Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: 1CQpyyya1pyqNQZ4cUGnvq3k5y/tTfm5f0btkp+fqOg=
Subject key identifier: 9F:B5:B5:F8:48:DB:99:08:42:C2:9F:57:13:77:41:E6:BC:75:E2:BB
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 019D2A3B410E5DB9BC26009356A2B2AB2519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 181C
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: RshyVlomJCGhQBT8wYFVVbtUrtYH4HYpsjaaXhM9YH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:41:0e:5d:b9:bc:26:00:93:56:a2:b2:ab:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=9fb5b5f848db990842c29f57137741e6bc75e2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:28:71:0c:b0:55:6b:e7:21:7f:37:6d:9a:
7d:ce:44:87:47:93:6f:14:ef:78:ce:69:6b:4f:40:
5a:30:81:89:c7:d0:61:a7:8e:10:9b:80:a2:13:b2:
e5:00:79:fa:a7:18:4e:b7:55:49:98:0d:38:f0:93:
f0:4b:21:68:f9:be:1d:41:88:fb:56:15:96:01:3f:
ba:1a:88:e0:db:31:bd:ec:94:6b:02:0b:1b:46:31:
5a:8a:8a:19:fd:35:e6:a3:24:aa:33:85:44:80:e2:
e0:5c:66:17:e2:0f:d5:22:74:9f:d4:6b:5f:70:23:
17:a3:11:9c:05:b9:c8:92:05:7c:88:56:eb:f1:23:
54:bb:2f:b7:81:7a:91:b1:ea:ac:30:ec:73:25:5f:
8f:86:45:ce:3b:d3:a2:dc:78:eb:30:34:6e:f8:62:
ad:a5:7d:c6:63:6f:4e:0a:a0:ea:4e:d4:77:c9:29:
63:ca:1e:20:1a:8a:b5:38:ed:60:a9:ab:46:a6:96:
b3:f1:65:1b:12:15:09:ce:58:9c:51:14:f1:6a:41:
df:9f:95:e1:f4:da:64:5a:41:df:0a:a2:b9:92:71:
ae:b3:70:a9:d7:cc:bf:7d:c5:ef:6b:5e:23:fd:0e:
45:cb:48:90:6c:ce:8d:35:85:da:f9:5f:73:74:80:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:B5:F8:48:DB:99:08:42:C2:9F:57:13:77:41:E6:BC:75:E2:BB
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:96:1b:d1:ee:bc:ee:87:c1:c1:22:37:1c:72:5e:a1:70:7b:
88:22:f2:08:51:86:4b:92:a0:63:b1:55:d4:0d:3a:4f:28:fe:
d6:63:70:0c:64:65:85:ff:fe:0f:f2:87:80:b1:03:3b:ea:54:
61:50:63:99:10:eb:1e:17:08:7e:3c:8e:20:dc:6c:e2:36:17:
87:46:7d:ad:57:d9:da:52:7a:ce:c9:2f:3f:02:6f:cf:5f:f8:
dd:a4:68:f7:21:e0:a0:6f:e3:59:63:dd:95:79:b3:7c:9f:b2:
d4:cd:c2:7b:93:59:b7:21:d5:de:cd:5e:7e:bd:e0:b8:1b:fb:
24:45:b7:02:e2:8a:ab:d3:28:d0:aa:20:fe:64:02:0f:56:16:
25:52:bb:ef:55:22:c9:83:c3:06:61:0f:ce:a5:12:62:3a:d0:
fe:16:85:21:46:fc:bc:1e:ad:44:39:6a:a7:b7:4d:61:5f:12:
3c:c2:74:da:5e:6e:52:0b:fb:03:fc:bb:ea:85:4f:ca:44:0a:
49:2f:5d:2e:b1:41:4b:71:db:67:2c:68:ba:91:d4:78:66:4e:
96:da:37:a2:08:6a:c9:9a:87:e5:c6:46:4d:85:1f:6c:85:cb:
a1:f8:13:49:a4:fe:35:2c:8b:2f:bc:9f:7d:6a:aa:c8:01:c7:
76:30:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:37 2026 by rpki-client