGgY1s38DeXeBnNQnY.mft (raw, json)
Hash identifier: arnnEf75RVoNv+MD+gcf1gDhGt83Ke8LKmweCoH8P5A=
Subject key identifier: B7:69:29:77:EF:9B:04:BA:0C:62:DF:A3:CD:01:50:60:D4:75:68:0B
Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276
Certificate serial: 019D33E38FC9ED3C36AFFC13DDE47BA1442B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
Manifest number: 01C8
Signing time: Sat 28 Mar 2026 10:00:44 +0000
Manifest this update: Sat 28 Mar 2026 10:00:44 +0000
Manifest next update: Sun 29 Mar 2026 10:00:44 +0000
Files and hashes: 1: 7RWPmp9-_7pNcdzf-XR0ng2OtNA.roa (hash: fZ0u4xWD6WZkxbVhHY3qx/w5uvwymHMnMMF0SIttq9Y=)
2: HnTfStSP8hGgY1s38DeXeBnNQnY.crl (hash: 5uG2B5uybgcYRsc1bgZvQH7oLOaR+difG1lKyVE0pkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:8f:c9:ed:3c:36:af:fc:13:dd:e4:7b:a1:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276
Validity
Not Before: Mar 28 10:00:44 2026 GMT
Not After : Mar 29 10:00:44 2026 GMT
Subject: CN=b7692977ef9b04ba0c62dfa3cd015060d475680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:65:d1:a1:f9:b3:34:12:62:6a:65:bf:86:
68:45:b0:20:51:e3:a6:ed:54:e9:5d:f1:ea:f9:fe:
2b:72:5a:8b:d2:1b:a3:94:74:e9:47:42:8d:dd:26:
18:a3:94:e9:66:cf:44:4a:7e:d5:f2:48:17:1f:a4:
f5:0d:b1:0f:47:4b:13:6c:50:5a:60:8c:37:f9:0b:
ed:b6:92:3c:a6:4e:d5:5f:c2:01:b0:81:89:13:42:
33:5f:7f:82:a4:63:80:54:c3:f8:92:52:3b:64:66:
a0:5f:31:fa:fa:e2:81:39:33:6e:23:3c:94:e5:45:
bb:e3:c6:44:70:52:7d:f6:bc:98:3e:74:86:cc:ce:
19:ec:9b:24:bf:14:91:46:bc:63:84:de:49:c8:38:
35:93:94:e4:ce:61:e5:68:dd:35:3f:e8:12:02:ea:
7d:3b:c7:03:8b:34:ee:c3:87:c2:c9:39:0c:77:5e:
f2:61:12:88:fa:d7:72:33:11:4c:1b:3f:5a:29:f5:
7c:1e:3d:cf:9d:e9:52:28:d5:ef:72:90:e1:e8:24:
37:b9:59:b5:18:3e:6c:ec:1d:52:dc:80:e7:6e:1e:
d7:64:89:8c:36:9f:fb:94:29:39:b8:dd:99:48:96:
de:38:be:72:6f:63:a2:c3:dd:d8:76:86:73:ae:b8:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:29:77:EF:9B:04:BA:0C:62:DF:A3:CD:01:50:60:D4:75:68:0B
X509v3 Authority Key Identifier:
keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:61:3f:b5:04:ca:43:6c:bc:f5:ae:ca:74:0f:28:e1:4b:
53:d6:88:c2:91:16:14:76:7f:d8:11:05:6f:3d:df:41:18:0e:
50:40:65:46:e2:d2:cb:f9:00:9c:88:71:53:89:26:f7:e1:62:
ff:f7:85:d4:d6:36:5c:1c:f7:43:28:d6:58:18:23:65:12:3a:
f3:b2:17:e7:63:97:66:e3:04:0a:a6:90:06:0c:b7:52:ac:bc:
ea:ad:ee:a8:41:08:6a:5d:e9:9e:b7:4a:d9:a4:d5:6d:fb:a3:
b5:2f:8f:bb:8d:b1:70:51:ba:71:e3:b2:2d:1b:c8:8f:a8:25:
c0:81:6e:b6:ab:bf:41:66:35:3e:3f:37:0a:fa:c5:d5:15:ba:
f7:32:22:0c:1f:12:ed:02:6f:62:b7:7e:61:17:9b:3c:6a:8b:
c0:3f:ce:97:18:90:d5:02:c2:88:49:f7:81:a8:53:90:11:ac:
b8:c3:26:7f:e5:9a:6d:43:ea:af:39:ba:06:08:14:cc:1b:8a:
31:71:54:88:21:a0:44:f5:a7:70:33:6e:65:23:a0:65:b1:e3:
f0:ae:f1:f7:5f:ef:30:08:02:8d:95:06:c7:33:e6:99:6c:92:
fc:9f:57:67:d7:15:36:c1:48:54:49:d5:94:04:e4:18:1b:37:
3b:bb:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:36 2026 by rpki-client