Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: KwoWN+D2Vlqn3aJ1xiLuRoafnxyixIINjXexphZEmus=
Subject key identifier: 0C:FD:A9:0B:70:5A:FB:74:DA:45:D8:EC:75:59:2D:F4:2E:1B:40:A5
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019D389C072B9E462CA0A6CCAFEA50FC4766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 128F
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: FcvgmM1nR5KKBhDX2GZKUDH6kdznIU5qELf3q9LedHs=)
2: Mf1194Aopq2OZBBw1XTJN0U0WJk.roa (hash: EerdCJA6wDLqsDQLxIrvcJIQv1/d05AYSbYm/2RHb1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:07:2b:9e:46:2c:a0:a6:cc:af:ea:50:fc:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=0cfda90b705afb74da45d8ec75592df42e1b40a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:11:e8:9a:c5:7a:e9:a5:78:28:b7:c8:88:
4f:f7:65:9a:76:6f:eb:bd:a3:36:52:45:c1:9e:15:
10:c1:e5:b1:dd:de:7f:9a:04:d3:90:fa:60:8b:be:
3f:9e:ce:d4:9f:8e:84:83:0f:52:c7:6d:56:16:91:
c5:3d:b4:96:ea:3b:24:d3:8b:6b:3d:34:e4:27:24:
28:d9:9d:ab:50:0b:15:ee:0e:56:b2:5c:56:d3:be:
15:42:a8:6b:a4:e2:f4:27:97:45:9e:1c:56:eb:98:
7c:9c:10:f8:69:8b:8c:c5:49:f1:f2:9a:1e:3d:54:
a8:d5:cf:5e:8c:cb:af:a8:3b:91:29:4c:6b:d0:e2:
d7:28:c7:e4:1e:f6:11:0e:f3:3a:13:56:c6:4a:82:
1f:69:04:86:af:83:90:6b:16:39:76:7f:c0:ce:87:
f3:99:48:d5:b6:ae:53:6f:0e:1a:fb:92:31:1d:d6:
39:5d:f1:d5:64:79:49:0a:0b:b0:78:7a:f4:5e:7e:
0d:04:6e:6f:6b:19:84:4e:b0:06:05:b4:55:8f:b1:
1d:e8:c8:0a:03:e7:e0:c3:01:7e:bf:01:ae:db:aa:
de:a9:24:e9:de:48:7f:c8:59:29:f9:ea:03:50:38:
0e:10:9d:4a:59:6f:06:13:8b:9d:13:4c:1d:81:dd:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:A9:0B:70:5A:FB:74:DA:45:D8:EC:75:59:2D:F4:2E:1B:40:A5
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c8:1c:2b:d3:71:d3:ea:c2:bf:37:bf:62:8f:0b:ac:a4:1c:
0a:0a:89:3a:c6:44:0b:39:93:f7:ee:2e:78:00:4c:57:54:22:
56:87:06:2d:40:b4:c5:9b:c8:2c:60:1f:2d:1a:cf:4a:f5:ff:
02:a5:1f:78:b1:0d:81:9c:c2:c0:fa:d4:a5:cb:17:7a:28:d9:
9e:a7:01:86:d5:35:9a:3b:aa:0e:9c:c6:b8:c8:6c:29:5e:6c:
de:09:58:4b:5d:7c:bf:e0:57:5c:83:95:3b:2a:7a:17:99:dc:
48:de:02:3a:b6:a2:11:2b:bd:03:c4:7c:06:84:8a:d6:0b:c9:
ea:d6:5d:77:70:9e:f5:37:49:2c:61:91:69:a8:fc:5d:28:c1:
1d:c7:db:7b:ae:66:4b:be:98:3c:39:a3:7f:e6:21:6c:7f:51:
1d:c4:9c:0e:75:ba:83:02:85:a6:6c:15:80:c9:c5:88:f7:89:
aa:69:16:eb:9d:95:9f:b4:34:29:d8:88:e2:48:7a:22:67:c5:
bc:20:ad:1a:3d:d0:49:08:bb:27:15:44:3c:4e:4a:ea:34:9c:
bb:db:f1:ff:dc:ce:5c:fe:b9:ff:f2:ae:5d:d6:73:ec:df:56:
d6:5c:15:6c:4d:bc:92:f8:94:a5:08:02:ff:5b:bb:11:57:34:
38:f4:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:50:52 2026 by rpki-client