Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier: hB3p1NQrANhHEhV+uJgSPhxntngiMlLrqD3x9MWVjTA=
Subject key identifier: C6:EB:8F:12:D5:2E:FD:73:CB:7B:B9:8D:66:56:1B:EB:98:54:21:DA
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial: 019D26CD5E8A389A58B1727AF9249E5F26D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number: 0DE0
Signing time: Wed 25 Mar 2026 21:01:26 +0000
Manifest this update: Wed 25 Mar 2026 21:01:26 +0000
Manifest next update: Thu 26 Mar 2026 21:01:26 +0000
Files and hashes: 1: 9oyMDlFUMJCEeicvl7UFwOHgYsE.roa (hash: f8s6l8eBEajunCZ6gmMPJ0g+5TCwQ3SpFosYHbC5O4E=)
2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: ZUGAzDE6WQtLWpcIq81DH1V8aD+RbG7D4ELVNl1mjIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5e:8a:38:9a:58:b1:72:7a:f9:24:9e:5f:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Validity
Not Before: Mar 25 21:01:26 2026 GMT
Not After : Mar 26 21:01:26 2026 GMT
Subject: CN=c6eb8f12d52efd73cb7bb98d66561beb985421da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:3c:f8:03:fe:49:7d:b4:b2:2b:59:5f:94:
dd:5b:a3:f0:3e:95:7d:19:08:dd:35:e6:8b:c7:6e:
7e:06:02:95:8e:a9:16:ec:f6:fc:3b:13:39:4a:ca:
31:22:19:04:f8:a3:d3:d0:01:00:61:6f:c4:69:0b:
6e:8a:47:ac:b3:a4:e7:29:de:52:b9:5d:14:c1:79:
cc:10:6d:46:01:a6:e1:c7:d3:3c:dd:fc:73:91:cf:
a0:c5:12:c4:4d:30:bc:c4:36:ce:a9:c5:42:e3:00:
0e:2f:aa:8d:81:89:62:62:71:3a:75:c5:c7:85:11:
60:49:f4:62:7e:7e:38:70:c2:63:76:f4:cd:ce:81:
28:3b:82:aa:40:44:4d:d4:d5:21:5c:b7:00:b2:f1:
28:44:61:f0:fc:7a:ab:65:02:de:0a:1e:6a:44:68:
f9:e8:4f:99:d6:27:03:39:cd:71:ca:14:d3:d5:46:
7f:2c:1c:eb:df:7e:4a:5c:4a:a0:c5:84:bf:2a:bd:
08:6a:ce:84:a6:44:41:0f:3c:4e:b4:c8:0a:47:6f:
eb:fe:7c:cc:e9:52:07:7a:06:62:3c:5c:d5:12:98:
d7:49:85:05:6b:ed:13:f0:b8:fa:97:20:a0:8b:1f:
e1:66:18:e9:34:29:cf:56:5a:7c:79:66:78:55:5c:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:8F:12:D5:2E:FD:73:CB:7B:B9:8D:66:56:1B:EB:98:54:21:DA
X509v3 Authority Key Identifier:
keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cd:54:e3:c8:b1:a0:c0:41:8e:25:2b:ed:5f:31:31:e0:e4:
80:24:f1:43:26:ae:4d:74:5c:61:84:73:d7:38:c4:fb:50:3c:
ff:81:7e:9e:53:d9:17:18:5e:ba:92:06:8b:a7:1a:1a:fa:63:
42:4b:26:b1:a9:07:f4:d6:45:36:3d:52:3b:82:91:a2:b8:52:
00:e7:30:21:bb:8b:d9:a2:f7:fd:64:61:59:32:8e:f3:f9:b9:
24:b8:ed:2a:4d:2d:4b:6b:a4:00:19:32:6d:5a:57:f7:8a:22:
cc:f4:2b:7f:af:fc:a8:0e:15:e1:e5:82:55:73:74:98:0c:9d:
a0:63:6e:92:23:d9:5c:d5:a2:98:51:94:f1:43:06:6a:40:fb:
70:2d:08:2f:13:d1:84:2f:2e:24:d7:30:8d:18:66:18:2e:cf:
35:1e:de:75:fd:c3:00:40:c0:5f:b6:d3:99:c0:fb:00:fc:3b:
b9:cf:63:d9:fc:15:9e:01:29:65:bf:ad:d0:e3:48:80:aa:54:
f7:5b:16:aa:e7:67:35:c4:88:74:5b:62:f3:40:3d:0d:db:0e:
0e:c0:64:3f:97:0d:eb:4d:3e:49:90:49:fe:5a:04:a4:17:ff:
40:ac:74:7c:a5:e9:76:1f:7e:36:d4:72:ee:d5:9f:b2:56:7d:
ef:7c:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:03 2026 by rpki-client