Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier: Siby6b7Alr8nrlwt4bGEw/C/dCoQl98yUvnGHEZFwB0=
Subject key identifier: F9:7D:EC:F8:30:96:96:94:26:35:B7:99:3E:BB:D3:08:B7:B6:C4:A9
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial: 019D29CE5661E627253CF46690011E6F0361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:21 +0000
Manifest this update: Thu 26 Mar 2026 11:01:21 +0000
Manifest next update: Fri 27 Mar 2026 11:01:21 +0000
Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: 3UK2z6k87eu/7jJdUnmJbZgZYNlzvYfBgt+oDNvCJ3o=)
2: _SW-efIyZk8frPlLE8yBxAElkiU.roa (hash: iv2POwrNLwDCvtWPf5ONex0CqcvwAdFHiaQ1/D120FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:56:61:e6:27:25:3c:f4:66:90:01:1e:6f:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Validity
Not Before: Mar 26 11:01:21 2026 GMT
Not After : Mar 27 11:01:21 2026 GMT
Subject: CN=f97decf8309696942635b7993ebbd308b7b6c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:ee:c4:7d:f7:e6:2c:a1:95:ec:e1:b4:c5:
09:96:3c:76:a1:c0:c8:7d:36:8a:f4:71:ce:55:1a:
2e:9c:15:89:06:c9:40:15:f1:49:25:79:7e:75:03:
10:c1:f6:36:cf:0e:96:7a:7a:5f:25:3d:23:16:27:
59:fe:a2:f1:aa:b0:e7:51:44:04:d3:65:f9:f2:69:
ca:75:c8:33:cc:56:09:7c:20:ba:71:28:da:86:72:
8e:e8:cc:d0:32:c3:6c:9d:00:58:43:c8:bb:1e:9d:
9a:77:12:b3:9a:ee:b2:e8:bc:fc:09:02:25:a3:7c:
8d:b2:4e:8d:0f:5f:61:c3:c9:da:01:89:fb:cb:19:
0f:b0:0f:1c:00:39:9a:32:87:f4:5f:1e:8b:1c:62:
36:bd:2c:6e:1b:9e:d8:f4:2c:b3:9e:df:11:10:33:
6a:40:c0:ef:8d:1a:27:02:96:29:62:2f:08:40:e9:
46:f9:a7:64:d8:cc:9b:16:87:fa:75:66:6c:45:7a:
f7:d1:f6:d6:74:bd:e3:57:cf:89:15:dc:69:fc:37:
15:8b:07:8f:20:21:b1:cc:b5:44:24:c1:47:dd:32:
fc:f9:95:25:ec:b9:5f:4f:83:92:62:59:6f:2b:bd:
fb:57:82:d1:30:27:ef:16:4c:9e:b0:f0:a0:da:d9:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7D:EC:F8:30:96:96:94:26:35:B7:99:3E:BB:D3:08:B7:B6:C4:A9
X509v3 Authority Key Identifier:
keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b9:ab:eb:68:8e:7f:d6:55:75:5f:f3:3a:87:df:df:55:73:
68:3b:15:da:12:ce:6a:c5:bd:e4:10:36:cc:10:b3:11:db:1f:
18:65:1d:0c:0a:2c:1b:24:62:57:ba:6e:5b:3d:b5:f6:b2:e0:
f9:42:76:50:0f:2c:00:64:a7:d5:16:7c:c2:d1:b1:e6:0b:db:
70:9d:bc:e4:8f:b7:e8:33:ca:bf:01:0b:fa:78:a5:5d:03:9f:
58:07:f3:51:a5:5c:80:48:68:84:7d:ab:d3:f1:e9:88:7d:7e:
6f:8b:7f:f8:50:19:20:b6:70:f4:e1:90:5e:b5:6a:07:c9:f0:
a4:d8:45:69:8e:22:6e:3b:2e:ae:8c:48:f5:4e:56:e4:d3:ae:
a9:db:96:3e:6f:c2:b1:26:50:c0:96:25:c6:45:a4:64:a5:a0:
d3:d0:2f:b9:5f:6f:45:ab:23:21:07:52:bc:08:bc:a2:d2:aa:
88:3c:f9:a7:90:6b:5c:3f:6d:2e:50:cd:ad:70:86:be:1f:b4:
33:10:9f:75:5e:a5:fc:2e:b8:cc:8c:77:92:05:a3:fa:c0:c4:
82:e1:e1:c4:10:78:d8:a7:8b:c6:e3:dd:ad:3e:52:54:38:5b:
fa:22:da:9e:34:68:2f:e6:ae:16:97:64:a4:00:26:1b:56:b2:
39:a2:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:33 2026 by rpki-client