Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: FV2gs3aEdPqCAZ0dAWtpYdDYWCmx2ARjer4RK3idkFo=
Subject key identifier: 42:A2:42:8B:4C:FE:9A:F3:00:37:6D:0D:AB:B3:B8:AF:6D:81:1C:43
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 019D26CD2A2179C8CC4DBECE99EA69C11A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0D7B
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: tAbS443Ku5jFjY2FdUpqmiN06SbLxHspfPiAf2vSruc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:21:79:c8:cc:4d:be:ce:99:ea:69:c1:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=42a2428b4cfe9af300376d0dabb3b8af6d811c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:fe:48:65:9e:c2:8e:3a:84:a1:1c:0d:48:
d1:81:a9:eb:64:32:f2:80:c0:a1:0b:02:40:df:63:
a1:ad:05:bd:c1:18:1a:99:e7:e8:98:16:9b:06:6f:
e2:ee:56:12:82:1e:61:26:97:0d:5d:16:0b:41:c0:
66:65:35:05:b0:0a:45:29:03:36:3a:5a:c4:35:76:
be:cd:5d:54:88:7c:4d:86:fd:23:0c:83:5b:c0:5b:
d2:57:98:98:d0:1c:eb:25:e3:18:0d:6a:38:32:e3:
a0:56:81:52:17:37:51:2a:b7:90:79:99:0c:38:fe:
39:d9:e1:4a:2b:63:99:a6:36:38:59:d9:d9:d1:44:
06:49:a6:8e:e4:0c:01:97:e5:3c:d1:3a:87:8b:a0:
03:a0:cf:43:c9:f1:89:7b:8b:93:61:82:4b:2d:bc:
75:e3:d2:e8:df:0c:98:8d:da:b6:26:25:9d:63:80:
bc:39:f6:d6:98:92:05:4d:c3:ce:f1:0d:57:19:c2:
77:58:61:5a:ce:e6:6e:b3:99:14:a5:90:99:fa:d7:
37:f7:6a:5f:5c:a2:19:4c:d6:7b:ba:d1:be:66:cd:
c1:0b:fb:77:1e:af:2f:fc:25:c0:07:86:49:0f:e5:
38:b6:4a:1c:6c:f2:61:f0:91:d4:68:fd:74:54:91:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:42:8B:4C:FE:9A:F3:00:37:6D:0D:AB:B3:B8:AF:6D:81:1C:43
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:1d:9c:f2:13:3a:a2:2b:b5:05:29:f3:b4:2b:c3:33:60:
e4:cc:a9:a9:b6:c9:74:fa:5d:81:2c:06:bd:bb:cf:a3:70:49:
5d:49:f0:d9:ab:86:74:19:7e:7f:cd:39:fd:86:46:c7:26:b9:
09:f3:56:92:03:d0:81:d5:c3:e1:6c:4d:2b:29:50:fa:11:74:
c1:ad:36:30:b7:38:54:e0:0b:d1:26:93:72:e0:f1:1c:8a:0b:
b4:12:53:38:01:ba:a9:1b:4c:31:1c:eb:d5:fa:cd:76:cd:80:
6b:83:da:8c:6c:f9:63:f1:6e:73:47:e5:c4:ad:33:c0:52:fb:
de:a9:78:47:53:49:6a:f1:30:8a:03:72:19:c5:a2:23:f2:c0:
5e:e2:ee:db:61:f7:c4:f9:64:84:69:88:ef:0f:4b:b6:e1:a9:
27:2d:1c:88:a5:49:ec:3e:71:12:44:fb:5f:be:19:7d:79:26:
98:84:34:e9:30:90:f0:83:13:50:bb:f3:a3:ad:6b:35:72:05:
e5:64:93:27:63:71:93:9b:ac:fb:ee:69:18:52:8e:2d:7f:d4:
3d:28:da:c6:75:91:16:a4:a4:42:19:45:7c:50:66:31:f2:5f:
78:b4:0b:d5:d9:f1:f6:f9:fe:18:1e:59:23:b5:2e:80:b3:e3:
62:65:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:50 2026 by rpki-client