Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json)
Hash identifier: EwxNMVMnG7se42qjK0xAeslLBb3EwdvlPAjdP+xW/rc=
Subject key identifier: 05:16:C4:C6:2D:78:DB:CB:ED:C9:01:88:1E:5B:1F:92:66:3C:CC:7C
Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Certificate serial: 019D2961AB63B88760869DE4019889DD7B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
Manifest number: 0458
Signing time: Thu 26 Mar 2026 09:02:39 +0000
Manifest this update: Thu 26 Mar 2026 09:02:39 +0000
Manifest next update: Fri 27 Mar 2026 09:02:39 +0000
Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: 0atT/XHuXFazsZtBfZJ6RpE7N3NaJ4TFLQWuFr9d2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:ab:63:b8:87:60:86:9d:e4:01:98:89:dd:7b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Validity
Not Before: Mar 26 09:02:39 2026 GMT
Not After : Mar 27 09:02:39 2026 GMT
Subject: CN=0516c4c62d78dbcbedc901881e5b1f92663ccc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:d8:f9:50:6a:d8:2c:c4:5b:56:5a:d9:60:
08:46:0c:f8:01:9c:93:ab:0f:48:6e:5d:b0:50:50:
3a:dc:25:4f:29:dc:93:3b:39:32:37:f9:2c:1b:0f:
0d:62:7b:e9:11:4e:55:61:3b:04:c6:c8:38:c9:ed:
96:30:e4:cf:15:88:8d:7a:44:5f:dc:91:56:6b:48:
31:01:35:d6:fc:29:4f:3e:12:54:ed:98:19:76:92:
d5:cf:9a:11:32:2f:b1:fd:34:b5:53:dd:e3:a1:8e:
67:19:a2:f1:c1:81:8a:2e:64:1f:2c:7e:22:01:0c:
30:66:9f:16:69:18:77:ef:58:1a:a0:33:da:3c:90:
92:d9:f4:7e:f9:f0:4c:eb:78:b3:f5:7c:83:ec:c3:
6c:bc:f9:b0:a2:1a:fe:0c:45:d1:2a:22:ed:2d:d7:
4a:32:52:be:39:18:0b:93:1f:3f:e1:3d:0d:2a:70:
df:14:6c:30:15:83:fb:69:f2:8d:72:95:d2:01:0a:
9f:01:55:a9:f0:ec:cc:1b:91:53:42:33:47:4c:ea:
85:49:b3:ea:8f:2f:56:1c:0a:4b:40:c0:10:b3:94:
6e:cb:2f:ed:88:08:4c:2f:a5:1d:eb:b7:52:7d:09:
35:fb:43:3a:cf:cc:c2:f5:c0:8d:c4:6a:8f:25:fc:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:C4:C6:2D:78:DB:CB:ED:C9:01:88:1E:5B:1F:92:66:3C:CC:7C
X509v3 Authority Key Identifier:
keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:19:b0:e0:f8:55:8a:6c:a2:77:20:ff:e8:77:68:09:06:9b:
e9:42:7a:22:35:65:37:00:6a:9b:b6:84:6d:45:a5:07:52:1e:
b7:f0:82:40:63:bd:33:79:37:0a:a4:b8:75:51:4b:37:40:13:
6a:81:ab:25:a8:05:b8:34:8f:a7:d5:57:51:d0:d3:39:b0:d5:
ce:ef:3b:26:86:8b:6a:2c:d9:55:15:05:a5:6a:03:b3:40:ee:
96:6a:99:e0:9a:1e:14:0f:9b:9e:62:af:ee:00:1e:32:a0:e7:
dd:ec:68:98:ce:bc:59:49:c5:36:73:20:62:05:35:26:87:f3:
30:b5:4f:73:93:3e:d4:b0:e4:d4:0a:6c:e3:2e:82:08:04:5e:
81:45:25:b7:0c:1a:cb:fc:06:35:82:ff:ea:90:0f:18:e0:03:
65:c6:8f:dd:3c:65:c1:5d:d0:79:56:1b:06:b8:f2:c8:49:c9:
40:80:1c:74:1d:3c:92:81:a3:06:eb:ac:15:a5:67:80:3a:f6:
7e:5a:8b:d2:52:93:a0:60:4d:83:10:0b:e0:a3:f2:fb:da:e3:
92:fd:b5:62:7d:ff:67:84:ec:48:06:e1:95:33:78:0f:a2:8a:
59:ed:48:9b:a7:99:29:d2:e2:ca:b4:56:69:d6:c2:07:9c:ce:
12:ee:e4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:46 2026 by rpki-client