Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: 9szyTXqHOFbJzdI/J8YaCU9mwkR3NDplTG7z12xWqaI=
Subject key identifier: 29:CF:AF:F9:08:71:2C:3E:40:01:10:8A:96:44:1B:5A:D3:11:C4:17
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 019D2704D8FD7E71F012390620187C189266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: 050D
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: l/WeY+izKOL4zfaatDT8wuk5QqvKXvNjvs04xqVAApw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d8:fd:7e:71:f0:12:39:06:20:18:7c:18:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=29cfaff908712c3e4001108a96441b5ad311c417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:be:d6:12:26:32:ed:77:e5:47:4c:40:41:
55:e0:2c:1f:88:30:4b:37:e6:a7:d1:93:78:9d:bd:
9b:e0:98:8a:26:b8:35:98:c0:8b:24:b9:b1:a4:5e:
5f:fe:37:90:87:72:9d:d2:bd:98:43:9a:e1:19:41:
83:1f:30:2e:4c:82:3e:d9:27:c6:65:e6:33:90:43:
df:2b:2c:bc:3f:d6:63:fa:64:15:39:34:4e:5c:8d:
98:e5:1b:1c:61:22:7e:21:fa:0c:d3:bc:76:c6:df:
73:92:2d:41:e7:27:9b:fb:bb:65:6e:2a:13:cd:94:
21:ba:a0:bb:a8:1c:ea:16:da:dc:36:95:4b:c3:95:
c3:13:8b:84:19:cd:de:f6:55:3c:04:1f:3a:12:5f:
00:57:b3:98:9e:4e:0f:d9:bb:4f:d3:2d:28:9a:60:
eb:5e:1f:80:77:07:dc:66:c7:33:6d:c1:bb:a7:1c:
e3:e9:84:4a:a8:f6:43:c2:b7:75:c2:d8:16:d9:f4:
02:56:b3:84:11:0d:8e:35:9a:9e:b6:1a:3a:38:3d:
c5:4c:15:3c:65:99:d9:3e:b0:f0:9c:be:21:c2:14:
89:6d:8c:97:4c:4c:10:32:07:fd:f6:af:3d:72:3f:
28:b8:e0:05:f1:8a:21:af:5d:cd:67:85:d4:54:29:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:AF:F9:08:71:2C:3E:40:01:10:8A:96:44:1B:5A:D3:11:C4:17
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e4:12:f3:8d:99:45:71:b6:69:c7:58:f3:7f:82:f7:e6:14:
8a:ab:cd:86:2a:11:c8:0c:4f:ec:f6:2d:79:e3:8c:c4:33:1f:
d8:11:13:23:52:be:b2:d1:9a:6e:b3:5b:61:4b:36:96:9a:2b:
bd:76:1a:60:74:9c:0a:48:48:b1:c9:17:44:6e:40:dc:45:5b:
eb:35:1b:90:06:62:f0:3d:35:94:a9:91:ef:e3:83:6d:b1:01:
57:16:05:48:f8:2c:d9:57:0d:ca:14:d1:e0:0f:15:35:3e:97:
78:14:8a:20:51:18:67:9a:ba:2a:39:54:2d:ff:18:ab:6f:fb:
a8:1f:37:5c:a0:a3:9a:3c:88:76:38:e8:25:a6:da:7e:6b:15:
71:f7:cc:19:6f:82:51:01:aa:7f:8e:e3:14:4d:2c:64:ff:da:
f6:18:79:84:17:7a:29:b7:aa:9d:3a:9e:d4:66:02:05:5e:e7:
5d:2a:45:0a:31:78:bf:7f:b8:96:22:89:9b:90:cb:5d:69:92:
62:84:7e:cd:ba:69:ae:24:c0:b6:1b:14:56:c1:7d:bc:50:26:
24:88:bf:c1:bc:88:d8:6f:b6:15:4b:a0:9f:b6:80:a6:2e:ca:
2f:1e:a7:f4:cf:2a:88:f1:5d:e6:76:2f:05:19:b8:57:a3:6b:
2b:b7:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:38 2026 by rpki-client