Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: lSO14LF1fsB0fnxqF30XR+gH+H9gTgq4y7gllY+Co+4=
Subject key identifier: 2D:FE:61:1C:4A:CF:1F:F8:99:42:C1:F3:83:00:A4:E8:69:F7:03:AF
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 019D29CDB152EA22B40641EE6544953A6AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 10D1
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: ifdmtHmszF7bPx3cVTQ1wULA24LabNu8LQ2tOAyQenU=)
2: TIMsGWxsPv5h2_iID_QQlKqmZYM.roa (hash: OsADRBUZFn2mcORT2OqggIjDRoO4AdiVe59zJET+ub8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b1:52:ea:22:b4:06:41:ee:65:44:95:3a:6a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=2dfe611c4acf1ff89942c1f38300a4e869f703af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:dc:d2:cf:9a:39:2f:b6:be:d2:6c:7c:66:
ea:db:ad:eb:f5:e9:c4:3f:82:08:6a:81:f9:eb:96:
40:1d:4f:f2:c9:4b:09:bd:c1:1b:a5:7b:49:ca:7c:
61:5c:3f:a1:83:a5:26:af:06:7e:85:d9:28:ae:fa:
64:3b:ec:2f:c3:05:84:cd:53:c4:f3:45:18:ff:fd:
35:c1:9f:1f:cf:43:7d:78:70:fc:22:c1:a2:67:13:
95:22:c1:24:07:0b:0d:52:1b:46:bc:01:15:1b:16:
b9:2a:e7:ce:24:61:30:c1:2c:43:90:0b:d6:0d:05:
62:07:fa:e9:10:9f:1d:d2:27:3e:41:c3:1d:1b:16:
4c:18:a7:0b:4c:66:4f:5f:5a:30:95:99:1f:ce:88:
01:1f:72:ca:e4:cc:35:29:42:18:b3:84:72:78:ea:
78:ee:49:b7:43:2a:a6:bc:d2:4a:a7:1e:2d:ce:21:
3b:43:3b:69:f9:4f:f9:c7:b8:2b:6b:0e:a5:3c:2f:
a8:29:b3:5f:1a:bc:f2:65:53:e9:0b:20:1d:6c:c6:
81:e0:5f:5a:aa:13:6b:28:8c:02:17:b7:8c:8e:0a:
f0:cb:68:90:2e:bc:c3:df:dc:7c:ed:e0:e2:87:e7:
4c:0e:b6:c6:db:b0:1c:a3:3e:d5:f8:b2:6d:d1:68:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:61:1C:4A:CF:1F:F8:99:42:C1:F3:83:00:A4:E8:69:F7:03:AF
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:53:9b:fb:ec:10:c7:6c:58:cc:93:72:2c:9c:06:66:28:bd:
de:f1:f2:41:e7:cd:f1:07:69:a8:e6:44:36:94:af:1b:69:eb:
19:43:07:ab:26:77:48:3a:47:97:58:46:59:be:e9:dc:51:81:
17:e5:b2:3a:13:70:10:aa:f1:0f:ac:7d:0f:30:71:de:ae:a1:
39:0a:14:1e:ea:e2:7e:bb:a5:ff:63:f3:d6:85:80:0f:77:4e:
21:a7:c7:95:5c:47:da:8a:fe:42:82:0c:88:8f:31:96:3b:c4:
11:76:98:80:8e:52:30:b1:6a:f2:d2:d3:12:02:3f:0c:2c:20:
c7:6b:cf:77:30:a3:8f:73:ae:c1:5f:72:dd:73:d8:ad:5c:35:
a8:4b:7b:77:ab:b3:f1:9f:b3:01:65:56:23:56:ef:b2:c1:c5:
c3:c8:1f:04:fc:0e:07:22:b2:3b:29:26:01:c8:2e:ce:2a:34:
b7:71:04:1d:50:06:4a:b4:51:c0:75:5a:21:0e:75:23:54:90:
71:ba:8e:3b:1b:53:a2:fc:5e:bf:c8:67:46:35:96:f3:ea:02:
cf:01:51:e0:6f:ce:9c:d3:7d:17:37:61:72:65:ca:4c:0c:f4:
e6:82:df:35:5f:85:01:68:87:63:44:b7:38:a1:a2:fe:ab:e4:
e4:28:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:13 2026 by rpki-client