Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: QmD4VtDnlNa5lyRjr3Vj0ks1kE/FaxQX9u/oAo0AAd4=
Subject key identifier: 34:59:23:45:92:85:6D:A6:4D:12:91:99:53:F2:93:37:9E:ED:0F:EC
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019D3A8B0291D3C3C3BB8CD22908C99EAA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 1290
Signing time: Sun 29 Mar 2026 17:01:21 +0000
Manifest this update: Sun 29 Mar 2026 17:01:21 +0000
Manifest next update: Mon 30 Mar 2026 17:01:21 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: b3XmQiVxJYiOE4cCUvvapWRceoZfQSbMe7dyI35HGpU=)
2: Mf1194Aopq2OZBBw1XTJN0U0WJk.roa (hash: EerdCJA6wDLqsDQLxIrvcJIQv1/d05AYSbYm/2RHb1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:02:91:d3:c3:c3:bb:8c:d2:29:08:c9:9e:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Mar 29 17:01:21 2026 GMT
Not After : Mar 30 17:01:21 2026 GMT
Subject: CN=3459234592856da64d12919953f293379eed0fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:54:00:d2:0a:8e:15:aa:64:08:00:85:97:
f6:62:30:45:cd:64:ad:fb:00:bb:24:f4:a0:84:c1:
19:0c:14:ee:cd:4e:7a:4d:1b:d8:24:e1:16:e7:cc:
9d:2b:02:95:ab:28:aa:ce:64:96:bf:3f:2a:40:d0:
4e:c6:b7:47:64:d3:7f:42:f4:cb:72:40:f9:11:55:
2f:02:41:a9:b6:98:e9:01:c3:c7:f9:33:83:7d:17:
3e:cb:48:ce:ef:06:40:4a:b2:d0:e1:d5:3f:55:ba:
ed:60:11:c4:d1:df:bb:a7:3d:91:26:86:b3:76:ce:
3e:c6:3c:9e:4b:6b:72:1d:e0:ba:db:6e:c2:47:9b:
82:a2:6d:88:7e:86:26:d6:3c:67:1c:89:13:00:12:
f6:58:31:e7:f4:93:71:6a:0f:2c:ad:19:57:79:6e:
c6:eb:b6:db:95:e9:e9:2a:3e:67:3c:f0:92:7d:3b:
c6:06:9e:d4:77:a0:a8:e0:98:a6:c9:ba:3d:8a:f8:
35:08:a4:a8:96:11:0d:78:dc:9a:bb:cb:8b:d3:6b:
1e:14:e5:72:77:3a:2a:3e:ed:fb:44:b0:ce:8c:37:
f3:a2:f1:a5:98:13:e8:6c:7d:44:70:62:9b:72:de:
7a:a8:0d:8c:b1:26:84:3e:f9:2e:b5:d0:e3:e7:04:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:23:45:92:85:6D:A6:4D:12:91:99:53:F2:93:37:9E:ED:0F:EC
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b4:bd:98:78:07:f3:0b:8e:fc:e0:8a:77:ae:88:2a:d9:2a:
91:99:47:66:70:66:7e:b9:4e:0b:bc:0b:a9:e9:c1:7e:3e:74:
28:32:6f:74:1b:ad:7e:fe:48:a8:24:24:32:06:be:6d:11:a3:
7f:e4:4d:ae:0e:de:92:25:95:b6:de:0c:7a:36:dc:b5:71:af:
bb:f9:a3:62:21:1a:76:49:d4:f4:68:3b:59:3f:53:ff:78:35:
cb:a9:8a:1c:a6:d0:99:f4:12:13:97:40:aa:ca:a4:97:ef:ae:
56:c3:15:2d:f1:58:dd:3e:21:c9:da:40:0b:ba:9c:e6:13:ad:
c5:67:03:4b:02:2c:f2:2a:62:25:b9:c9:ba:7e:88:c1:35:8a:
71:29:fb:83:58:21:c6:af:69:e9:87:09:0d:56:90:f3:09:97:
3b:c5:41:52:fa:56:a4:62:f6:89:c0:c6:f7:2b:e9:b9:7f:7e:
cc:b0:36:4c:19:d9:17:e2:3e:a7:06:65:8b:86:a2:89:90:3a:
e7:85:38:b3:b1:6a:2c:f4:a9:f0:39:47:df:dd:98:3a:8c:26:
09:10:9f:be:4e:0a:88:18:4f:d5:db:5d:70:e2:f5:4e:01:98:
6d:23:bc:ce:77:59:a6:01:eb:65:0b:f4:bd:20:2b:23:cf:ab:
44:ec:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:39 2026 by rpki-client