Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier: xtArCJhQ+g1LxJ3dbsNPf5U1tKj7MuNrRTdXghCaAxA=
Subject key identifier: 43:2E:70:9F:0E:CB:96:DE:AC:F6:BC:55:BA:69:D1:51:6A:67:2D:3C
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 019D284DFB67EEB4095309A0C715584034CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number: 15AB
Signing time: Thu 26 Mar 2026 04:01:32 +0000
Manifest this update: Thu 26 Mar 2026 04:01:32 +0000
Manifest next update: Fri 27 Mar 2026 04:01:32 +0000
Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: okDwrXC2x1Plqk4SzAP08tWG6NSjrflRwPUWE5O5UbA=)
2: sliXU2u2F5b-dxDpfrgoAvWB8tc.roa (hash: shJia0FcMyfJBOItG4MpW4lD3TG/16YLivfvP64r49Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fb:67:ee:b4:09:53:09:a0:c7:15:58:40:34:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Mar 26 04:01:32 2026 GMT
Not After : Mar 27 04:01:32 2026 GMT
Subject: CN=432e709f0ecb96deacf6bc55ba69d1516a672d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:13:c2:5a:3a:64:89:22:78:08:c1:2d:4d:
21:ef:5c:b2:10:d3:ea:25:50:1f:2d:d4:84:b6:d2:
b7:f0:b1:60:e9:e7:ef:2a:68:74:f5:2c:31:ef:8d:
96:7e:75:20:3b:69:27:0e:97:b7:dd:f9:2b:6c:33:
99:d5:81:db:4a:aa:04:57:99:32:dd:ca:a2:0e:9b:
8b:6f:00:e5:33:84:22:04:c1:d2:e9:7f:9f:42:be:
5d:46:8e:ca:66:5f:5f:bc:a2:9d:f0:32:8a:97:ce:
9a:13:13:23:a3:4f:a3:0d:00:ad:bc:25:bd:e2:65:
0d:5d:29:d2:4c:15:b9:03:d1:d9:92:90:8c:a0:cb:
4b:7e:71:f8:36:ba:b2:98:95:ff:ea:1d:30:70:81:
4b:a2:00:b6:be:de:2c:f0:77:95:bc:9f:7a:d0:d5:
72:4a:56:0e:0a:30:0b:95:59:9f:43:2c:24:9f:1e:
ce:f3:86:cf:5a:33:fd:6b:92:4e:8c:68:a0:80:05:
a7:b9:a6:fb:87:0d:f3:04:c7:bb:b3:8a:0f:54:0b:
e1:e2:fa:73:19:11:df:f1:90:a0:f3:10:06:17:96:
da:78:40:62:c7:45:f6:60:21:cf:42:d7:ea:cb:6e:
e9:f2:68:b5:0a:f9:28:99:2a:72:51:b5:79:41:3d:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2E:70:9F:0E:CB:96:DE:AC:F6:BC:55:BA:69:D1:51:6A:67:2D:3C
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c7:82:95:36:8d:c2:1f:ea:ec:b4:65:f9:30:37:77:7a:9b:
32:3e:27:7c:26:07:5a:39:b4:08:a0:e0:80:62:8a:91:c9:c7:
2e:ac:13:39:3f:77:e6:bf:fb:1c:21:50:7c:50:b7:2d:18:20:
3e:2e:ea:37:6c:1f:b2:31:d6:ad:3a:a5:69:71:d8:6e:08:e4:
2f:db:10:91:ca:96:c4:c2:7e:4d:85:2a:95:5d:40:9d:94:fe:
b4:70:44:32:5a:2e:20:c2:f4:e7:4f:90:e6:a0:61:81:c9:8f:
d3:34:47:b0:69:ba:a0:ba:6e:62:bc:9d:a5:e3:f7:8a:6b:75:
e6:86:fa:44:94:73:61:15:13:05:6c:14:38:e9:2d:89:ec:26:
20:03:4b:02:42:d2:48:aa:7b:e2:e0:b6:02:1b:6e:c1:ef:86:
a1:ed:5e:50:ee:9e:3a:b8:25:a4:d2:98:f0:96:66:3d:d3:99:
15:6d:c7:7c:82:22:f8:30:e5:04:93:49:a6:f4:b4:c8:71:25:
a9:f3:f7:96:62:3b:fe:1a:62:24:ad:7d:e2:3a:22:87:f0:f8:
46:dc:1a:30:0a:6a:35:ee:f3:07:68:d7:c9:f0:82:6a:5d:14:
a5:06:53:5d:3f:62:36:ff:14:19:f7:f2:02:96:af:34:75:f8:
9c:d7:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:35 2026 by rpki-client