Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: DK6I1TTyrRyXthyj+vsL0YLKBcIBg0/Hdi6Ragxv7rQ=
Subject key identifier: 3B:AD:BC:A0:1A:D8:2B:AA:23:B2:41:F7:3F:97:D5:9C:93:34:E3:9D
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 019D2704CAB358A9CB0B6FD01B094BBEAC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 11CB
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: aoR/98Y3BxcgBdpykLrA+GXa+I/EX+zM1r2wFOLZHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ca:b3:58:a9:cb:0b:6f:d0:1b:09:4b:be:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=3badbca01ad82baa23b241f73f97d59c9334e39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:93:02:42:f7:98:3d:e1:95:9d:76:b4:4f:
3e:ad:33:c5:7f:a8:57:32:33:6a:91:fc:24:5c:6e:
b4:62:e2:d0:eb:4d:78:ba:44:20:55:96:38:67:41:
8b:28:cd:e0:52:18:fc:2b:39:3e:e8:81:6f:b7:04:
02:cf:74:13:e2:d8:07:c8:9a:91:c3:dc:ad:7f:7f:
1c:95:7e:d4:ee:b0:08:75:51:40:57:13:9e:8d:4f:
5a:a5:f5:e8:5c:02:8b:f9:b5:45:6b:58:9c:21:34:
e8:d4:65:7b:50:ae:cf:8f:48:f4:4e:fe:e0:66:4a:
32:b0:9a:ed:37:63:4a:d8:d2:c8:fa:da:05:be:10:
99:be:03:ee:7f:b3:fc:d2:a0:68:db:14:2f:d0:dd:
7a:dd:71:2e:67:c3:aa:81:4d:c7:7d:82:aa:cf:88:
e8:13:5b:63:b9:43:e4:1f:f3:b2:f0:f7:6b:a3:33:
ec:ba:27:3b:35:50:82:aa:22:f4:0d:3e:dd:7c:18:
66:d9:d0:e9:52:21:37:28:f5:46:1a:e3:3d:c7:c9:
6d:68:fb:0b:c5:58:f3:76:46:b2:18:f6:7c:4a:6b:
06:86:32:b0:fb:88:54:47:a4:cd:de:bb:27:73:00:
04:f7:54:19:66:cd:53:3d:8f:9e:0f:4a:85:16:eb:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AD:BC:A0:1A:D8:2B:AA:23:B2:41:F7:3F:97:D5:9C:93:34:E3:9D
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b8:30:84:d3:88:2d:c3:bc:cf:e3:0e:a7:30:ad:15:6e:ec:
b5:eb:37:ce:e8:74:5d:1a:39:7c:68:82:bf:10:22:a5:ce:0d:
bf:13:ca:2e:c0:fd:9a:7e:98:74:cf:48:d6:42:83:e7:ec:79:
7d:d4:f5:6b:71:53:5c:3f:34:f3:0e:3e:8b:95:a6:54:58:cc:
3f:32:c1:56:3e:3c:2e:2b:5f:e4:49:f2:36:28:dd:40:5f:97:
16:3d:3e:4d:94:96:1e:bf:8a:ba:f9:f9:c0:3e:14:9b:93:92:
d8:e0:31:5e:73:c3:97:7b:ec:11:8e:c4:8b:93:20:b7:5f:76:
ff:90:9d:b6:c1:76:ea:9f:0a:e6:e6:5a:64:b0:49:00:58:02:
a3:d0:a7:35:4c:53:64:36:47:3b:eb:1e:29:fb:2b:ce:ec:01:
6d:70:b9:38:3d:6c:07:24:22:0e:1a:cc:19:64:d1:0c:2d:ff:
d1:a7:e7:08:aa:a0:82:ba:b8:1f:f2:1c:1c:79:c8:d5:da:a3:
e8:f7:0e:42:3e:5c:d7:d0:fc:65:e9:4c:f3:75:d3:5b:53:c1:
cf:37:3a:b2:90:c1:24:89:16:0c:a4:fe:18:40:07:7f:35:c2:
0c:61:1a:0e:0d:05:1f:d7:93:b0:93:f0:a1:6a:a8:6e:f3:88:
6c:ce:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:39 2026 by rpki-client