Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: m94vJRnGqt4eyB143Mbn7xKP2/ugHvRzFdpfiKLFF3I=
Subject key identifier: C1:13:E5:A9:B3:6B:98:CA:79:15:18:1E:1F:00:D2:6A:44:2A:FE:CB
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 019D2884403FE17ABB99BF21104D607B695C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0F30
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: IOwXOU2AdOtbFvBTrwvReg5L1Tsuvgm7By79fA3b3cA=)
2: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (hash: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:40:3f:e1:7a:bb:99:bf:21:10:4d:60:7b:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=c113e5a9b36b98ca7915181e1f00d26a442afecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:dd:47:40:98:7a:84:b6:50:7e:f2:a7:86:
7f:50:45:4c:3b:b8:cc:6d:db:26:11:b3:30:6c:1a:
9a:4a:55:f9:2e:e6:05:6f:77:8f:4c:a8:8d:8f:09:
33:73:bc:f7:5c:8a:1a:c6:f5:89:83:8c:8d:8d:8b:
f7:7f:85:01:2e:a1:d4:df:64:6a:40:3c:0f:66:b9:
28:5d:09:71:db:ab:25:51:8a:f1:30:96:5c:c6:50:
92:47:9f:a0:35:ba:d5:5c:c8:f2:8f:09:b3:3e:ad:
34:4e:c4:89:e8:28:6c:ed:4f:89:73:31:bd:37:47:
16:a9:4f:84:1a:9a:90:07:e5:d1:37:88:70:61:09:
56:50:6b:05:6a:7d:2b:fd:11:8b:75:66:3c:81:4f:
02:09:bb:c0:f1:65:36:11:70:c3:e7:09:33:cf:13:
2b:8f:35:4a:47:c4:03:c2:ac:56:2a:81:ae:60:78:
7e:52:89:8a:84:ee:6b:fb:2a:54:07:3e:de:ac:68:
7e:7f:de:05:59:99:d4:e0:cc:92:2e:1a:89:97:8a:
73:71:8a:5d:e0:d0:37:94:be:ee:64:49:00:37:75:
61:5d:ee:e9:49:47:47:03:97:8a:da:e8:51:ba:98:
0d:26:19:87:27:2f:24:a6:21:cc:ae:bf:2a:eb:4f:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:E5:A9:B3:6B:98:CA:79:15:18:1E:1F:00:D2:6A:44:2A:FE:CB
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:1e:0a:04:41:96:6d:40:2d:88:a0:bc:f1:0f:46:43:05:
ac:ef:25:9c:36:b6:89:05:89:20:8e:29:5c:71:a2:a7:7e:79:
55:5a:08:f3:25:83:65:a3:02:07:01:01:87:fa:b8:b3:06:b1:
5c:c5:28:85:34:73:c1:c7:bf:fe:30:f3:76:b9:5b:fa:08:18:
08:ec:6b:25:43:d2:b8:3e:5c:64:1c:5f:33:34:a1:f7:03:d2:
08:88:94:9d:2a:a6:da:0b:fd:b4:e9:3b:bc:fa:b9:cb:4d:05:
d2:77:51:70:54:28:6c:5c:c0:a6:7a:c6:4d:09:69:11:e7:97:
d9:af:f8:cc:96:24:73:b1:c8:dd:8c:93:44:51:98:64:6c:dc:
c1:53:32:9a:d3:ab:4c:41:c8:a1:3d:4b:c6:b9:3d:99:3c:8f:
64:2e:6f:1a:a6:99:71:d1:e9:d7:56:51:2c:3b:77:52:5a:bb:
17:1b:2f:75:b6:9e:b7:52:10:d6:08:d6:20:9b:6f:66:e9:33:
b2:28:75:78:75:e4:b1:80:48:01:e7:92:cc:a0:e7:df:a7:2d:
39:c3:9b:0a:69:64:a8:61:11:55:13:e6:e9:6b:5c:47:c9:87:
92:1f:c1:58:f8:7f:48:c8:a3:ff:ab:b3:8f:d1:bb:c2:05:07:
1d:49:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:51 2026 by rpki-client