Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: aMuVMjkFP3k9eaLtAZ566dblN1G2Y0BjXo7LjXzbXP4=
Subject key identifier: 24:36:31:42:61:8B:5C:6E:61:7F:A1:DF:77:36:D4:7D:4D:21:29:91
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 019D2B4EEB4465AB07D7CAD76E8F589638A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 18:01:25 +0000
Manifest this update: Thu 26 Mar 2026 18:01:25 +0000
Manifest next update: Fri 27 Mar 2026 18:01:25 +0000
Files and hashes: 1: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: c5364qETslMIo4EKs7dyJNcuQm88wZOEgweVR4UwAa0=)
2: jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa (hash: W/pO2gP/Hnrcu+Gr8iHWv61QQmdy+1W+lWNUobK5q7E=)
3: wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa (hash: 2XlLOO+ABU/ZZshWxT2yxE7ljUn/cRbzQybAhDOI4UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:eb:44:65:ab:07:d7:ca:d7:6e:8f:58:96:38:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Mar 26 18:01:25 2026 GMT
Not After : Mar 27 18:01:25 2026 GMT
Subject: CN=24363142618b5c6e617fa1df7736d47d4d212991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:22:f3:fb:81:37:1a:54:cb:28:39:41:5a:
f5:65:21:d1:ce:7b:49:c3:7b:0e:39:0f:87:49:41:
50:38:6e:f4:cd:d1:eb:08:38:c3:c4:02:af:45:a3:
a5:55:65:e6:8f:5b:c4:b1:62:01:8a:5c:06:34:dc:
93:3e:3b:8a:43:09:98:da:a6:1b:9f:61:25:0a:63:
1d:67:13:c7:e6:fd:e0:09:a3:b7:81:0d:cc:ff:5c:
ff:e8:c3:ec:45:5b:04:7b:e8:41:8f:ee:69:8f:4b:
1a:15:63:34:a6:98:aa:07:55:3e:1c:3f:75:11:3e:
94:57:a3:cc:de:de:5f:e0:85:9e:22:9e:db:8c:f1:
d6:8b:32:9d:ff:cc:d0:fb:2a:6f:17:14:49:b2:21:
3e:bf:82:62:ce:3a:18:a4:ad:bb:48:66:d8:04:03:
7c:98:05:61:a8:f0:59:15:86:9e:b6:d5:35:5f:e4:
ea:45:e2:5a:12:09:c6:a4:5d:7a:8b:28:85:45:e1:
19:50:db:88:77:15:f5:6a:a9:9d:66:75:cc:b8:5d:
54:d9:93:a7:d6:6e:10:d6:8f:0f:d0:05:bd:ac:e2:
a8:fd:78:1e:ab:08:52:82:6a:a5:34:34:5a:92:04:
81:b4:0d:03:68:58:c4:4f:2c:0a:e0:a7:8d:aa:4f:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:31:42:61:8B:5C:6E:61:7F:A1:DF:77:36:D4:7D:4D:21:29:91
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:34:20:e0:87:33:b3:09:4a:31:78:7f:e7:b8:e9:2f:95:71:
28:e4:6a:ce:25:1e:21:9c:13:30:c9:a2:35:f2:e0:cf:b8:c0:
2e:61:a5:ce:cf:5f:f6:a5:fe:8e:83:6b:c9:ba:9f:5a:bf:4a:
19:38:1a:cc:14:16:11:72:c9:7e:12:aa:f5:ea:e7:d3:66:33:
06:d4:8b:f4:e9:cf:d5:bc:a5:a3:a4:e4:f6:0f:f3:b6:5e:ff:
19:e2:83:68:d7:a8:6c:fb:53:e5:eb:bf:af:1c:97:97:11:b1:
5e:e6:45:05:2c:eb:7e:6e:7d:70:21:b6:b3:f6:9b:87:36:58:
ab:ee:7e:3c:97:dc:ff:d3:ab:3c:4e:b5:91:38:6d:c1:67:d6:
05:52:f5:f2:21:0f:0f:13:9e:0b:51:3e:9b:4d:d2:b6:94:05:
de:ea:0d:dc:83:ca:a7:22:37:31:14:16:51:6e:bd:4a:4d:8b:
12:fa:29:06:78:0b:f5:e1:1a:cd:9f:63:12:4e:ad:8e:22:fe:
7a:3b:7e:77:d9:27:84:e8:ad:87:70:bd:e8:1c:e2:2c:2f:4d:
f1:a1:d4:45:e0:cf:05:a2:eb:b5:ee:c1:17:2c:39:88:0f:40:
f7:04:1b:8b:f9:e4:45:ff:c9:bd:70:e0:e7:17:50:8a:3c:ac:
62:13:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:17:54 2026 by rpki-client