Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: QpXIt83ezmuiTXnauMkzjwdcKYeFGNTvHLIbsfhoMyQ=
Subject key identifier: D6:57:06:60:AD:8F:35:F1:8B:2A:1E:70:26:58:AF:62:75:09:5D:93
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019D258428ED3232BCABDD739845337FAA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 1434
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (hash: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=)
2: D-r3D7TjflJW1amM5h7I8MR0oUk.asa (hash: z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=)
3: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: 6QV73QFdq2v+kclY/23TzcEpkZf3jM1Vxi3wvFnt65w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:28:ed:32:32:bc:ab:dd:73:98:45:33:7f:aa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=d6570660ad8f35f18b2a1e702658af6275095d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:6f:e1:6a:59:12:58:2e:98:0f:9b:55:95:
e5:ed:b1:63:89:fa:d7:17:f6:81:d1:72:bc:ae:8c:
04:56:b4:e8:23:5d:90:32:08:ba:82:30:2d:32:24:
c6:29:b3:5e:52:50:f0:03:22:87:24:39:36:b4:45:
0a:0d:11:83:f0:f4:a6:80:6a:69:11:50:7d:b3:7d:
56:8f:12:97:06:c0:53:8d:54:ca:6c:c8:48:84:d3:
88:57:95:46:09:f3:26:a6:dd:11:02:30:9e:aa:08:
d2:73:bd:19:40:76:13:d1:00:db:80:1c:0e:f7:0f:
14:84:ea:d3:e3:4c:ea:e6:6b:63:14:a4:6c:2a:00:
9f:b5:79:ae:ee:31:8a:ed:e6:b4:bb:dc:90:33:72:
06:57:4c:b8:1a:b8:7b:ef:16:46:c2:e9:6e:33:99:
c6:41:d6:39:50:a7:dd:1e:bc:c7:76:51:9c:24:30:
ce:ec:9c:7e:49:80:ca:bd:9d:25:8f:88:17:1f:2e:
ca:77:10:96:27:29:bf:fd:46:e7:aa:a5:33:fa:6c:
81:71:6a:ec:95:c1:05:6a:21:bd:bd:da:9f:78:fc:
b1:bd:08:57:6c:ab:8f:c5:e1:78:4c:79:1c:41:51:
76:7a:41:ea:6e:bd:4b:1a:c9:be:68:d1:6c:d5:41:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:06:60:AD:8F:35:F1:8B:2A:1E:70:26:58:AF:62:75:09:5D:93
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b8:2e:cc:18:9e:1a:90:3a:be:e3:d9:cd:c0:e1:f8:a5:d7:
3f:4c:fe:a6:86:4d:0e:f0:10:5f:39:37:6f:4d:93:1c:02:a8:
a6:07:bd:51:4b:ec:58:ee:d4:0f:24:aa:a9:88:c3:93:e0:74:
70:37:8c:4c:f2:bf:fa:03:fa:da:42:89:0c:08:33:59:be:26:
a7:52:58:16:4f:03:5e:56:63:c5:d3:86:9f:e6:34:ce:8b:8c:
4f:7d:b9:5b:b0:a9:48:b4:a5:88:66:ac:6e:aa:9a:b1:00:8d:
e6:64:7f:8b:0b:65:b8:06:81:58:36:85:6e:e4:5a:7a:9a:bd:
bc:82:a8:84:3d:89:b3:a1:45:fb:0e:21:59:af:c5:7b:a7:c3:
65:3a:1a:a4:d2:87:ca:dc:30:cb:5d:d7:43:a1:07:27:ef:5f:
0d:ac:0b:fd:32:c2:6b:57:7a:de:1e:0a:e6:0a:71:92:d1:33:
81:46:2d:f3:66:f3:f6:51:3a:e6:3f:76:7f:19:2f:a6:0f:af:
e1:2f:fe:fb:f0:bc:b0:1e:80:ee:b3:f8:f4:a0:6c:8a:ba:68:
de:15:a7:0e:04:67:4d:d1:3b:d5:08:55:52:1d:33:6d:5a:ea:
0f:23:4d:78:4f:9f:22:f4:37:ad:0c:62:93:a9:1a:12:6d:fe:
96:d8:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:33 2026 by rpki-client