Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: 4U5CD3bP/UVQebcjFTJV2u7FgKH2899BHPEAmAecIg0=
Subject key identifier: 2E:91:A4:61:93:E3:6D:E5:91:CE:E9:6E:C9:CE:40:83:27:EA:1A:D5
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 019D25BA301D48503F604D88F46EC22D5A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 181E
Signing time: Wed 25 Mar 2026 16:00:51 +0000
Manifest this update: Wed 25 Mar 2026 16:00:51 +0000
Manifest next update: Thu 26 Mar 2026 16:00:51 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: isuinlKu82LdFm4Q9JbNRT3ofj+gVmFMusAZtQkMFFo=)
2: tlD44Wx1jNalDCHqe8b7_I-CeqY.roa (hash: CC0WAHVS98jNAUQJOBCkbiv7wZ63BOatDHNReSwvX5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:30:1d:48:50:3f:60:4d:88:f4:6e:c2:2d:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Mar 25 16:00:51 2026 GMT
Not After : Mar 26 16:00:51 2026 GMT
Subject: CN=2e91a46193e36de591cee96ec9ce408327ea1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:70:c8:18:94:1c:cd:e4:d7:67:02:46:63:
fa:f7:6d:e0:f6:0f:fe:34:98:5f:d1:fa:81:b0:60:
72:f6:67:62:4e:54:ab:e5:08:1e:6f:52:15:d0:35:
ca:3b:a7:4a:44:79:82:30:bf:23:dd:43:ae:49:40:
29:11:f2:2a:f5:8c:cb:57:52:18:cd:30:10:67:8a:
1c:14:61:78:8d:fb:a8:d9:24:4d:41:97:0f:80:c9:
ea:81:14:08:92:96:c6:f8:99:97:6b:9b:31:8b:c6:
8b:91:d7:05:08:c3:4b:a3:99:d0:06:f8:f8:73:e2:
52:a5:06:62:b2:87:66:f2:b7:36:4a:86:de:08:4c:
63:8c:e0:d9:68:28:58:79:53:bf:b8:91:19:09:52:
f4:6c:ac:b5:b8:e6:e6:7c:96:79:5a:59:1d:67:ff:
f7:85:b7:77:f7:6f:b6:43:29:00:a1:57:b9:02:1f:
74:9a:06:c9:2a:3a:b0:7f:d0:15:58:e6:52:8e:a4:
35:41:b6:21:58:6e:9a:ec:eb:24:3c:cd:62:87:01:
38:a5:f5:ad:de:3e:76:90:e8:5c:85:e0:86:db:f6:
e6:88:ac:9c:ee:80:53:62:c3:40:de:84:22:10:74:
a5:00:c1:33:46:54:48:30:40:f0:2b:fc:35:90:4c:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:91:A4:61:93:E3:6D:E5:91:CE:E9:6E:C9:CE:40:83:27:EA:1A:D5
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d2:46:a2:c1:73:bd:14:ae:5f:55:cd:98:9c:15:f6:98:85:
8a:8c:e9:06:cc:48:0e:c9:20:a5:9a:f6:96:c4:4b:46:39:12:
b1:bb:00:25:12:87:53:0d:bd:38:17:f1:5a:2d:d6:f6:c4:b9:
69:04:31:76:dc:7d:e4:fb:b2:ff:8a:a7:65:58:47:c5:75:98:
af:0e:a4:75:0c:86:f2:c8:3f:c9:a0:45:d6:43:05:c9:60:63:
af:8c:2b:4f:7f:d8:95:38:0b:47:96:fb:35:7c:22:06:4c:97:
3e:4e:cd:22:c5:ab:53:a0:a1:2e:51:87:80:33:b8:16:a3:ed:
6f:f1:d8:d2:0c:64:fd:31:4f:fc:93:a8:0f:72:5b:12:e5:8b:
97:9e:67:11:d4:9b:f6:be:9c:e6:04:3f:6c:79:b7:e0:30:e6:
d9:49:22:d5:21:1e:d1:f4:2d:ed:f8:e2:cf:95:0d:12:b9:61:
0a:79:35:a6:38:5d:5b:d9:7b:2b:7e:df:16:96:9b:aa:69:61:
4f:0c:23:15:18:4d:ae:d7:46:16:19:7d:df:65:30:d8:77:d3:
da:22:5b:41:ca:50:7c:01:be:c8:b5:cd:92:9a:01:98:d8:f2:
ae:77:73:ce:ad:34:ce:a9:11:64:b4:a8:40:34:b4:83:f2:02:
79:cb:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:14 2026 by rpki-client