Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: 4690ST3AAl21gTdNL/4rmRzhCBtcWcokaN71x+fnbOc=
Subject key identifier: D8:E3:A2:8F:42:D5:20:32:73:32:1E:A3:6A:87:40:D1:86:DA:F0:D3
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 019D2772687FA261486255F1F2B6C0EC68C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 17ED
Signing time: Thu 26 Mar 2026 00:01:42 +0000
Manifest this update: Thu 26 Mar 2026 00:01:42 +0000
Manifest next update: Fri 27 Mar 2026 00:01:42 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: fs+2oq1lE5SqrWziyWWpmcdyH/h7MCV9ee0cR1BrNTM=)
2: J-Al8qEAjQvOqUSJW7LJw04Fukc.roa (hash: nPb+yknouPfoljMRTiffVRamSXybT5BjPnR3oDRUAko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:68:7f:a2:61:48:62:55:f1:f2:b6:c0:ec:68:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Mar 26 00:01:42 2026 GMT
Not After : Mar 27 00:01:42 2026 GMT
Subject: CN=d8e3a28f42d5203273321ea36a8740d186daf0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:ee:47:52:c6:77:cb:0f:08:75:4e:36:4d:
d3:c4:ee:c5:ca:b8:18:cd:39:0f:c7:a9:d5:93:95:
43:4c:4b:00:5f:f8:0c:fb:5f:d4:7f:1d:ba:64:c5:
7f:7c:b8:95:e5:d3:db:a9:95:a1:c3:82:84:5e:81:
9e:bc:7b:31:0e:1e:fa:cb:99:f0:fc:3e:ea:e3:f6:
04:17:82:b9:5c:f1:0d:a9:fc:b2:68:45:06:e2:76:
c3:37:1c:3d:a2:ff:52:e9:b5:96:bb:ed:32:5b:7f:
0f:97:c3:4b:04:ab:6c:cc:35:ac:b0:be:93:7d:aa:
1c:94:72:63:72:d2:e0:8f:95:17:12:f6:a1:1a:7c:
41:fd:ad:02:0d:4b:93:c2:d2:28:a6:e1:f4:41:34:
6f:56:1f:59:c5:6e:92:14:18:39:0a:f8:61:68:7e:
ea:2b:f4:45:09:33:d5:85:17:fb:bd:2d:80:f1:a7:
1c:55:6f:8a:85:ef:eb:4e:68:95:10:1e:33:31:8f:
52:8e:19:5a:11:95:79:3f:51:c5:37:96:db:4f:13:
a3:74:3c:6c:5c:ff:85:2d:8d:52:ad:3c:63:fa:e7:
4f:ec:e2:1b:fc:3f:5a:4c:7d:b7:8e:77:70:ed:87:
01:aa:e3:b5:93:d0:3f:f7:75:1d:c8:f9:2f:18:ea:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:A2:8F:42:D5:20:32:73:32:1E:A3:6A:87:40:D1:86:DA:F0:D3
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e9:d0:17:4e:7f:6b:0b:d2:de:9f:2b:f0:8b:45:28:46:e2:
bd:4e:bb:d1:1b:67:8c:01:04:35:e7:95:a0:d7:a2:38:91:9f:
4e:51:34:b8:70:60:fb:6f:ef:6d:18:74:98:69:a0:76:08:97:
3e:39:77:53:6b:37:f3:09:77:1d:2b:47:84:df:b9:40:91:c0:
28:5e:33:04:eb:73:4b:36:ce:60:81:6c:fc:80:af:a0:f0:0f:
19:96:06:7f:91:03:28:bf:d4:21:f0:dd:5a:92:19:2f:72:6b:
fd:ef:dc:7d:1a:91:f6:ef:2e:87:88:0c:97:04:78:32:57:e5:
7d:00:09:18:6b:1a:43:7c:cc:a7:9c:45:c9:00:5f:56:84:91:
16:ab:b8:0d:aa:d6:42:0c:c9:5e:20:f5:2a:e4:4a:1d:85:66:
9c:46:75:7e:4a:04:ac:a5:d8:4b:30:55:cd:17:fa:13:d9:10:
66:b4:cf:2b:52:a5:59:3c:b8:a1:ab:6a:bc:87:76:c0:5e:e2:
1c:4b:0d:15:48:22:47:44:fe:4d:bf:8c:c7:e7:69:7c:e9:71:
07:95:a1:83:4e:8a:0a:8a:e2:10:e2:e8:31:98:d3:a2:44:1a:
70:f6:e0:6d:cb:7a:4f:f6:f5:ab:5e:28:9e:97:96:dc:65:c7:
c8:46:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:30 2026 by rpki-client