Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: Og+A52Q/pmFgFas13bNX2RmqlGlPwRJ75Cg56XurR88=
Subject key identifier: 02:AC:04:38:32:D9:7C:71:56:FF:EC:3B:6B:A9:89:CF:76:82:C2:C9
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019D27A8A70C2478F2A850CE6D469D7D5E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 0267
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: Fg5HAyCv6b7sSfLqSOcD2vtlGl8.roa (hash: Y5ctBSFcozZDys/LCzFhu11DBzWJnR4MW+cvCOiTB2A=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: 9rPt+f4mBuFfDe5Fx8nsNyMeMPiVwL+b2adzqcvPfow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a7:0c:24:78:f2:a8:50:ce:6d:46:9d:7d:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=02ac043832d97c7156ffec3b6ba989cf7682c2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:80:d6:6e:d7:3e:f8:8b:33:02:68:a4:89:
e4:15:ba:9c:9e:92:63:cf:11:cb:25:39:8b:62:c4:
41:8d:38:c8:30:f1:c3:cc:0a:91:39:87:fc:a8:39:
52:3f:43:53:38:b5:bb:3a:7d:f1:87:54:1e:27:56:
03:b8:c1:49:56:84:ed:b6:aa:2f:85:a6:03:47:5e:
ad:60:6d:61:53:d1:41:d0:47:9c:bb:53:3d:49:17:
48:85:8c:97:78:bb:6b:3b:e6:fe:ff:35:7f:01:16:
11:ec:52:20:e6:a4:45:7e:2c:fa:47:34:21:66:00:
03:be:76:d9:18:4a:7f:ea:fe:14:23:bc:fb:90:94:
ee:56:25:42:bf:6b:f1:96:52:7e:52:46:f8:4b:06:
2a:08:a1:0c:e4:a3:6d:54:ef:58:c1:a6:6f:70:cd:
e8:b6:81:6c:10:49:f8:cd:48:e9:38:8f:bb:cb:ef:
2b:8a:73:93:fd:35:da:bf:70:52:9b:c0:17:6f:32:
ea:c2:e3:42:6a:56:df:cd:d8:91:0c:0b:dd:15:c8:
27:f5:03:06:d4:b7:fc:58:40:27:08:5e:87:8b:01:
60:91:62:5b:85:d0:7b:30:bc:82:7a:e0:37:ff:49:
5b:6f:63:17:fc:b9:1d:a5:f9:21:a5:c8:22:39:23:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:04:38:32:D9:7C:71:56:FF:EC:3B:6B:A9:89:CF:76:82:C2:C9
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:92:be:fc:8e:32:34:d6:60:ef:d7:e3:7f:13:27:fd:f7:c0:
d0:2a:19:88:9b:bf:99:13:09:9b:47:f6:b4:97:18:13:9a:7d:
74:1c:14:9f:3e:81:8a:67:eb:da:4e:f1:ec:1e:ba:a6:a3:d6:
d5:50:06:2f:c5:b1:3a:97:cd:95:b2:43:4a:d6:25:98:05:9d:
30:56:91:c1:aa:bb:ee:1c:cc:94:85:0a:e9:e8:a7:9e:34:8c:
65:1f:34:f2:d1:c8:90:68:fc:6b:7b:90:33:db:cb:7a:ad:9f:
73:01:76:9c:be:17:92:ca:e6:d5:19:d7:60:ed:72:38:9d:26:
70:e6:4b:1a:a6:b8:bb:23:f2:10:84:d7:21:aa:0b:13:0f:94:
26:07:88:59:9a:3c:44:33:17:1d:65:16:50:6b:22:33:05:ad:
98:16:8a:21:a1:a6:46:07:f4:98:7c:45:00:20:52:2d:ff:b2:
08:4a:b3:d8:cd:81:c5:6b:dc:07:10:8b:48:9f:19:fb:41:28:
9e:58:b1:af:af:5e:61:ea:05:0e:3c:4c:ba:fb:02:67:b9:3a:
0c:3e:e5:84:88:a5:f8:1a:f9:f9:7c:c4:5b:1f:83:9b:cd:70:
41:f8:d5:50:e4:ce:cb:4f:6d:ad:f6:f0:1b:7f:7a:e1:53:9d:
8d:2d:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:22 2026 by rpki-client