Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: 2GHIs5ZbLWoyQ8reCYv9jJVeERJx4nVGLWnao7oF5C8=
Subject key identifier: E4:46:F7:80:B6:D7:82:88:A9:29:7A:8B:78:87:3B:B5:A5:70:C6:0F
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 019D2884CEBD8DC0C4919AD1172459BBCB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 146D
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: XxTPLLOVbCNb/b+Ymay/g7L8qAlgpX9sE+s2UVzwcRA=)
2: kgXtGX7XX872ZBmOaDQBG_SxnRk.roa (hash: +MHedL/253Pk+HAeX+TuqGjfyagOjaX7b4uRsR/dtbs=)
3: l8bTPf1K3Wz0ZzSyAeVgoKWs9x4.roa (hash: ysJ6WNI/AvY+WY1s/27Bn0HCO1zRM3PLaycskEsYrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ce:bd:8d:c0:c4:91:9a:d1:17:24:59:bb:cb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=e446f780b6d78288a9297a8b78873bb5a570c60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:1b:7c:c2:98:17:14:cc:b7:9d:eb:10:47:
52:92:8b:66:77:27:ea:5d:19:8c:d6:70:af:f4:5a:
99:df:20:1b:dd:59:72:2e:f0:fd:38:41:95:81:17:
d4:9e:59:47:ea:d0:85:4d:e6:2e:d2:11:bd:44:22:
9b:9f:9b:b1:39:bd:99:73:51:41:60:cf:f6:a7:d5:
4c:47:5b:f9:64:56:47:8e:a1:24:1f:fc:eb:a6:36:
f5:3b:ca:cb:76:81:fc:de:74:5c:50:f6:fb:58:7b:
6d:6c:b7:3b:66:f7:d9:19:68:19:a4:aa:62:5c:c1:
38:17:b4:ba:55:b3:cb:24:6d:33:98:c7:f1:42:65:
89:77:20:77:48:ce:08:79:35:0b:09:74:9d:91:4d:
c1:d8:62:26:e6:03:9d:8b:fc:85:b9:b9:6a:34:b5:
43:db:5d:a6:c8:5c:61:92:d1:35:47:23:ec:da:3a:
7f:5b:c8:d1:a7:d2:c2:c7:c7:d2:4f:85:04:3d:aa:
ec:0e:8f:7c:e8:95:d2:e0:ec:7f:1d:96:96:2c:5d:
fc:60:6e:d2:19:79:be:fe:dc:ed:da:a5:8e:13:42:
5c:36:41:aa:99:5c:c0:ca:26:31:e5:48:d6:b0:70:
6a:f7:cd:06:44:21:1d:16:95:51:18:68:0e:b8:dd:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:F7:80:B6:D7:82:88:A9:29:7A:8B:78:87:3B:B5:A5:70:C6:0F
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dd:b0:2e:e8:d9:bf:28:5f:ad:4a:f6:c1:c3:33:8e:c1:f5:
fd:b7:16:aa:29:00:ee:09:da:5a:54:eb:fe:f0:92:79:4d:10:
b5:96:7f:ea:0d:70:94:f8:57:43:8c:80:c2:6f:29:c8:ec:e5:
92:5a:04:30:0b:26:55:a4:0a:a4:71:e5:5d:20:f3:a6:63:8a:
10:bc:f5:f9:20:b3:9e:be:47:a9:38:05:86:be:82:cc:d0:98:
de:2b:5a:70:f2:ef:b5:15:79:b7:bf:73:29:6d:98:16:f7:ad:
34:f5:e1:e7:25:bb:50:56:b9:4d:80:84:9e:aa:16:e1:e9:b7:
95:dc:9c:40:ea:5b:6e:e0:da:22:d9:28:af:d3:d3:32:c5:f2:
43:36:de:98:2a:a9:ab:1f:0a:d0:cc:9e:6a:bf:2a:81:bc:77:
62:15:81:92:26:41:a1:49:b3:d8:23:5a:0f:9f:c0:2c:b9:c1:
89:f5:6d:80:c3:6b:71:26:3c:03:d6:eb:55:c7:38:02:53:4b:
db:07:e1:a7:47:32:b1:b8:80:cb:22:2c:33:de:b3:bb:58:38:
12:18:dd:52:72:82:f7:a6:a0:48:b8:55:7c:bb:62:aa:64:ef:
8c:f5:89:56:9c:98:41:ec:ce:b7:a1:01:92:c4:ed:9f:1f:0b:
74:0a:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:54 2026 by rpki-client