Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
File: HnUTyzn7z_6kHtLNaff0DoEaKo0.mft (raw, json)
Hash identifier: XqXG11tnkU9p2gwwxqbFCi2cfAM/3MHpU05rlZkX7jE=
Subject key identifier: 92:49:BD:0B:3A:09:4F:CA:FE:EA:61:CF:DD:D5:68:57:8A:6A:B8:C0
Authority key identifier: 1E:75:13:CB:39:FB:CF:FE:A4:1E:D2:CD:69:F7:F4:0E:81:1A:2A:8D
Certificate issuer: /CN=1e7513cb39fbcffea41ed2cd69f7f40e811a2a8d
Certificate serial: 019D3CAF61D0B03EC23E9501A84DDF21FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
Manifest number: 4C
Signing time: Mon 30 Mar 2026 03:00:19 +0000
Manifest this update: Mon 30 Mar 2026 03:00:19 +0000
Manifest next update: Tue 31 Mar 2026 03:00:19 +0000
Files and hashes: 1: HnUTyzn7z_6kHtLNaff0DoEaKo0.crl (hash: vxK1Tq2EeDDT6RDjcks8kes8HXCebEBbU8l7U3AzKAE=)
2: RVnMU5m2oFIkKnMiJVgkrlYB4GU.roa (hash: es4ZKZpOuiFuvFze9C2AINJukfvzpjuf2MSdmtD/880=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:af:61:d0:b0:3e:c2:3e:95:01:a8:4d:df:21:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7513cb39fbcffea41ed2cd69f7f40e811a2a8d
Validity
Not Before: Mar 30 03:00:19 2026 GMT
Not After : Mar 31 03:00:19 2026 GMT
Subject: CN=9249bd0b3a094fcafeea61cfddd568578a6ab8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:16:b3:4a:58:af:8a:d7:df:81:88:49:3e:
85:fa:ad:18:e8:c8:c0:e8:2b:e3:02:c0:ab:86:2f:
7a:4f:fe:09:fe:86:eb:c0:26:e5:74:67:53:28:93:
23:6f:45:f3:61:f8:6c:44:2f:63:22:06:88:3a:65:
3f:73:70:89:e8:ed:8d:29:eb:99:f7:ce:5a:29:45:
14:0d:52:ac:eb:fe:47:ea:25:8b:98:c6:6f:22:71:
b4:03:70:e2:2d:36:83:2f:8b:7a:c4:4c:f6:7d:2a:
49:2b:87:eb:81:1d:f8:9a:fd:8f:f4:f3:e8:53:2b:
d0:d9:7e:ec:63:27:3d:6c:b3:0a:44:cf:01:34:33:
04:32:c0:80:0e:dd:29:6d:42:6c:b1:4a:d5:7a:da:
de:0a:82:87:73:b8:d7:83:9b:8b:09:fc:1d:0c:81:
95:07:b8:e9:1f:84:db:5f:e5:81:64:0a:2f:eb:a9:
09:86:53:7e:16:a2:27:7f:e4:b3:bd:d3:ba:92:52:
03:2a:21:43:9c:a1:42:b1:4c:35:29:cb:a5:ba:ad:
1b:05:2f:68:b1:7b:bd:0f:aa:b5:cd:ea:6f:dc:db:
25:24:1d:b7:3a:be:cd:09:8f:42:cd:5e:de:93:9c:
3c:3e:5a:6b:92:04:4e:63:21:8e:54:50:83:9d:a4:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:49:BD:0B:3A:09:4F:CA:FE:EA:61:CF:DD:D5:68:57:8A:6A:B8:C0
X509v3 Authority Key Identifier:
keyid:1E:75:13:CB:39:FB:CF:FE:A4:1E:D2:CD:69:F7:F4:0E:81:1A:2A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:ee:20:14:71:0e:e0:42:bb:66:aa:64:24:31:ec:a5:26:
b0:76:1b:ac:3f:67:1f:e4:c3:3c:e8:ad:a9:8c:df:dc:94:71:
8e:54:94:68:c6:51:d7:73:86:04:21:e2:11:2f:58:0d:b1:f0:
36:4e:b9:f9:45:e3:8e:34:61:6d:7a:4b:94:e9:39:06:d6:db:
69:8a:14:fc:d5:1d:1e:fe:33:b1:a6:a5:94:d7:4e:2f:82:68:
dd:d9:2c:12:30:98:6a:fb:51:87:a2:25:6f:a3:a4:34:67:21:
a1:23:6f:08:2a:d8:e6:2b:81:2d:42:be:0e:c7:af:32:23:fe:
a3:f1:ca:1d:a4:97:23:38:ac:8c:b6:60:0e:11:8e:88:21:cf:
c8:bf:51:bc:69:d3:35:9a:0f:d4:ca:f5:f1:d3:70:47:57:94:
d6:70:95:ad:e1:54:51:3b:cb:98:d9:6f:77:91:cf:a7:03:57:
a3:25:8d:db:2f:07:5b:57:fe:30:4e:de:fd:4b:40:44:67:f2:
1c:c0:b1:af:21:e9:3e:3f:85:e5:05:91:62:4e:e7:2d:f0:77:
16:be:8c:ae:c1:3b:71:e5:da:49:67:16:3a:a1:1d:2b:02:9d:
b5:ba:f3:14:69:d5:70:54:70:fb:e8:62:e8:36:95:f3:1d:f8:
69:5d:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:21:32 2026 by rpki-client