Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier: +oa3npshhuxItP/ZXzgx1L9AV1TVX6AIB96O2HIMqUk=
Subject key identifier: B3:EF:1E:BB:66:BD:28:10:2F:F0:E7:FA:7C:B2:81:EC:30:CA:29:D5
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial: 019E1F10C26DE7CA8BEA48C225233F7F2077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:00:52 +0000
Manifest this update: Wed 13 May 2026 02:00:52 +0000
Manifest next update: Thu 14 May 2026 02:00:52 +0000
Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: +tY/9X3qTjePtOtsORslGK3kS/KVYCo1RDD/x7KL9VI=)
2: _SW-efIyZk8frPlLE8yBxAElkiU.roa (hash: iv2POwrNLwDCvtWPf5ONex0CqcvwAdFHiaQ1/D120FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c2:6d:e7:ca:8b:ea:48:c2:25:23:3f:7f:20:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Validity
Not Before: May 13 02:00:52 2026 GMT
Not After : May 14 02:00:52 2026 GMT
Subject: CN=b3ef1ebb66bd28102ff0e7fa7cb281ec30ca29d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:9d:06:ae:72:b8:66:d4:22:d0:e4:99:fb:
87:67:07:c5:db:ec:eb:c8:14:cc:64:73:0a:06:44:
31:1e:c4:62:52:36:ef:2a:09:22:16:a3:78:d1:d9:
6d:f6:ad:6a:7c:56:f7:79:36:c3:15:95:04:59:3b:
d3:21:a5:08:2b:65:db:2f:1d:99:db:b4:eb:8f:67:
5f:eb:53:62:38:a6:cd:80:63:65:a6:51:67:b6:e9:
12:28:d9:d1:21:ce:8f:50:15:d3:d4:75:db:1a:a7:
3c:97:f3:8b:6e:8a:98:2f:47:4e:b9:2d:53:94:3b:
04:ed:9a:ad:1d:68:0b:d6:52:f5:b4:80:12:41:5a:
4a:6f:43:12:26:f6:b9:e2:09:e6:95:20:f1:a9:8d:
d6:b3:15:c2:15:c1:7a:03:b2:68:f0:cf:85:a7:37:
a3:dc:33:3b:03:93:11:39:45:ed:89:f3:c9:57:62:
71:ed:52:cd:83:de:07:8c:38:53:1b:da:d5:30:64:
55:4f:62:33:70:31:50:6d:b6:eb:05:7b:d9:a2:53:
88:e5:f2:aa:00:c2:2f:46:4f:0e:3b:a6:13:92:26:
57:5c:c3:67:b7:9f:f1:31:dc:f5:63:29:9d:a0:b9:
0e:36:83:81:9d:b4:be:58:44:b7:86:14:a5:f0:70:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:1E:BB:66:BD:28:10:2F:F0:E7:FA:7C:B2:81:EC:30:CA:29:D5
X509v3 Authority Key Identifier:
keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:01:77:e9:78:48:2e:14:b4:d2:b1:aa:e0:40:d7:4f:49:
dd:58:93:67:45:8f:66:8f:51:38:ab:7d:dd:55:0b:89:4d:6a:
07:17:00:c9:e7:e2:ff:d6:3c:c7:f7:c7:ab:fc:ce:91:3c:af:
32:28:57:d6:2e:a2:b0:2d:1f:2b:82:a6:8c:95:f3:13:cd:4a:
de:bd:7f:02:53:af:0a:0e:24:20:06:2a:f2:a6:b9:35:59:36:
7d:e1:2e:b9:fc:cd:4b:7c:1d:c1:b8:fc:02:43:1e:b4:e4:18:
08:af:27:5b:bd:fc:af:17:8f:2f:f5:b3:69:32:4c:86:8d:e5:
51:4d:4b:8d:bb:5f:15:d6:7c:1e:e8:7b:1c:19:03:ad:59:28:
13:4c:30:75:ca:80:fa:e5:15:76:35:3a:43:56:37:46:9d:a0:
be:15:b5:9a:79:a8:66:2d:a4:b3:89:db:a9:3a:cb:36:a4:bd:
d2:b0:59:21:e0:5a:f1:36:c4:7c:e7:d8:8a:1b:13:9e:92:17:
69:04:a4:5b:33:bb:ac:3e:37:91:36:cc:d5:c5:11:b2:72:16:
6f:9e:e6:11:32:51:ed:7f:01:7d:d6:35:9b:11:1b:18:c0:a3:
63:06:f4:94:39:41:5a:e7:44:ca:84:03:2b:90:3e:80:b4:8c:
ef:47:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:57 2026 by rpki-client