Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: kU5Iwllk1ol6SA+3EMS1e+ebYnJaXJUu663iGA9m2y8=
Subject key identifier: 1B:03:D3:F8:2B:AD:63:FE:67:59:F6:E8:53:84:D4:3B:1E:72:60:A3
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019D2695DD26AD80EC0BCF13EDD9124E8CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0D4A
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: o8WAlVHRtjZmjTQOKLDEOe+70ZiwpnSL0EjkbYRNvZQ=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:dd:26:ad:80:ec:0b:cf:13:ed:d9:12:4e:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=1b03d3f82bad63fe6759f6e85384d43b1e7260a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:0d:f9:03:1f:bc:e0:81:29:72:1c:8e:b8:
56:9e:3f:5a:19:eb:7f:c1:e2:3c:5b:59:7b:dd:83:
df:8d:c3:40:88:c9:00:91:07:4b:be:f2:e1:a7:66:
20:40:80:98:de:22:4b:bd:de:a3:fc:6c:80:7f:8a:
95:f6:ec:54:af:90:b2:d4:9c:66:40:d1:65:b0:1e:
23:b0:74:6c:da:03:54:93:3c:50:22:bd:bb:fd:9b:
ed:c0:af:35:81:1d:3b:3c:3f:3c:1c:11:ae:f2:1b:
ce:3a:5f:ba:49:cd:8d:83:7e:20:7b:f8:2b:28:d2:
01:07:36:a7:22:88:aa:b6:d5:50:68:4c:0e:f7:3e:
6a:86:f3:29:a4:da:5c:f8:f1:f4:16:ce:2e:cf:28:
9f:a9:03:f9:aa:a0:ec:ab:f4:dc:91:3c:a6:31:af:
fa:96:b8:d6:1d:e7:0a:aa:07:97:54:ca:c1:ee:c8:
35:95:3d:19:87:8f:f0:1c:47:5e:9f:87:31:25:20:
89:39:b6:86:0b:01:3e:77:49:98:96:44:c3:51:cf:
d1:fe:48:f0:10:1c:4f:3f:67:09:b0:4c:73:8f:30:
67:10:71:c7:f7:94:a3:6b:32:51:c1:75:ac:e7:c3:
56:3b:4c:e6:2f:cf:ed:ca:fc:d6:44:6f:2d:af:8b:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:D3:F8:2B:AD:63:FE:67:59:F6:E8:53:84:D4:3B:1E:72:60:A3
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b5:99:85:25:70:60:ab:5b:d5:47:2f:d7:86:07:81:22:96:
60:97:bd:ee:bd:15:63:93:65:a6:b5:9c:b2:dc:ca:86:e2:c7:
e3:55:3b:4a:f2:56:e4:67:91:22:54:16:98:e2:13:d9:d7:bb:
a5:66:c2:24:fb:4e:8f:7d:51:78:c8:74:27:f3:45:49:de:38:
bb:1f:09:98:92:bc:7c:cb:bc:56:a4:f1:50:df:27:7b:b5:8b:
8a:21:f6:50:5a:9a:45:42:a7:a1:19:a6:c6:86:4e:44:9a:d8:
b1:0f:6b:d3:ff:bc:53:c0:ab:70:a1:da:4a:02:54:49:99:12:
ba:67:f2:7e:5f:ca:d3:86:1c:f1:00:96:55:a5:d0:24:6f:f5:
08:e0:e0:7c:0f:1f:f1:e0:c1:21:8c:72:b7:31:81:cc:be:8f:
e7:b2:42:f5:71:91:6b:90:09:fb:c6:79:71:1d:bd:83:25:76:
11:49:16:19:a5:92:7e:f5:ad:25:b2:22:53:94:05:b8:80:f2:
6b:4e:13:65:12:2f:79:f0:9c:0b:b8:5f:9b:37:76:58:aa:ca:
cc:5d:4a:dd:65:7f:21:8b:e6:84:77:2b:45:8a:37:42:24:9d:
0e:6e:2d:8d:1f:2e:fe:0a:39:fa:d9:5e:1b:b0:0e:f2:23:c8:
c7:92:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:47 2026 by rpki-client