Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: b4rpE+mA3pFSuXxDIX/LAra76faE0OGQ8VGuLM3mEVQ=
Subject key identifier: 7E:A7:53:32:AA:B5:8D:78:91:88:B2:94:48:36:0F:DE:3E:99:EA:0D
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 019D26CD7101F3FABB3EB19282F1FABCD747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 21:01:31 +0000
Manifest this update: Wed 25 Mar 2026 21:01:31 +0000
Manifest next update: Thu 26 Mar 2026 21:01:31 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: aN5TntviI1JU/khv+1+CXWQHp4lCgqgB9sTCJulyjCg=)
2: w0HfD9OyluQqly0Onm0X_I_L5yk.roa (hash: Z0gnGoagQr+uA1M5JDoWrnZSUOuqJJgP2N6rVdd6JcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:71:01:f3:fa:bb:3e:b1:92:82:f1:fa:bc:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Mar 25 21:01:31 2026 GMT
Not After : Mar 26 21:01:31 2026 GMT
Subject: CN=7ea75332aab58d789188b29448360fde3e99ea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:bb:65:f1:b6:e3:26:a9:6d:ca:f5:5c:4a:
24:6f:cb:f3:46:9e:78:7e:04:16:6b:53:91:b6:8c:
1d:f0:0d:0b:43:33:41:cb:f2:df:7e:90:31:4f:ed:
ce:10:db:85:40:2a:a5:0b:0a:2a:cb:c6:a9:79:82:
a3:36:62:81:8e:a1:db:f8:1c:6a:06:db:66:2f:4d:
4f:e8:4c:5b:62:df:8e:da:bb:27:2e:cc:ad:fb:dc:
b9:04:fa:ac:79:6a:19:6e:f7:e4:e3:fb:49:29:81:
ec:6c:31:f6:33:9f:2d:5d:d4:53:5a:5b:73:b4:67:
f9:bc:10:b0:80:8f:32:1f:c9:d2:00:8e:e0:e3:41:
c1:8f:52:d7:1d:ef:c0:a8:79:2d:b9:90:d0:ea:f2:
55:80:75:35:62:c1:8b:2b:bd:83:c5:f4:3b:ee:bb:
05:1e:7d:df:4e:ae:a6:28:90:76:c6:9e:14:af:07:
d6:10:35:2f:5d:b6:b1:48:4a:6e:84:03:3d:a1:1b:
67:56:71:59:35:50:d7:aa:bf:ae:e4:06:0e:4c:5d:
a9:b9:5f:40:28:af:dc:71:2e:da:c8:56:cc:d3:f0:
61:71:d0:fa:a3:12:ff:26:98:6f:06:b2:18:71:32:
56:e1:1f:00:c3:a0:a5:3f:a6:e6:d8:5c:3d:e6:bc:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:53:32:AA:B5:8D:78:91:88:B2:94:48:36:0F:DE:3E:99:EA:0D
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f8:64:f4:aa:73:d1:2f:33:1b:4f:46:f7:f5:b3:32:3a:4a:
38:d7:18:06:0b:27:b5:34:4a:e0:20:6e:9c:4f:60:de:78:2a:
1c:c2:c4:09:54:b5:27:9c:7c:e9:13:73:ea:e7:7d:64:37:25:
48:b3:94:ac:7c:60:78:f1:29:14:6f:7e:cf:f2:04:90:9e:cf:
b4:96:a7:e7:dd:d2:08:36:73:ec:7e:1d:de:a0:df:e6:42:dd:
fd:75:0b:d2:5d:ca:a5:1e:bf:48:f2:9e:09:3f:49:55:05:48:
05:6b:f7:bc:94:87:3a:a1:c2:a8:07:ba:f1:14:9e:7b:73:24:
f3:80:a8:ae:b2:ea:de:bc:55:bc:99:af:d2:81:cf:84:d6:54:
7a:73:9b:50:2c:35:37:cc:33:de:0a:36:ef:76:ae:13:0c:6e:
a1:c4:f8:21:a7:0c:8a:a5:0e:5b:df:2b:72:db:d2:c6:d3:7d:
9d:ec:c7:2a:52:ce:88:56:36:05:6c:4a:58:35:a3:ff:87:62:
59:46:9e:14:64:87:5d:38:76:19:95:50:ce:4a:01:76:7c:e4:
58:b0:14:b4:ce:83:6e:4d:84:71:10:28:76:8b:54:43:6e:a9:
27:e4:1f:d9:90:57:73:df:d0:2a:80:47:c7:0b:83:73:f0:2b:
95:08:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:37 2026 by rpki-client