Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: r594+2atTOFOwclAfQ1qbWHgZ9p3eI+8bGQXhRAF40Q=
Subject key identifier: 0A:62:E7:1B:BC:8C:73:8E:BD:C2:AC:80:5D:38:E0:3F:C3:E5:EE:A4
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019D27A89118164AB213A4F5D2C40A4FDE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: a3MKNUGy9z7XXvhdyxIeOHZ9SBJBHf2dnwYkGuHJdhY=)
2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:91:18:16:4a:b2:13:a4:f5:d2:c4:0a:4f:de:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=0a62e71bbc8c738ebdc2ac805d38e03fc3e5eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:e5:a4:2c:3e:28:81:4b:04:35:53:46:8d:
58:b7:99:d6:ef:16:93:fd:27:ff:d2:62:30:7b:f6:
12:da:20:4d:c5:4f:7f:59:9b:05:f9:61:ed:e2:cf:
bf:ba:73:08:58:b7:a6:3c:dd:74:3f:17:a6:46:f4:
3c:fb:6f:61:44:0b:7f:6a:12:54:89:25:68:34:f2:
79:a7:f0:e4:59:0f:92:c5:ef:a1:ef:c9:78:82:da:
28:d7:c0:97:89:2e:eb:db:d3:42:d4:18:23:2d:a2:
ff:d4:56:ef:ce:12:33:28:08:19:c0:8f:24:4e:4b:
e9:e2:14:e9:0e:50:c0:b7:0e:2e:d4:cd:76:40:18:
be:0a:c3:6b:04:52:79:a6:7e:65:0d:cf:ff:e6:c2:
2d:16:c9:65:df:17:51:41:6c:91:93:e0:58:3b:2f:
03:db:50:51:82:7f:7b:17:fe:ab:ec:d7:ad:25:fc:
55:55:04:1d:df:ca:01:b5:ad:2d:c0:49:05:ca:24:
7f:ed:8c:5b:37:61:69:71:7c:23:43:3f:9c:b8:13:
dc:8c:8c:dd:da:27:3d:75:45:ab:e2:03:2a:68:ab:
92:d6:ad:50:fa:86:15:cc:ca:9d:44:f5:77:b6:ad:
99:a8:c1:62:8e:16:78:3f:04:24:99:03:f8:4a:53:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:E7:1B:BC:8C:73:8E:BD:C2:AC:80:5D:38:E0:3F:C3:E5:EE:A4
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:6e:47:8a:10:81:a5:b9:2b:d7:ff:9a:cc:5f:18:91:82:
d0:f2:e2:4c:53:86:fb:57:4c:3a:db:ce:54:00:13:c4:63:1b:
93:97:7b:96:d7:92:cb:30:96:8c:0f:a2:29:c1:fb:c8:2e:b7:
e1:25:19:aa:60:c7:46:7d:73:ad:3b:e2:bc:95:38:32:0f:dc:
35:6c:33:fa:8a:9f:e0:6e:0e:ec:d7:e5:c9:1e:ea:5d:ea:1e:
dd:06:84:be:2b:e7:51:75:39:24:89:83:a7:3b:db:d2:76:cd:
a0:cb:2a:8f:66:f5:dd:40:4d:58:f0:16:c2:04:e5:4a:52:b9:
31:f7:b7:d4:e9:24:bc:13:be:37:7e:d6:f5:ea:2f:82:67:86:
ff:a7:9b:46:5e:b2:a3:74:63:e9:26:7b:9a:6a:2a:6a:75:74:
9d:8d:5c:3f:a5:fc:f8:2a:74:d1:a3:9f:65:a3:24:0d:ec:2c:
5f:cd:62:bc:ac:c1:44:84:a7:46:15:13:2d:9c:0b:4e:80:1f:
f0:a5:46:8c:00:58:a0:55:ac:a5:9f:0b:4e:50:a7:ec:0f:c9:
3f:36:f3:7f:64:ce:40:9c:4f:8c:fa:75:00:86:70:ac:81:e9:
4e:29:01:90:5e:f6:ed:2c:8a:98:4c:80:b3:2b:0f:58:8e:79:
f6:76:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:02 2026 by rpki-client