Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: 0izVzM+2Ml5kKB7MuOevLSv5Wei2eYUpId3eDMEJ/xY=
Subject key identifier: EB:C6:EE:38:6D:4E:64:73:3A:49:57:5F:BE:6D:EF:A4:1D:1B:25:8D
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 019D2BBCD12EBB80C21A723B96317F262872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 20:01:27 +0000
Manifest this update: Thu 26 Mar 2026 20:01:27 +0000
Manifest next update: Fri 27 Mar 2026 20:01:27 +0000
Files and hashes: 1: 2r56-7c4rzlH_MkXpf4EVQxFefI.roa (hash: hSJijlNMgIG+anYeveOsK+OFXlzwcZe8DVit+XV01Ts=)
2: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: I16DURxJzcJORAvQHQlY4JXFlkLvap4Nsn56ncpuyc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:d1:2e:bb:80:c2:1a:72:3b:96:31:7f:26:28:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Mar 26 20:01:27 2026 GMT
Not After : Mar 27 20:01:27 2026 GMT
Subject: CN=ebc6ee386d4e64733a49575fbe6defa41d1b258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:1e:9b:36:a0:12:2b:8b:82:40:80:70:81:c5:
82:b4:5a:e8:90:42:79:df:38:e2:7d:a1:cf:46:86:
14:b2:11:ac:97:b0:0e:79:25:55:f0:6b:ad:f4:03:
80:24:4b:95:4d:86:b8:96:1d:5d:34:6a:b1:21:a7:
1f:eb:b1:3d:92:17:5f:d7:af:ff:71:cd:34:3c:06:
0f:48:92:5b:ab:32:44:d3:a4:2d:02:e8:53:90:5d:
cd:92:8e:f1:a4:e3:88:07:db:fd:b0:45:34:78:90:
ab:fd:c6:03:be:41:e1:62:1f:51:d8:10:83:b6:7f:
bd:b0:dd:cd:13:31:74:d7:b6:cd:9a:33:55:80:fb:
23:1a:1f:ac:af:ec:1b:07:a8:ce:c4:61:5b:29:d8:
48:9f:28:37:17:6c:b4:aa:b1:c7:cc:3e:ea:9c:17:
0b:90:60:ab:c6:db:d7:3f:fe:cf:c5:ff:cc:38:c4:
aa:d9:ee:f6:6b:fc:63:59:49:93:d1:b4:cd:68:df:
7e:ae:9b:33:63:55:e2:e0:66:70:08:ed:7e:14:7e:
f4:26:1a:f7:e4:80:bd:e3:3d:16:e0:57:7b:9d:88:
fa:ea:df:2e:19:1a:e8:bf:2f:9e:f8:da:fb:1f:d4:
97:4a:3c:22:f6:a7:cd:e1:c0:f0:b8:f9:f7:ac:02:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:EE:38:6D:4E:64:73:3A:49:57:5F:BE:6D:EF:A4:1D:1B:25:8D
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bf:33:8c:02:34:d4:28:60:72:2c:d0:71:3f:ce:ce:c1:45:
6a:fc:5a:da:7e:21:8f:99:b3:54:5b:b2:c2:e2:b4:90:70:cd:
1b:3c:e1:e5:b9:1f:9b:87:a5:e8:a6:00:2c:c8:97:f6:b6:4c:
76:fc:a3:c6:29:22:3e:ff:c9:fb:35:55:05:5c:e0:c1:d9:de:
8e:52:76:ea:89:cf:5d:8b:e7:3f:1d:b0:0f:49:9e:35:5d:ef:
40:b2:0e:ff:90:99:45:a3:be:1e:b0:97:f4:c1:7b:1a:10:c5:
cb:a3:16:73:6a:ae:60:75:5c:4f:75:30:78:60:b4:18:be:13:
15:cd:41:15:37:68:25:2a:ee:21:67:b5:75:fa:12:2f:ed:05:
b1:54:ca:c4:90:77:e5:ec:bd:bb:98:9d:f0:a7:39:e6:d4:8d:
2b:cc:82:90:59:fc:1f:ff:27:e0:dc:8c:5a:ab:88:3d:f0:68:
e6:52:a5:19:6e:d0:ea:d7:54:b9:31:bf:a5:a1:de:96:5c:24:
b7:c5:22:ab:58:d0:59:aa:85:54:e7:01:0a:b0:a7:7d:53:12:
8f:37:18:fb:47:9b:8c:95:fd:96:d8:ad:07:f3:08:0b:6d:f4:
c2:29:66:9f:08:25:7f:cc:7c:4a:2d:46:31:37:a6:8b:24:c8:
a1:b8:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:05:59 2026 by rpki-client