Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: m2FX1vDCSQuGmtfV3gNH6OsecxdRe6xQrAManT6NkPI=
Subject key identifier: 5F:99:BD:38:83:6A:E8:09:80:2F:B1:B5:A0:01:27:0F:2B:F3:E8:77
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 019D2816800596288946DAB24489B2FE873D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: xRyjLJpPXsICt3gnHpfkvkHmDg1KsG29jy/fbEDjbGU=)
2: zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa (hash: AKFEqvG1w5Wb8V0Q0PMXn0i+G8aiBs1A75NxMO1M+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:80:05:96:28:89:46:da:b2:44:89:b2:fe:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=5f99bd38836ae809802fb1b5a001270f2bf3e877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:ab:0e:ab:63:b4:04:26:a6:a5:46:18:fc:
82:d6:32:8e:7d:97:cb:02:2c:8b:1d:3e:61:15:02:
42:7f:89:05:07:ab:4d:57:8f:71:06:f5:af:18:54:
08:d4:e2:7f:ca:0f:ac:6c:d3:8f:9d:cd:88:b4:48:
01:17:4f:d3:e3:f1:62:56:97:0a:6a:1b:9c:51:d1:
aa:9b:94:dc:27:6b:20:27:d6:e8:bc:c5:80:d4:35:
82:c7:da:9e:21:54:55:4f:1c:73:07:d5:ef:8e:6d:
32:b1:75:5f:33:fa:65:b4:ac:42:8c:c9:b9:fb:dd:
7a:dd:e9:52:91:f7:ba:d3:26:3f:bc:1d:47:99:bf:
6e:48:54:8d:1b:42:fb:51:70:19:2e:ec:25:e9:46:
98:cd:3c:7e:0c:c8:49:f3:f3:95:12:b6:b3:31:fa:
9b:3c:b2:c5:02:d2:24:2f:97:26:b2:d0:7b:ba:fd:
48:b2:14:20:46:66:f0:ce:fb:4b:b9:60:02:fd:bd:
e0:d9:70:15:36:f6:f9:62:9a:de:12:f5:8d:8c:08:
5e:22:22:3e:cd:03:66:e6:3c:39:7b:c3:e4:42:b2:
46:90:f6:8f:76:3e:2d:e4:3b:d8:48:83:8f:04:8d:
aa:67:88:92:35:f1:a0:75:21:dc:99:a8:92:25:3c:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:BD:38:83:6A:E8:09:80:2F:B1:B5:A0:01:27:0F:2B:F3:E8:77
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:36:43:46:62:ff:f4:8b:66:25:ef:88:50:14:76:4f:4a:
0a:f0:8b:f1:d2:39:76:ac:92:39:45:2e:af:53:96:ab:c5:b0:
b4:32:17:14:00:7a:68:81:a1:44:a3:e1:41:19:3e:4a:51:11:
7c:dd:50:ca:b2:7c:f7:ca:c7:ce:eb:84:b6:db:a1:3b:51:79:
ef:85:e5:6f:dd:89:0a:21:71:70:13:9a:28:fc:6d:aa:1a:1b:
e0:b5:79:bc:22:07:8e:61:74:09:46:a8:06:c4:cd:a6:5c:1e:
c2:9c:c4:f0:0d:59:48:7f:cb:90:9d:70:51:60:fd:51:95:2d:
ef:a0:10:cb:53:03:00:7b:c4:dd:01:13:71:d4:d6:9f:31:3d:
29:2a:ff:8c:26:05:b2:a3:9f:e4:d5:33:28:82:89:3b:74:b3:
33:b5:bd:ec:d6:5f:1d:2b:e9:3a:2c:bf:6c:ab:9f:54:65:77:
6f:18:98:8c:f6:7a:3a:a2:e9:85:20:a4:f0:17:d9:c5:f5:2f:
78:f7:47:3c:95:f8:f0:0c:7b:c7:86:46:cf:f6:28:ca:e7:c8:
ee:ca:4e:47:f2:4f:89:48:a3:c4:8a:5f:bf:a5:e2:8e:64:ac:
56:df:ad:b2:46:ea:b8:e3:ad:f2:53:52:a5:99:48:b9:23:22:
b8:27:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:07 2026 by rpki-client