Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: 6zYzfCH/a5cQitMnazzOxNAFqexUpLr3dnD+SH0P5uc=
Subject key identifier: 67:65:36:6C:67:03:7B:96:9F:AC:04:97:FE:07:88:3D:76:5D:92:BE
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019D28F2AECBFD16D8D523576D1F755B96D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 1157
Signing time: Thu 26 Mar 2026 07:01:26 +0000
Manifest this update: Thu 26 Mar 2026 07:01:26 +0000
Manifest next update: Fri 27 Mar 2026 07:01:26 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: HAKfKlclI8Lcz2OY/uV0dzVGqgNTSNZxBtqxlI66ti8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ae:cb:fd:16:d8:d5:23:57:6d:1f:75:5b:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Mar 26 07:01:26 2026 GMT
Not After : Mar 27 07:01:26 2026 GMT
Subject: CN=6765366c67037b969fac0497fe07883d765d92be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:43:26:16:e7:b3:bb:e4:ef:df:c8:ef:5b:
2b:db:55:6a:35:35:cd:36:8c:b3:e5:c5:1a:44:b9:
1b:4a:38:e8:15:45:53:19:7f:b1:7e:d0:01:3b:0f:
b6:15:e0:bf:ff:d9:6d:a9:42:e7:4d:64:ff:94:02:
68:a8:f1:41:da:04:7c:0c:e1:d7:33:3a:85:02:b1:
9e:a9:b3:3b:53:9b:0d:53:a9:39:41:d7:00:11:64:
81:e0:f7:f8:93:d5:37:22:1a:cd:7c:75:54:35:02:
32:f9:81:f3:31:76:5b:7f:b8:82:b2:21:89:da:c5:
3b:78:b7:69:62:d2:90:d5:23:25:4e:fb:31:57:b2:
94:e2:cb:92:34:eb:64:a3:8e:32:70:ea:65:64:4b:
69:12:5f:8c:b1:4e:26:e3:79:3b:52:68:c4:ac:b1:
c2:4d:c2:76:9a:91:86:ac:ce:16:2c:fc:a3:ef:a8:
03:76:19:7d:f2:b2:72:2f:91:74:4d:dd:14:d1:53:
3d:0d:8d:3e:4f:b1:65:a7:3d:67:03:d7:87:ca:8a:
16:0b:d4:69:53:82:67:15:b0:f9:2c:4f:73:1f:39:
79:be:76:41:74:39:77:6e:91:03:d5:39:ab:5b:1b:
89:0f:92:e0:31:b6:c2:32:3d:cc:5d:68:9e:7b:1a:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:36:6C:67:03:7B:96:9F:AC:04:97:FE:07:88:3D:76:5D:92:BE
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:86:8b:c3:cc:cb:4a:17:81:c5:8f:20:27:2a:01:22:d5:bc:
25:ba:2c:81:da:8e:a7:41:fa:95:20:3f:17:a6:80:fa:33:04:
e4:cb:64:a1:d3:94:c9:c3:1f:28:53:a3:e3:e8:67:f9:13:c2:
45:e5:f7:f4:ee:c6:86:92:58:61:51:dd:fb:5a:ea:ce:8f:00:
81:08:d7:f6:90:82:f2:e3:6d:c9:43:ec:b5:55:18:8a:65:5a:
a0:a1:4c:c9:d5:c5:28:08:99:83:d8:a9:5d:08:2e:82:04:54:
73:00:9b:cd:32:4e:41:9f:f2:6c:8a:8c:8e:06:06:f3:9e:1c:
83:49:85:59:b0:26:39:b1:45:e8:23:63:91:e3:e6:b4:ef:d3:
a5:51:5f:94:d1:ed:f5:8d:ec:3e:ef:99:e9:8c:57:b5:f1:17:
d9:c5:9c:49:ed:11:c5:f6:cc:b7:cd:6a:72:fb:ae:9c:64:a0:
17:df:98:65:68:2c:1f:41:c8:14:58:1b:2d:f4:c6:5a:e0:7e:
fd:e1:00:3e:ee:af:bd:f0:19:fc:1e:8b:88:1a:90:63:17:0e:
50:00:43:f8:36:67:67:cf:7e:51:76:e5:44:6b:c4:d4:76:a9:
b4:a4:a4:0d:ce:23:b1:87:99:eb:fb:94:5d:45:ce:46:77:7c:
15:8a:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:50 2026 by rpki-client