Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: tQ/lBElohsoJpQGGKMfXXysKtU4OJn7VtaRn4J799Jk=
Subject key identifier: 31:11:15:87:C6:D1:85:A0:5E:36:DF:F4:9E:2D:58:9C:75:B3:DD:20
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 019D28F33669220B4D3EA1419D89CFC64486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: t9lQG6Baf2zzVqc4HrjGfTVBUUvNaeghh6Y3+NwYo4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:36:69:22:0b:4d:3e:a1:41:9d:89:cf:c6:44:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=31111587c6d185a05e36dff49e2d589c75b3dd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:5a:e2:a4:07:47:5d:af:ce:92:ef:d4:31:
f7:27:a2:4f:ab:4e:4a:6d:9b:32:20:be:29:83:9f:
12:0d:04:bb:d4:78:61:20:e6:43:8a:62:92:5f:af:
ac:cd:80:b5:f4:bc:5e:c5:04:4c:5a:16:03:72:17:
7d:64:59:9e:df:18:98:10:a9:69:a3:ae:78:32:d2:
5a:ea:5d:82:59:08:44:a6:48:28:ac:7e:f0:13:7c:
05:7a:cc:65:79:de:ef:e9:55:87:7b:07:f7:d2:ec:
82:b6:da:57:a1:2a:2b:ad:9d:e7:2a:fd:90:d9:e5:
53:49:fa:d2:26:67:46:57:21:54:e8:04:6e:6d:f6:
e6:26:cf:2d:8c:d9:db:8c:8b:22:51:78:29:35:92:
05:fb:62:47:c5:de:b6:12:11:ee:00:f1:21:b9:d6:
03:33:ef:22:35:d5:4b:56:99:a6:d2:49:b7:fa:89:
cf:dd:3f:84:0e:17:ca:f7:f9:d5:85:fe:ac:4c:59:
d2:aa:c5:d8:21:f9:9f:c3:83:29:cf:26:ba:c7:12:
76:bf:0b:2f:f0:77:a7:3e:bc:a0:93:a7:e4:55:a5:
aa:bd:c7:cd:09:ff:7a:3f:a4:c1:84:3f:ce:22:2d:
b1:ef:02:8f:61:fe:e6:76:07:f1:b4:e9:84:02:64:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:15:87:C6:D1:85:A0:5E:36:DF:F4:9E:2D:58:9C:75:B3:DD:20
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:2b:0b:73:e1:2e:58:5e:4f:79:23:1a:63:dc:d7:ee:c3:
a5:d4:a4:e3:da:95:27:da:ac:45:69:eb:ea:d4:79:a7:5f:23:
bd:81:07:85:94:5b:7f:b8:f2:4f:35:03:fd:95:06:6f:d5:45:
c6:36:ac:f7:21:7d:78:54:1f:3b:45:b4:62:8a:f2:0e:9a:08:
7d:6a:34:8b:22:af:88:06:be:ac:db:2a:bf:cf:32:58:fc:e8:
4e:7a:4a:da:49:fd:af:d1:89:9a:5b:2d:eb:21:a7:08:c5:25:
4d:b6:2d:55:01:d7:7a:63:e3:dc:6e:67:03:ce:de:b4:a1:fd:
fd:75:b5:3d:30:d4:8b:44:39:d4:94:e1:19:56:5a:f2:50:6b:
5a:6c:ec:38:d9:12:2f:d0:cb:3a:59:95:59:23:78:4f:6a:7b:
e7:db:d4:62:84:ab:cc:60:90:30:5e:c3:c9:90:87:5d:5d:be:
f7:7e:38:e9:5c:85:2b:9c:48:40:34:16:08:cc:60:5e:95:2f:
0d:61:50:05:8b:d9:b7:6c:86:ac:4a:96:d8:cd:ce:60:af:3c:
1c:51:f0:d7:be:8b:c7:43:35:6f:4b:06:77:f0:eb:26:e5:4c:
43:f8:0c:78:be:42:92:6b:c6:62:35:f7:57:e6:67:c0:3f:34:
30:54:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:24 2026 by rpki-client