Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: g3Fwoo1U7iGKVxm5osQ0C7W3dZZ/4Vla1XHTnNEl8n4=
Subject key identifier: 6E:AF:B9:59:89:40:D7:B7:4B:3C:CC:05:6F:AD:54:4A:5D:4D:59:3D
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019D265F135F43288A292CC225FE8821C1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 013E
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: lHM4j12c9c5IT+PFR2kcs5nDYNzsGgwpmgHAaTMsSyk=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:13:5f:43:28:8a:29:2c:c2:25:fe:88:21:c1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=6eafb9598940d7b74b3ccc056fad544a5d4d593d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:d1:8f:cc:8d:9f:aa:3f:02:70:c5:9b:2d:
de:2a:94:6b:9f:fc:61:02:44:73:c4:b4:f0:83:ea:
8c:24:8b:e2:11:86:85:16:95:bb:dd:90:54:18:32:
5d:1f:52:b4:16:8e:f1:7f:d0:24:52:4d:95:fc:19:
5e:ca:8f:88:e2:79:a5:69:99:90:36:c7:ed:88:2c:
29:49:95:bd:d4:58:a7:93:2a:c0:96:d3:90:92:ef:
92:36:21:dd:5f:35:5a:97:f2:fb:35:eb:bc:fa:a4:
94:2e:af:46:37:0c:61:d3:b2:dd:69:76:1c:2a:e7:
f0:72:75:0e:eb:18:fe:f4:6d:27:9c:dc:e8:51:a2:
8f:fb:f0:54:75:9f:01:61:b2:4c:b2:ce:3d:64:f0:
dd:3f:cd:5f:33:50:e1:ec:f3:8b:79:43:93:e8:75:
76:d3:bd:e2:f0:78:97:61:2c:13:9f:e2:c8:65:f7:
61:f1:99:3a:f3:4e:43:da:18:85:7a:01:d0:cc:e7:
54:59:0f:af:d8:49:8a:33:4d:a0:b0:5d:b7:33:f7:
8c:f1:40:b6:49:47:e8:c9:a4:ec:72:bc:52:2a:35:
20:7e:62:a5:af:34:02:d2:55:f1:eb:e4:66:3d:fa:
a3:2e:a6:d1:6f:2d:75:31:de:0a:67:82:06:0e:6b:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AF:B9:59:89:40:D7:B7:4B:3C:CC:05:6F:AD:54:4A:5D:4D:59:3D
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5b:af:9f:06:47:03:3b:c7:e7:57:46:00:fa:48:97:91:64:
18:3e:ec:89:0e:95:8a:2f:75:e0:a4:d9:4a:9b:16:0a:33:49:
62:8e:a1:bc:3b:6c:d6:63:13:5d:91:c5:d5:f9:cd:d1:03:44:
50:66:0c:a1:3f:9f:c3:46:41:ca:c3:5b:72:90:d6:66:3e:70:
9b:e0:71:a2:f2:6b:ac:46:14:70:b0:83:e6:1b:6c:c3:30:9f:
2c:87:81:8e:39:8d:bb:ae:22:73:61:20:21:ad:26:71:53:d2:
d5:a7:fc:c9:bf:5e:85:a0:96:e4:59:9c:6b:9a:ec:3a:b6:d3:
d3:4a:11:8c:51:64:41:d9:78:ec:aa:26:7a:0e:8b:58:6b:9c:
39:18:b1:29:77:a3:d7:d3:1b:99:71:d0:13:14:78:b7:a2:e2:
a6:1c:45:66:26:19:03:06:1d:7b:49:bd:85:0d:67:1d:d3:90:
8f:17:b2:03:b6:66:45:08:f6:22:a0:59:9e:9d:ce:69:97:ce:
e3:3b:e8:f8:4f:18:dc:82:0a:03:11:2b:91:2c:c1:35:e8:f1:
31:f3:44:76:f7:ae:e4:b7:da:d3:8d:d0:fe:97:43:4f:23:81:
88:10:27:e0:3c:e6:d8:37:13:7c:d1:89:47:4e:56:3f:7f:e9:
10:05:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:11 2026 by rpki-client