Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: COCHfZFHFcLqzDss78HXf1FO3aHinc6tfXj4doS1+AE=
Subject key identifier: 3B:CC:84:43:21:21:BF:90:B9:75:C2:BD:E7:77:2F:82:9F:58:5B:C5
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 019D27A8DA8D71C482503F5A51A373F171A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: sHkSsSNeel38B8FZ8A3y65++4okfsZv2WCrXxEkjjWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:da:8d:71:c4:82:50:3f:5a:51:a3:73:f1:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=3bcc84432121bf90b975c2bde7772f829f585bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:33:a1:51:6c:e2:04:7d:8b:5b:ab:23:20:
5c:2a:4c:d5:65:84:6c:db:e1:5d:ac:4d:43:90:4b:
46:8c:aa:c0:e7:73:9f:2e:e0:a7:01:6e:89:fa:96:
58:15:92:62:5e:31:58:56:e4:d1:ff:e5:a4:39:d5:
c5:9c:a0:6e:e0:03:01:df:bb:9a:71:b4:be:0a:07:
41:22:de:34:61:1f:bd:2c:98:15:62:93:b9:42:b2:
d4:be:13:e7:ae:4f:e0:7d:ad:3c:7c:40:d9:24:97:
85:37:ea:1a:66:a5:c0:d5:ff:21:e9:5d:d8:8a:3d:
03:8d:57:34:d8:1e:c9:47:d0:c7:1f:78:cd:77:d8:
51:e7:8b:6a:d2:52:be:3d:b5:ba:02:96:03:ce:67:
f6:45:69:e7:0b:f0:57:d1:84:81:99:2f:20:32:97:
6d:70:81:b9:e0:a6:b1:0b:00:05:b0:b8:d1:5e:34:
01:d7:4e:72:f3:86:b3:10:bf:3c:09:d5:54:07:88:
8e:dd:16:4c:c6:ef:3d:6b:cf:2c:1b:aa:b9:6f:41:
d4:8e:83:a9:20:7e:64:db:db:e6:17:f0:f9:eb:30:
6c:91:b8:35:ae:23:1d:2d:fd:74:2d:4b:f6:22:32:
e1:f0:e0:c1:b9:c9:f1:8c:e9:9a:08:c9:39:d6:a0:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:84:43:21:21:BF:90:B9:75:C2:BD:E7:77:2F:82:9F:58:5B:C5
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6b:5e:53:c5:66:b2:7a:2e:38:66:2c:37:fc:54:cc:ce:b6:
6a:be:f6:8d:c9:5a:ce:d1:b9:9c:7d:68:21:22:76:67:bd:5c:
e6:8e:6d:9e:b6:d0:8c:5c:4f:ae:c7:5c:7e:a5:15:54:f8:90:
6b:d7:d4:c1:54:91:40:c4:e8:51:fb:12:40:b3:b8:30:41:83:
51:c5:a9:a0:99:16:9a:31:f7:19:bf:05:26:3f:c4:cd:71:ca:
54:19:d8:4f:e1:28:a5:ce:d3:95:9f:c5:f1:57:37:e8:57:24:
5a:4e:97:e8:a3:3f:52:a5:1b:e5:4f:84:cb:3f:92:56:84:ad:
da:75:32:e0:af:38:db:d7:ff:e7:33:c3:db:ef:7a:f0:c0:34:
a4:b7:08:c8:46:db:27:81:c0:dc:ce:bb:f5:7c:0b:29:41:17:
fc:0c:1e:88:4b:01:ce:8b:ba:9d:c1:01:41:da:ab:c6:04:19:
fe:1f:5e:a5:09:04:04:2c:3c:d1:aa:08:29:50:b8:69:60:8b:
43:40:dd:0c:0c:0b:3b:ef:6d:b6:02:d4:de:83:31:73:88:19:
57:42:8f:dc:b5:95:9d:fe:bc:d6:7d:12:43:7d:8b:4e:99:b4:
9e:80:63:76:5f:97:ca:82:28:38:d7:1a:35:6a:d2:a6:df:2f:
64:f8:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:43 2026 by rpki-client