Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: C3HlURW5xAO6XuV+ottTF5owCtTuG2IFw4V82f0gYK8=
Subject key identifier: 37:93:A2:7B:09:4D:F5:F4:C6:69:5C:53:0C:44:17:28:DC:C4:82:A0
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019D2696340511CBBD1E1089A57D1AB323F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 11F3
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: 2X0eJRVIcZT8uBddR9xsewyFsWwTlZdwreSkrqcHvxs=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:34:05:11:cb:bd:1e:10:89:a5:7d:1a:b3:23:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=3793a27b094df5f4c6695c530c441728dcc482a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b7:a6:e2:6e:25:26:52:d2:f6:20:1a:f7:8a:
48:2c:0d:56:a8:34:c7:ab:59:6f:18:ca:fb:dc:d6:
46:0c:ce:5e:46:ef:87:38:83:b5:5b:81:e0:cf:45:
47:7c:a8:9e:5c:2c:b0:0c:d0:16:3b:12:fd:6a:60:
85:8e:2c:15:da:8d:50:5e:73:d8:70:97:d2:6c:05:
ec:7c:8e:8e:5b:47:92:d9:0f:56:3d:35:9f:8e:31:
3e:66:1a:e7:e3:59:53:41:60:11:86:5c:75:cb:16:
1b:5c:05:fd:14:c6:15:1e:17:d0:4d:4b:a5:6c:20:
2c:98:29:bb:68:8e:49:10:32:89:a9:9a:51:a2:07:
08:d9:77:39:b6:fd:a7:e2:8e:b8:25:69:05:90:c7:
a5:c6:42:ee:31:85:e6:bc:dc:d0:68:54:e4:88:dd:
40:e1:0c:6f:c9:81:bc:41:15:87:9a:89:41:c8:36:
fe:48:92:88:9a:62:f6:b7:eb:de:f5:0e:f7:1f:ed:
40:2e:71:e0:0b:5f:a1:bf:bd:44:a4:d0:8a:18:12:
10:52:89:25:21:e6:92:ed:4b:96:e7:e9:2e:27:3c:
86:c8:3f:8d:fa:8f:2d:22:12:89:c8:5e:db:15:80:
0a:6d:11:8b:30:3e:e3:fc:4e:82:59:f3:59:7c:fe:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:A2:7B:09:4D:F5:F4:C6:69:5C:53:0C:44:17:28:DC:C4:82:A0
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e5:86:8d:71:e8:91:08:3f:6c:96:40:e2:ee:1a:1f:df:a7:
2e:44:d9:a6:29:89:b6:f2:4b:c0:0d:07:7d:20:08:d3:7f:30:
7a:3a:82:2e:d4:b9:f5:1b:d3:8e:2a:90:50:e4:a8:88:91:19:
f1:25:4e:b9:4f:ea:e8:94:f7:00:c6:79:82:4d:72:08:55:64:
46:55:11:75:31:82:fe:dc:9f:3f:b7:a1:99:33:91:3b:84:20:
35:2f:d0:09:3b:a6:88:1e:47:b9:07:7a:66:f5:60:e6:a3:73:
2a:13:b4:35:94:70:a3:6d:51:3d:9f:db:0d:5f:da:bd:04:02:
83:a6:cd:f3:6a:a4:97:cd:d7:a6:a5:b2:b0:18:f6:ed:ac:7f:
ab:cb:b5:fb:35:69:7e:40:85:e8:21:0a:d7:fb:da:52:8e:13:
a5:e4:07:47:5d:d3:63:91:69:64:21:5a:3f:2d:28:08:1d:64:
05:5e:cf:5d:5c:da:70:dd:e8:e6:1f:c7:17:ff:35:91:9f:07:
1f:2e:57:3b:48:e8:4b:d7:58:f4:f9:39:d5:70:96:9e:4a:1c:
e3:de:09:ad:bc:7f:34:fc:57:82:8d:86:e4:00:b1:65:6e:27:
0e:93:b2:55:ec:6b:9d:45:d0:2e:e8:26:66:7e:00:26:e6:16:
9b:19:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:10 2026 by rpki-client