Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: m64Opndi+39Ei2VTKBu4d9dnccdPnN7r78+AJGMXQ8k=
Subject key identifier: 86:15:C3:EB:B6:F6:19:4C:98:37:CE:D4:82:D6:BF:85:8B:EB:C0:75
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019D27DFEA847720E7E408B2BDAF77CF8D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0487
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: 2UYrUmA18Cmqpwqtnhi2/SVe0uoTi4p7CgbxZvBb08Q=)
2: Jx1BWFbTuF9FV-hQyd0tIt4ewU0.roa (hash: BNnlTPOOGSMbqGxtxHccPbvxqZSfaMHJ/endtfOYthQ=)
3: X5UiHYY55PMwPTyXsGspHuEoeOg.roa (hash: fIuqUPA3nhKBtyv99+9KTWnAb4PEF1c/hEupb4l2/JA=)
4: itvEUHoAaJl17faWlj6NT_FxL94.roa (hash: AjucNzluWbTiJYxrYlGErePUiK0Itei7jfiA2tx5Tk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ea:84:77:20:e7:e4:08:b2:bd:af:77:cf:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=8615c3ebb6f6194c9837ced482d6bf858bebc075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:66:fd:3f:cb:bb:e5:99:22:bf:cb:03:32:
03:12:73:e6:8b:cd:5d:75:09:f7:a9:11:9b:de:2a:
65:e3:86:d4:4a:6a:b0:b4:ec:60:0d:3a:93:bd:59:
45:74:30:84:0e:d4:8b:6b:1d:07:27:bf:17:19:df:
01:ac:82:9a:56:e1:35:d5:f1:61:c9:e0:03:31:05:
51:0c:6a:0f:cc:66:23:12:4d:37:fa:2d:2d:04:66:
df:95:9a:ff:b1:29:f1:25:40:04:14:07:f1:f6:b7:
9d:7c:db:1d:df:f1:a4:d0:a8:9a:59:ac:b6:69:89:
0d:83:a5:a7:df:dc:1c:07:a8:1d:8d:f8:48:22:c8:
65:f2:dc:eb:8a:11:a6:1b:7d:7c:c5:72:75:23:66:
fd:3a:6c:aa:1a:bb:3d:db:1d:10:e6:f6:6d:3f:47:
1a:8a:a5:3c:16:2b:f6:26:ad:ee:f4:52:e1:24:3b:
65:1d:48:57:b3:75:06:24:29:ff:8c:e9:4d:1a:58:
0d:60:d0:f1:df:9d:1b:fe:b3:b4:22:66:5d:ea:ec:
11:20:27:20:f7:b4:26:68:a7:8a:c8:be:c9:2f:5e:
1a:53:08:13:9b:9b:83:c6:72:82:27:f0:a0:de:ce:
89:ac:d1:c5:e5:98:50:97:04:27:23:58:09:52:a8:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:C3:EB:B6:F6:19:4C:98:37:CE:D4:82:D6:BF:85:8B:EB:C0:75
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:2f:66:6b:03:00:db:bc:80:a7:45:d2:db:af:05:2e:0e:
c2:7f:06:29:52:cf:11:8b:0f:02:f7:be:3a:9e:3f:12:89:f1:
10:1a:28:c0:88:b1:bb:05:af:2f:4b:97:20:2b:21:75:2b:40:
fa:57:01:2e:21:1e:24:8d:c5:c2:26:f0:78:e2:52:c2:54:26:
3a:e9:24:3d:5d:27:f0:c5:5e:8b:b6:a5:81:93:40:3c:fe:fa:
14:6e:dd:9b:ce:73:fd:8d:44:76:16:ce:dc:60:8b:1c:e5:8f:
ae:9d:2d:d9:61:cf:51:9f:47:f3:77:d8:d2:3b:61:5a:01:13:
4b:d3:0b:7e:5c:45:d1:75:25:6d:4c:9f:09:80:09:b5:ae:ed:
b5:df:d2:97:aa:4d:b9:13:c1:04:81:05:1c:55:76:55:bf:55:
91:1d:4b:01:12:4c:66:70:22:7f:3b:00:ef:d7:d0:2b:c8:a6:
50:40:4f:64:55:45:9b:9c:02:bc:cc:65:85:2f:06:97:03:a5:
42:56:a6:16:e4:8f:90:ef:4e:1f:b6:ab:f2:b0:61:a7:ac:ef:
29:db:20:39:9b:73:30:1f:90:76:46:2a:51:50:2d:44:27:71:
8c:4f:16:0d:dd:8b:38:ce:ec:a2:db:f3:0e:89:b6:95:36:40:
09:4e:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:30 2026 by rpki-client