Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: kwJ+lETBsTYqYukgpDzgjoV1rPlArVtf2Suc56EERio=
Subject key identifier: 10:C2:31:8F:F0:65:06:C0:09:4E:7A:15:DB:E3:EA:C8:6F:70:83:81
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019D27DFF660FD0A6596EE0C8E063074AFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 02FE
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=)
2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: CJIrp34rSg092XMGvYGYciM3qwvVcED8sOKJfZOVZRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f6:60:fd:0a:65:96:ee:0c:8e:06:30:74:af:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=10c2318ff06506c0094e7a15dbe3eac86f708381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:b0:98:d6:9f:84:7f:12:a0:4c:67:d2:a3:
92:71:e8:96:7d:43:c5:40:81:c3:20:82:ef:b8:d4:
6f:b2:65:74:b0:a7:31:02:c8:f1:ab:92:eb:a8:74:
bb:ef:5c:b3:88:41:2d:83:43:93:39:b9:21:bd:bd:
af:7e:23:d5:75:26:8d:d1:15:e6:2f:a7:d9:6c:1f:
e7:c3:03:5d:ae:49:8b:29:7b:28:d7:00:bd:08:71:
71:08:7d:ba:f5:80:67:38:7a:79:d8:c2:ea:22:45:
6b:92:15:0b:c9:74:95:05:a8:c5:eb:87:d5:e1:50:
6e:3b:fb:4d:1c:17:dd:71:11:65:7d:5e:98:5c:35:
26:18:56:dc:8f:79:ea:5f:c6:eb:b1:d0:59:d0:14:
b4:14:14:ae:44:4d:94:78:34:b0:79:bc:fb:2b:f6:
08:a9:f6:a8:44:aa:47:c4:84:64:02:5c:99:66:45:
69:ac:09:dd:26:20:8c:cc:1c:15:56:18:15:cd:24:
d5:49:84:0d:a4:e0:11:75:2b:ce:92:e8:55:ec:e5:
c1:27:83:d8:db:06:de:52:55:8c:fb:33:f8:7b:3b:
a4:5f:82:54:8f:f3:b5:c2:24:3b:5d:44:a3:50:69:
9c:c2:ef:b3:a0:62:93:de:d3:eb:42:9d:2c:e7:ee:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C2:31:8F:F0:65:06:C0:09:4E:7A:15:DB:E3:EA:C8:6F:70:83:81
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:16:f3:03:36:07:c6:fb:9b:a5:0c:fd:51:5a:f0:1d:49:b8:
1a:44:6c:36:bf:78:d5:46:c4:27:3b:53:ec:46:1b:db:c7:d2:
e8:42:ad:fe:a9:87:6a:37:d7:47:5e:d6:e8:7b:33:ae:20:7c:
19:18:e2:81:05:43:35:e3:02:7d:2a:01:4f:ab:1d:77:ab:f8:
29:c2:8a:03:20:2d:48:7c:77:49:56:d8:92:f8:7a:3d:15:28:
32:07:8f:ec:2d:65:20:4a:02:b6:02:a7:5d:62:2a:65:d3:83:
37:0c:19:d4:b5:78:5c:f0:ca:36:a3:6a:7c:59:21:9e:f4:5e:
52:0b:d1:b4:e5:b7:f9:59:9d:af:35:c7:dd:76:64:24:e8:b8:
ef:f9:2e:45:e8:60:32:22:cc:eb:19:b8:03:39:bf:77:f0:c9:
60:54:6d:2a:bd:b2:27:21:0e:32:3c:64:c0:e6:46:f2:45:ac:
ce:f5:a1:56:e1:d5:e2:8e:9f:b2:ff:ab:dc:16:97:b1:b9:ca:
fa:56:14:02:62:61:05:f8:f8:cc:a0:f4:d7:37:88:c3:b0:50:
f5:f1:58:25:c8:10:45:94:b6:50:ed:8c:88:3c:4a:a8:c9:c8:
c0:60:27:b8:26:97:70:b9:01:c0:36:d2:22:88:69:66:16:9c:
9e:ab:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:11 2026 by rpki-client