Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: dUkWlENfzHfCHgRwxuqf1M+AYkR9KyvW91ONWjAa7IE=
Subject key identifier: A3:98:2B:27:82:F0:E8:6C:E8:FA:CC:08:E5:8B:E6:AF:2E:32:B7:A4
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 019D28BBC873D7F142EC301A43EC3F3EEC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 148B
Signing time: Thu 26 Mar 2026 06:01:28 +0000
Manifest this update: Thu 26 Mar 2026 06:01:28 +0000
Manifest next update: Fri 27 Mar 2026 06:01:28 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: ZCBs4/cgjKNZrfSDjHYEG+HllR0K2J1MiKUAPdCaMQY=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c8:73:d7:f1:42:ec:30:1a:43:ec:3f:3e:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Mar 26 06:01:28 2026 GMT
Not After : Mar 27 06:01:28 2026 GMT
Subject: CN=a3982b2782f0e86ce8facc08e58be6af2e32b7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:2b:d7:be:83:b1:47:78:71:1b:6b:34:7b:
4e:ba:00:b7:a9:00:95:b8:05:56:5f:08:0d:1f:cf:
ae:f1:88:63:8c:b0:5c:1f:a3:92:64:3d:00:98:86:
f3:e0:94:38:24:80:6f:53:26:11:6c:dd:06:91:0f:
47:ba:f7:28:a3:c3:a0:5f:64:fa:05:78:73:02:6a:
4f:3c:01:95:4a:31:ca:0a:b7:d9:17:b6:b5:dd:ce:
da:67:af:66:bd:76:24:c9:e2:2f:21:5a:ea:c7:b1:
2c:08:2a:2b:c9:c7:59:08:08:56:ec:0e:1a:91:35:
63:08:74:5f:52:ad:e3:ef:7e:40:0a:5d:06:d7:c0:
c7:7d:2a:93:79:34:39:f2:d5:bd:cc:cc:2e:ba:11:
8f:8b:a3:e8:69:84:53:3d:c6:eb:12:21:5e:f5:83:
fc:bc:fb:7a:aa:9a:09:64:f8:ff:21:e6:a9:96:92:
98:3b:29:f8:1a:3d:05:74:55:e6:f2:32:25:e4:ac:
c2:b0:b3:9d:55:f1:45:df:da:78:fb:53:43:62:fe:
1c:c7:4d:8f:dd:69:8b:7b:22:8b:1a:92:65:0a:42:
6f:cc:f5:a0:ec:a3:62:d7:b4:19:59:a7:a6:a4:07:
4e:c9:41:99:30:48:88:8a:7d:db:3c:fb:61:35:ce:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:2B:27:82:F0:E8:6C:E8:FA:CC:08:E5:8B:E6:AF:2E:32:B7:A4
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:44:02:f2:bf:30:0c:4d:e0:70:c7:5d:f0:d7:2c:c1:98:20:
fa:37:51:3c:97:e0:52:1b:f8:fd:62:65:62:35:b8:f7:1e:ae:
5e:a2:1b:07:46:23:21:38:e9:cf:8b:f8:f3:b3:a9:fb:01:70:
57:f3:90:e5:db:ee:a9:bb:a1:aa:ac:cb:75:79:6f:2c:4d:56:
19:62:40:cb:03:25:a0:da:2e:7d:50:b9:17:bc:51:46:98:3e:
81:39:b0:c8:4a:7c:37:cb:b7:c0:5a:17:d6:df:c6:1c:95:81:
90:8b:b1:9d:ee:6d:4e:ea:83:35:a9:e1:13:a9:88:88:99:66:
25:3b:73:d0:0f:1e:c3:05:f4:46:5d:da:4c:0b:f2:8e:49:c1:
d3:18:a0:08:5d:0a:bd:e0:42:9f:38:94:fc:a2:7a:97:87:86:
62:14:be:0b:0a:9f:48:2f:4c:1f:95:05:a6:a6:00:f9:d8:07:
0e:07:7c:21:48:d8:37:10:53:3a:f8:ca:42:47:05:3c:c5:42:
ce:40:dc:00:2c:ba:78:3c:f8:4e:35:b4:c5:50:77:29:82:d9:
e1:dc:a3:8d:8c:98:bc:5d:4b:52:d6:f0:8e:bd:1b:af:d7:7f:
b8:6b:aa:2c:6e:12:78:2f:65:6c:2c:95:d1:de:01:84:25:fd:
bc:b5:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:28 2026 by rpki-client