Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
File: HMIQHIyT1FjSXDElyMm8ya8TKHE.mft (raw, json)
Hash identifier: ZFVEY0uuADpIGCJb2pLuTsi1Pb5XMqs0yHClxPJAb1E=
Subject key identifier: 5C:F8:CE:3B:5F:7B:E7:8F:DB:92:98:AA:53:47:B2:EE:F7:B3:D6:96
Authority key identifier: 1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
Certificate issuer: /CN=1cc2101c8c93d458d25c3125c8c9bcc9af132871
Certificate serial: 019D28F29858446FCA7BCA7D3692E87CE194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
Manifest number: 06BB
Signing time: Thu 26 Mar 2026 07:01:20 +0000
Manifest this update: Thu 26 Mar 2026 07:01:20 +0000
Manifest next update: Fri 27 Mar 2026 07:01:20 +0000
Files and hashes: 1: HMIQHIyT1FjSXDElyMm8ya8TKHE.crl (hash: KXUy+/5WixrflQ96xBZY2CVS40BhiZR4EKerethSyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:98:58:44:6f:ca:7b:ca:7d:36:92:e8:7c:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc2101c8c93d458d25c3125c8c9bcc9af132871
Validity
Not Before: Mar 26 07:01:20 2026 GMT
Not After : Mar 27 07:01:20 2026 GMT
Subject: CN=5cf8ce3b5f7be78fdb9298aa5347b2eef7b3d696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:f2:65:5c:56:b1:57:99:aa:f3:fb:16:7d:
e1:55:d6:8f:7a:2e:23:37:92:2a:76:cd:c4:73:fd:
4a:db:19:ef:ed:52:e2:da:78:f6:cb:a3:d9:19:cf:
83:88:1e:ba:ec:6e:be:d9:4a:86:6c:39:26:7b:63:
e4:84:c7:13:78:c7:45:c5:99:ef:8f:04:36:ad:e9:
4a:ee:ee:3c:19:ae:1d:fd:d5:2d:a9:1e:3b:68:c1:
2a:c2:23:7a:98:74:24:bc:38:ce:0d:2b:35:48:25:
a1:00:b6:b3:b9:c1:a6:11:3e:a8:1b:6b:15:c7:c1:
44:6e:ba:cc:1d:38:ed:96:b0:9c:b2:a3:2f:c3:15:
1c:dd:b0:73:67:28:62:92:25:d2:ce:bf:bf:ee:2e:
29:5e:a8:b1:d1:8e:b8:76:00:da:8e:11:20:74:e6:
c2:5f:f4:ca:cb:7a:bb:1b:72:74:cc:2b:d3:4a:52:
b8:c9:45:20:0c:09:7a:99:88:87:1c:60:0d:2b:bc:
ef:a6:ff:be:14:0e:51:cb:53:eb:07:41:b0:2f:b4:
4e:ff:93:1e:01:7f:9a:7c:ed:ef:f2:ba:4a:07:46:
3c:e0:61:f2:c1:24:0c:b0:59:77:55:42:9d:61:75:
10:f3:da:33:6e:fc:f5:44:2f:06:95:30:34:fb:18:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:CE:3B:5F:7B:E7:8F:DB:92:98:AA:53:47:B2:EE:F7:B3:D6:96
X509v3 Authority Key Identifier:
keyid:1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:65:0d:b3:3f:e1:1d:b2:aa:22:7e:79:80:63:ef:47:67:81:
01:ca:84:ac:38:1d:8a:fa:43:71:96:3f:96:2d:4f:af:eb:d7:
c5:62:90:54:d6:ab:5e:a6:27:bf:83:ec:a5:ca:75:19:cd:55:
aa:fb:fa:92:17:5e:55:fb:9a:00:dd:e6:57:9e:e9:67:9c:7a:
7f:82:1c:34:cc:b7:71:95:30:f2:87:fe:02:64:dd:4e:92:a1:
48:7b:4b:c2:59:f1:3e:2f:4a:96:c8:3a:b5:ca:9d:c1:e3:ca:
99:9e:ab:3e:21:6e:1c:86:02:30:d1:9c:15:2a:7a:77:b5:d9:
42:ec:3b:09:65:75:8b:d3:15:a7:cc:ed:14:5a:4e:17:d1:13:
6a:f0:b4:f0:cd:3a:7d:af:65:f7:42:df:91:63:1f:fd:38:a0:
f7:d8:41:1d:6d:9b:8b:35:4c:e8:79:bd:c6:6b:0f:be:6d:4d:
fb:b7:f1:04:cd:a8:c2:55:74:0d:03:94:00:3b:f7:40:5d:69:
f8:ce:7c:db:5f:57:dc:22:9a:f0:31:3b:fd:d2:71:be:58:36:
32:8c:08:27:3d:03:3f:29:45:0c:94:c9:54:19:e2:eb:43:e1:
14:dc:2d:81:b6:0a:8c:1f:33:c0:fd:47:54:fa:e2:df:80:1d:
2f:be:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:04 2026 by rpki-client