Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
File: hTq7t9e8xKXFbpEu76wbC7BFUCE.mft (raw, json)
Hash identifier: skL+Ak/kF6z0EKM4gunEFOYtDs/yJsNKz5UFL8hOJAQ=
Subject key identifier: 6E:0F:C7:06:97:31:95:E5:11:D1:8E:92:B8:4C:75:1F:C3:A3:C7:14
Authority key identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
Certificate issuer: /CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Certificate serial: 019D26285AE9F6B66973D90828411B95460D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
Manifest number: 07D1
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: hTq7t9e8xKXFbpEu76wbC7BFUCE.crl (hash: L5HXxc7feEWeyy0fmG3pVJ7ujRtV50AHRcqckuhBZSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5a:e9:f6:b6:69:73:d9:08:28:41:1b:95:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=6e0fc706973195e511d18e92b84c751fc3a3c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:6f:48:35:e5:9d:4f:d0:78:2d:79:1c:c6:
3a:37:c7:f5:cf:d1:b6:bd:eb:c4:07:41:33:9b:51:
09:af:e1:1d:97:a0:a5:ef:90:c5:0e:a4:d7:e7:5c:
35:2d:61:dd:b3:2b:d4:3c:5c:4f:01:01:fd:08:01:
53:41:18:cb:7f:a1:c1:1d:87:bc:cf:ba:1a:a4:f4:
c6:80:4d:9d:f3:3d:f2:99:b6:65:f9:d5:6b:e5:01:
3d:7e:a4:42:3f:f0:28:49:f8:fc:00:75:78:2b:c9:
29:62:2c:dd:d1:04:82:d4:98:20:d0:23:81:6e:ce:
eb:4b:9b:4c:1a:50:60:06:33:6a:df:bc:1f:10:03:
4d:4f:b3:08:6a:c2:45:35:3e:d4:8e:bf:d1:2d:ef:
7c:7a:3d:62:a6:7b:b5:f9:39:d6:d1:96:85:12:03:
f3:b1:08:36:2e:4e:a8:88:6f:e1:d5:5a:4c:8d:64:
7a:43:4c:c6:a0:21:74:1f:60:a4:ea:6a:6d:01:01:
3a:0f:7a:12:2f:dd:49:3b:45:3b:eb:78:d8:1e:70:
e9:bf:79:ca:60:3a:04:62:15:32:db:f7:3d:8e:96:
fc:b8:6c:45:91:8e:24:3a:20:52:4d:30:f6:3e:a0:
fa:f6:b4:a9:e3:53:f5:6c:4b:26:4e:92:8a:d9:33:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0F:C7:06:97:31:95:E5:11:D1:8E:92:B8:4C:75:1F:C3:A3:C7:14
X509v3 Authority Key Identifier:
keyid:85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:84:50:fd:71:5a:7f:f2:ff:25:7a:f3:f2:a5:84:9f:c7:
73:0f:a8:9a:c5:5b:ad:a2:2c:fe:df:f0:51:02:06:c3:34:6f:
96:69:57:96:a5:a2:cb:f3:87:ca:8e:e0:2c:1d:9c:ba:cb:ba:
e4:8a:ad:22:64:bd:6b:40:fb:b1:60:ba:61:4f:d3:4b:42:71:
a5:3b:ba:bc:6f:1e:e8:54:c2:56:11:89:8b:d4:f6:08:c8:49:
d9:1d:18:9c:70:d2:94:10:6e:82:5a:05:72:55:98:00:3e:f1:
52:4b:1f:98:6f:96:c5:7f:4b:aa:1d:18:c7:a2:31:8d:d6:a5:
47:cc:33:78:52:fe:ad:15:0d:95:77:6d:32:f1:06:58:1a:23:
c7:f0:e1:04:7c:b2:a4:0c:9e:c7:77:2c:e7:34:f5:cf:7c:d4:
c6:4e:dd:f0:9f:94:90:83:63:77:54:d7:f7:58:19:c2:07:3b:
c3:f8:11:e7:8e:2b:90:0a:9a:2a:41:32:03:0d:1b:8a:27:28:
28:2b:a6:e2:64:f9:22:22:23:8a:c0:11:55:39:88:96:2a:d8:
f6:78:ad:5e:0e:b1:d0:5b:59:14:de:ba:ce:35:8c:97:ff:0e:
e7:71:de:5b:1c:6c:33:d8:2f:14:9c:8d:b2:31:c5:ed:5c:9d:
1f:31:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:37 2026 by rpki-client