Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: u0mEa12WGDgVQMuelWqhJxzYcCtKzdqVD5W84J+MLE0=
Subject key identifier: C3:C5:70:1D:48:93:98:3F:E2:B3:47:B2:10:4E:13:17:28:FC:8B:34
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019D269670B0AC7199C0D6D341C347CB5FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 150C
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: izcUWnELHMOlLMpHLZFoycQ39NX4t3bxo17Lb7WLtZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:70:b0:ac:71:99:c0:d6:d3:41:c3:47:cb:5f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=c3c5701d4893983fe2b347b2104e131728fc8b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:d9:6e:cd:4b:0b:74:20:82:2b:7c:ee:b8:
f5:9d:57:fa:d4:ed:a4:60:f3:00:98:27:cd:b5:cf:
a1:d8:94:ba:26:95:b1:75:41:f6:3e:25:67:b7:84:
31:15:9d:86:1f:56:1d:95:18:9f:01:3f:d9:bf:6d:
83:8a:99:5e:9f:32:75:be:e1:3f:9b:bb:f6:b5:41:
ca:30:60:86:00:ac:4d:6f:7b:bd:87:22:38:8e:02:
f6:45:7b:66:4b:10:6e:b8:4b:88:4a:18:f2:2e:20:
74:8e:81:e0:e2:b3:e3:bc:04:1b:d3:63:25:b0:aa:
18:a0:dd:4e:76:22:80:f7:e7:1c:ea:ca:07:4b:b4:
8b:76:59:8d:e2:6a:e3:74:ef:72:8c:83:ad:0a:9a:
3e:bf:22:54:b5:39:01:67:7f:50:8c:c7:9e:6d:07:
b7:a8:25:2a:13:4a:a9:16:b4:11:f6:63:c8:8a:5b:
ae:cf:e3:eb:92:59:7d:e7:19:78:01:2d:ed:c9:50:
31:3f:4c:e0:02:ed:14:40:1a:ce:62:b3:ae:68:b5:
28:84:98:be:41:1a:4f:c0:1c:50:4d:96:5a:66:eb:
e9:1a:d7:2b:fa:d7:9e:75:b8:3c:d8:02:3b:ab:99:
41:97:d1:c5:2b:dc:d8:bd:2c:00:97:6c:33:1b:8d:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C5:70:1D:48:93:98:3F:E2:B3:47:B2:10:4E:13:17:28:FC:8B:34
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2b:59:9b:b9:1a:7a:52:77:18:a7:61:a7:d8:44:d2:dd:25:
b7:19:bf:da:4d:e0:58:f2:05:d1:6a:32:b0:31:13:e9:64:3d:
9d:ef:77:63:ef:ad:82:d2:76:9d:e0:1c:84:67:7f:96:d5:ea:
46:dc:0c:9f:eb:f8:ef:f8:ab:76:ab:4a:87:de:d5:03:60:30:
d1:b4:9e:50:00:38:23:8c:02:ce:bb:69:3f:46:0e:b7:8b:08:
b7:79:94:57:18:0c:1d:0a:1e:ec:19:12:b2:ba:44:f6:0c:eb:
cd:90:68:e3:8d:a8:c6:89:76:a2:c0:09:0f:36:dd:02:56:e6:
2a:94:05:e4:0c:86:b6:a4:3e:52:36:ee:1e:e9:8e:f4:9a:96:
30:aa:e0:07:8c:8a:9a:75:9e:bc:f5:41:f1:a9:22:d7:4b:d0:
c4:a5:b9:d0:4b:67:b7:67:fd:29:b8:2d:8e:8e:6d:82:8e:6c:
c8:07:a4:29:66:8d:26:51:14:97:33:a1:ea:40:29:f7:40:4c:
70:33:29:f7:50:e2:21:cb:47:8d:c3:8e:65:01:a2:9f:9c:4f:
6f:4f:59:72:04:e0:b9:fe:df:7d:a2:56:72:e7:9c:32:50:0f:
71:d0:d9:2e:f3:8f:63:4d:68:05:74:83:3d:43:87:df:68:90:
62:17:be:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client