Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: XRsifoo+jDTv2JA+RrPx3RmCkxtg/1uENHPDeml5TqY=
Subject key identifier: C3:F8:FA:7F:0D:B1:03:F8:69:07:8C:F1:F2:27:3B:27:07:6E:5F:51
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019D284E03B4D15BDD603C145DF644F13474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: UKay8SXzRxf07GEc1IMcoOsKGkYLPNiGlC8oIpJ7mf0=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:03:b4:d1:5b:dd:60:3c:14:5d:f6:44:f1:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=c3f8fa7f0db103f869078cf1f2273b27076e5f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:b2:31:e7:7b:ae:3d:e6:33:dc:95:60:85:
bb:14:ca:fd:e0:d2:f3:02:31:20:54:e9:5a:dc:bf:
ff:bb:b0:d8:86:d1:70:2c:16:b1:c1:cd:df:97:0e:
a9:79:06:f7:3a:3c:0b:12:59:5e:7f:0b:92:f9:e5:
4c:3e:94:45:06:3a:dd:75:90:fc:c8:de:0d:77:d0:
44:f6:9c:4d:51:44:69:d7:0e:12:15:19:e5:51:8c:
21:f3:36:ce:52:ba:14:06:84:f2:0d:bc:4f:41:e5:
cf:76:d7:09:79:0a:ad:69:99:07:e9:8a:1c:e2:56:
3d:87:d4:bb:fb:47:98:d6:27:fe:53:00:e4:d9:64:
59:c0:b8:67:10:ce:86:34:82:36:16:15:b7:ab:e1:
b6:d4:a7:b1:87:ea:8d:1e:0d:58:bd:fd:ea:f1:b8:
25:38:27:b1:12:7a:66:69:b3:ac:8d:89:f8:44:03:
67:da:bc:64:e5:d0:da:39:f3:9f:2c:b1:22:90:5d:
37:c7:da:e3:7d:f3:f9:57:cb:60:72:d6:cc:98:f4:
0c:d0:fc:2e:fe:2a:f2:be:6d:13:7f:42:aa:71:d9:
53:5e:31:17:ff:fd:6c:42:72:6e:aa:5c:61:ba:75:
99:07:ee:42:b9:c5:5f:5f:b1:1c:87:62:25:5c:9b:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:FA:7F:0D:B1:03:F8:69:07:8C:F1:F2:27:3B:27:07:6E:5F:51
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:d8:b3:d2:f8:cb:80:ef:73:19:ff:e0:ca:55:48:50:fd:
3b:0b:ac:80:78:fe:9c:61:f5:39:df:40:c4:d1:1f:22:a8:b6:
1d:fd:5d:11:4b:ea:6a:a0:f5:f9:fb:23:7e:c6:b8:c6:b0:ef:
df:a0:55:cb:0b:5b:01:84:90:13:55:ff:3d:39:91:f0:00:19:
cc:2b:27:3d:ed:bf:40:2b:5a:6c:b4:0b:cd:8a:6d:67:20:f9:
04:a4:40:7d:6e:b0:b3:36:02:72:c2:51:c3:52:1d:8e:b7:1b:
d1:af:bb:50:b5:b1:18:f7:53:7c:46:88:b7:22:7b:0f:3a:5f:
73:29:d6:30:b0:9d:75:25:6a:cf:61:a1:18:5a:9d:e2:07:3b:
b5:98:c7:9d:61:ec:05:30:3c:4a:32:7c:83:be:1c:01:d9:d1:
c6:7d:6b:77:3c:ef:27:27:01:7e:e0:c1:db:50:12:68:b3:90:
95:66:b2:34:17:6b:d4:65:e4:ad:9e:79:bf:df:c4:39:3c:4e:
c4:e3:40:47:78:da:8b:39:ce:72:4b:e7:8c:08:21:b6:50:ec:
db:82:6e:1a:93:b9:89:f1:d2:f3:4b:eb:8a:18:89:14:e1:fd:
b4:94:bf:44:b3:a5:99:dc:13:1d:98:d0:5b:b8:7d:ff:d5:3e:
f7:c0:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:02 2026 by rpki-client