Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: ShpIWzQyLHFjFQJosVirIm4rMFnv8fh1b6f+4/t3nU8=
Subject key identifier: C2:90:16:A8:25:F5:AA:95:34:B9:00:53:0E:2A:03:26:58:2A:36:8C
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 019D265F6752F3C8F1748052C34CB1B04B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: hpxQP42RCD0glXrMTq34IlHJHhlnCvREpheTheme5Us=)
2: ywg7v4iBU0yIbUtglY4SRtwYiqQ.roa (hash: TUFNnELLTk5SmjwLZeWsU1OrlDE0M2b/yRf/bTeimQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:67:52:f3:c8:f1:74:80:52:c3:4c:b1:b0:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=c29016a825f5aa9534b900530e2a0326582a368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:9e:ae:31:7e:d3:99:f3:2d:e5:e5:db:8a:
8e:a0:38:75:61:fb:f8:31:41:85:5e:bd:23:5f:d4:
fe:b3:15:9a:40:0a:2e:03:01:63:a5:24:a2:dc:9d:
5d:93:23:31:bc:de:fa:85:8e:7b:1a:40:b8:5f:0f:
5a:94:59:7a:20:ba:2a:7e:21:82:ab:72:41:0d:c3:
48:f3:0d:ae:e2:13:88:03:da:ea:6d:28:90:c5:ae:
0f:16:7a:e3:53:55:54:b4:60:93:af:d9:2e:8c:35:
c7:b0:3f:c9:42:12:7c:64:a6:6b:9f:e6:cb:6c:3d:
74:f6:36:a8:4e:4e:f4:20:7a:c7:34:1f:78:8a:1f:
bf:a6:cb:b2:f9:32:64:4b:ea:63:99:7d:19:84:89:
2e:08:48:83:4f:ec:5e:1d:e2:a2:d5:1c:52:fb:e7:
d0:ab:9c:ad:72:8e:5e:9d:34:54:ba:c8:a7:26:69:
f0:a9:09:55:98:b3:ad:47:d9:b5:a9:d1:4e:46:a0:
fd:b6:0f:5c:85:ca:c8:3a:6e:53:f3:a0:4a:05:83:
75:58:02:06:17:cf:6c:c9:17:b8:e6:a3:ce:7d:72:
01:f7:16:c2:bf:f1:a2:95:c5:19:39:d8:87:63:fe:
f1:22:40:47:2a:08:30:7b:83:69:2b:35:ba:e0:3a:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:16:A8:25:F5:AA:95:34:B9:00:53:0E:2A:03:26:58:2A:36:8C
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:b3:ac:42:e2:57:44:05:b0:85:1b:cf:d4:db:9c:49:8c:
ba:e2:2e:a5:a0:21:a0:d5:78:b1:ba:a8:35:80:95:c5:48:18:
9a:d0:7a:fb:15:9f:1d:47:a2:50:8b:96:5e:c5:38:ab:da:41:
72:22:8e:31:a0:58:0a:ec:94:be:37:cb:3a:2c:9a:cb:40:0c:
d6:f9:a8:56:5a:d3:aa:9c:90:09:39:0e:c7:f0:ed:27:c4:f6:
17:7e:83:30:af:c4:d8:53:cb:0c:7f:d8:a9:18:ca:c0:05:f2:
9e:2d:11:94:b6:c4:e4:0d:f9:8f:d1:24:ce:09:a5:91:76:8a:
3b:6b:ba:75:f5:4f:b1:af:a8:73:e5:62:3b:32:d7:e1:b5:8a:
33:31:0a:7c:8d:3b:c8:c8:8f:5b:5b:68:d1:94:a7:ab:25:c9:
a8:9d:86:ed:c2:15:14:b5:86:19:67:98:68:cd:1e:39:ca:ec:
c6:8f:77:0e:be:9c:32:f1:00:ad:b6:82:f8:ab:c8:02:b9:bd:
6a:4d:35:f9:2d:6b:05:41:ba:d0:91:21:78:09:7d:50:33:51:
ee:bd:32:71:fb:c1:34:b2:bd:4a:87:e4:4b:69:ae:a4:38:1e:
8b:ec:e1:3c:87:94:96:5b:12:13:a6:0a:b4:04:6c:38:8d:2a:
c4:94:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:54 2026 by rpki-client