Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: YKPX0XqK/v6G8TNqwZ0pcHBe25kIKCqTiPlVTS2qQP8=
Subject key identifier: 8D:A0:A1:72:77:37:66:80:10:97:ED:23:92:51:13:1C:B6:31:DA:6B
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019D25BA6408FE20EDE9D721652F8629D438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: wjVR002ftyp84UU+QVh9iGAaMyGI1VQZ0V30hwN0qEc=)
2: LpF7hzS-_Bqq_u0GKSkOq_jaXmU.roa (hash: pIhXh24IzpIa3o8LFBdn/va5JW8n7fuKIIlkGDvBzts=)
3: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:64:08:fe:20:ed:e9:d7:21:65:2f:86:29:d4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=8da0a172773766801097ed239251131cb631da6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:07:91:5c:4c:fc:a9:27:08:d6:26:37:1b:
d8:98:ee:1d:38:dc:6c:3f:3d:97:1e:61:b8:d0:89:
eb:40:d3:1c:06:18:3e:29:5d:0a:38:16:a8:b3:b7:
e4:71:5e:97:64:e4:de:9e:da:c0:41:71:51:89:d5:
a6:d7:bf:c2:42:46:eb:0f:00:ac:2d:b5:c0:04:54:
75:1e:6d:09:f9:1d:af:30:4a:fe:cd:df:4e:c0:a7:
af:d5:bf:bc:80:b5:8e:b7:bf:99:c8:35:3f:a1:54:
67:da:95:5e:d8:ea:76:5e:dd:27:e9:92:72:a3:15:
43:0d:14:ec:f0:b3:da:e8:a9:24:a7:db:74:98:66:
d2:4d:9f:52:c3:5e:2d:10:b2:7b:6b:0d:a5:31:b3:
a5:ab:b2:05:9c:92:b8:32:0a:c8:37:35:28:44:b4:
4a:a2:84:f0:1e:4c:a1:e2:c3:5f:2b:57:3c:49:81:
e9:29:29:ce:78:00:1a:7a:ee:fa:8f:76:9a:59:ab:
9f:30:ea:b7:78:09:2d:ce:ec:74:af:e8:12:d0:e1:
15:53:64:7b:6f:d4:bd:2f:0f:3b:0c:3c:fd:81:cf:
f9:9b:c8:92:d7:19:3c:6f:96:42:bf:66:04:f0:75:
e1:7f:fc:51:d6:51:8a:7d:5c:dc:b7:af:be:11:8f:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:A1:72:77:37:66:80:10:97:ED:23:92:51:13:1C:B6:31:DA:6B
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:41:fe:2e:e4:57:24:c2:1b:16:54:2b:34:1a:b1:51:3c:13:
e8:3d:41:b0:19:73:5e:17:6e:9b:b6:b1:f7:48:67:66:6e:a6:
bb:de:41:28:fc:c0:e5:4f:c7:bd:24:58:9e:d4:21:30:03:98:
bf:bf:51:ff:44:cd:ce:22:8a:63:85:7d:32:fb:b4:5f:58:4c:
fc:e0:fc:61:79:1c:6f:42:41:b5:7e:0d:b2:b5:3b:56:07:98:
f9:27:d8:52:d8:83:18:05:7e:8a:ae:26:1d:65:31:26:a3:ff:
f7:67:ee:39:f1:17:16:e8:f3:50:c9:9b:6d:77:86:27:d8:48:
c4:2f:98:73:1d:22:e8:14:b6:77:d1:c1:db:d8:19:4a:6d:32:
0e:56:35:97:0f:c7:db:ec:5d:27:80:28:a2:f7:85:51:33:47:
f0:a4:16:6a:94:af:7d:cd:c6:b0:3e:fb:c9:c0:7f:80:58:40:
c1:ff:7e:e1:dd:15:38:dc:f5:a9:38:66:66:cd:57:a7:ef:ac:
45:84:2f:4e:ef:4b:5c:32:67:ef:f5:31:fc:2d:3f:45:97:e5:
e8:fc:3d:be:f0:31:16:7d:40:94:e8:fa:39:e0:82:cb:e4:df:
d8:fe:d9:cb:b3:54:27:a4:e1:6d:7d:40:e0:a4:92:1b:e6:9d:
ef:1b:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:52:43 2026 by rpki-client