Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: bZnhgMzlhB5GJyTfGVuy6IoG1mL0kE6VQuuHuGcyVx8=
Subject key identifier: A1:04:31:4C:D6:FD:B6:9B:78:9F:74:88:D9:4E:35:27:BD:79:52:AA
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 019D265F78181A1539A937728EB11EF20263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: 03B7
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: 82kpcM7w3rtXu7m0gnTA24KkVHEKDINhTmqo3v5W8BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:78:18:1a:15:39:a9:37:72:8e:b1:1e:f2:02:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=a104314cd6fdb69b789f7488d94e3527bd7952aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:d6:7e:56:61:0e:1a:1c:dd:09:51:26:60:
76:02:ad:5e:d6:1b:39:61:b9:26:1a:5a:14:13:eb:
36:a5:7b:d7:b7:8e:d0:c7:05:c6:28:c6:b4:56:2f:
4c:52:05:4d:90:7a:d8:b6:62:9d:0e:46:3e:1a:18:
40:8a:3d:37:63:9c:23:66:cf:87:a7:8f:e4:c3:32:
7b:9a:d3:5b:c3:17:8e:c4:ee:07:20:aa:13:5c:de:
d6:5a:e1:d3:a0:29:6c:29:88:0d:53:03:53:e2:92:
b5:92:4b:3b:64:e7:43:0d:b6:ac:2c:83:90:b8:c8:
df:c7:41:10:b9:d8:b4:a3:42:4f:35:d9:37:84:7f:
2b:dc:b0:2a:24:61:9f:af:5e:42:85:20:05:d3:00:
90:72:3d:a2:b9:18:4d:be:a0:1e:fd:28:6f:b7:99:
68:b5:3e:7c:78:38:54:ee:ca:55:bd:e4:7d:f7:9c:
75:72:4a:ed:fa:38:20:c7:45:77:01:c6:7a:76:a6:
ec:39:78:94:18:92:65:a8:de:e5:f9:e9:2a:52:01:
11:f0:9c:a2:7e:79:28:33:89:83:c8:39:b4:34:94:
f8:94:5f:70:1a:cb:32:7f:a8:63:29:d8:3a:ad:a6:
fd:d7:30:c8:bc:a4:39:6e:a0:67:3b:2d:af:5d:6d:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:31:4C:D6:FD:B6:9B:78:9F:74:88:D9:4E:35:27:BD:79:52:AA
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:65:31:5c:44:28:18:03:94:81:a4:b2:a4:2d:ad:94:2d:
61:b9:18:46:24:df:d8:47:1c:fc:ee:6d:a8:e9:80:a5:78:26:
a3:ce:d5:40:47:29:c0:10:ed:48:47:65:46:c4:6f:a3:d1:22:
97:8a:45:ab:bf:13:52:4c:ed:f9:e3:97:0b:56:35:3a:a0:02:
18:96:c1:b7:2c:47:3b:25:b0:9c:38:3c:ab:ee:97:4a:3a:c2:
8c:64:83:3f:8c:a2:71:18:57:17:6f:d8:27:89:dc:a0:6a:64:
75:a4:af:f2:e4:eb:cb:3a:94:33:7f:9a:a9:b9:01:1b:26:5a:
90:28:95:62:69:36:a1:5c:9c:60:41:73:7f:e0:71:bb:a0:b8:
15:05:3d:be:a3:75:d3:93:9f:80:19:f6:e7:20:df:c1:75:b3:
ba:7f:c1:42:c7:d0:e6:fb:97:a5:ce:95:ee:df:7a:fd:f3:f1:
f5:8b:b6:c4:f8:1c:a5:30:d8:a5:13:c9:1f:05:e3:63:05:c0:
40:8e:9a:ba:0f:1e:78:c7:01:d5:c7:05:d6:1c:c6:0a:75:2d:
18:cd:c6:3d:f0:0a:93:be:fd:44:57:ab:8c:e3:12:f8:71:08:
ee:ee:4e:d6:c3:bb:5f:30:7b:02:d7:f5:ab:aa:3f:97:2f:ae:
ed:24:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:54 2026 by rpki-client