Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: mwZlk8YWf5gaECHMayKGItbMlKNmVRXjvLKnWy6Yd0Q=
Subject key identifier: 63:B7:B3:4A:BB:CC:14:F0:41:86:35:2F:74:95:A0:0B:21:4B:1E:86
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019D284D9BB128669B69E8FEBC6A955629C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 1194
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: Cty5iYvywwErp2DPbjxLeG+5YZL9DgjoVy/ku1ZfllM=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9b:b1:28:66:9b:69:e8:fe:bc:6a:95:56:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=63b7b34abbcc14f04186352f7495a00b214b1e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:ab:2b:27:60:1d:0a:1f:4b:0d:c5:c6:36:
70:3c:7f:78:52:8d:42:b6:15:09:c5:66:70:b2:17:
6d:d0:5a:c2:cb:68:62:28:9a:9e:ea:bb:81:fa:77:
bd:89:f0:db:75:47:b8:d9:e7:16:18:fc:20:71:59:
8a:87:41:64:76:92:58:9d:4c:b6:4d:af:14:6f:dc:
7b:52:77:a1:7a:ed:60:3d:cd:c3:23:c5:14:72:a5:
1d:56:62:72:00:e4:51:48:ff:55:1b:11:5b:9a:2a:
b4:f9:03:63:63:81:73:5c:db:51:60:61:3c:de:97:
b7:6e:e6:3c:11:cc:99:83:8c:da:cd:22:53:af:e7:
70:df:f1:44:bc:ac:98:dd:1b:33:c6:65:23:4e:44:
c6:29:7c:bf:31:d8:9d:64:a4:0e:da:10:a6:a2:23:
e3:94:da:df:4c:19:22:a7:65:e8:b7:0e:40:56:12:
23:e1:e1:c9:5a:49:0f:c0:02:a5:76:1a:87:2d:30:
b5:a8:14:30:65:d3:64:ef:bb:5a:2a:88:9d:c4:60:
79:7e:6f:b6:ee:16:5c:6f:5d:2a:5d:8b:87:06:33:
53:e8:ee:54:cd:02:fc:a0:c5:c9:15:9b:4f:91:3a:
e9:46:5f:64:92:9e:b2:c2:36:5a:79:fa:ce:be:78:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B7:B3:4A:BB:CC:14:F0:41:86:35:2F:74:95:A0:0B:21:4B:1E:86
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:25:d0:7d:15:c1:d6:8e:95:fe:39:0f:e4:83:88:ca:8a:
52:09:dd:68:34:07:ff:ee:87:b7:0f:ad:3b:87:91:1d:2b:09:
9c:17:80:87:6f:42:d5:73:c7:cb:b8:59:af:c7:6d:7b:a4:74:
80:ed:22:9e:04:1e:fe:c7:2d:53:a6:8e:0b:6e:45:be:26:5f:
bb:03:a5:a7:ba:e2:74:1f:7a:ef:79:fb:9f:38:0e:55:ab:b8:
0d:33:15:86:44:9c:ae:a7:dc:e1:75:5f:85:a4:df:80:1a:39:
71:03:dc:e8:7e:7e:85:22:4a:c5:f2:b0:a5:cd:f8:73:75:00:
87:07:59:73:ef:38:6e:21:19:e6:05:b7:a4:a7:4b:c1:07:81:
e8:bd:97:fd:ea:f6:b6:1c:c4:c5:ba:94:e7:0c:70:b2:8d:b7:
06:ec:f3:e9:bf:10:a2:a2:71:9f:d1:28:d3:7e:a1:7f:1d:30:
ea:b3:88:cd:83:2f:8f:de:b5:e9:c5:31:b3:7f:87:03:a1:be:
18:ad:77:7b:83:4e:6e:22:0b:d4:a3:f8:4b:81:93:43:4f:84:
8e:97:ce:dd:66:ec:7c:a2:e0:ad:34:2d:85:a0:c9:3b:46:3c:
80:9b:f0:f8:d6:f0:e2:ff:fd:ab:34:65:70:01:59:6c:d8:ad:
59:23:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:57 2026 by rpki-client