Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
File: hgLiX_EiDtSqju94wzpyKrWIP40.mft (raw, json)
Hash identifier: EsrtePbT5Q81gRLF0k68si4E1SGnV0VU6dnF+fxhVCM=
Subject key identifier: FD:E7:0C:30:B5:6A:3C:4E:FC:A5:46:A4:82:2A:59:67:D1:71:C2:98
Authority key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
Certificate issuer: /CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Certificate serial: 019D3865AF7138B0E145B79143877DBBF502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: hgLiX_EiDtSqju94wzpyKrWIP40.crl (hash: PtYIUkJzw7MltGvLUTpN+FqcLHeZcBaoM6frMNbW9kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:af:71:38:b0:e1:45:b7:91:43:87:7d:bb:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=fde70c30b56a3c4efca546a4822a5967d171c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:90:9e:15:58:f1:5f:60:d2:f5:92:9e:fb:
40:be:85:20:cc:1c:dc:2f:09:7c:25:0c:85:48:15:
89:f3:c1:f9:a1:01:b9:74:1a:7f:cd:b9:83:55:8f:
d4:dd:87:0f:6d:3f:ab:71:12:90:9c:87:b2:ef:a1:
21:8d:e6:48:5c:bc:d3:bf:41:67:39:ba:fa:ce:a5:
33:2e:2e:54:5d:40:53:1e:d2:d9:37:8b:5f:d7:ab:
eb:96:44:0b:ae:a9:c0:41:b8:2c:8c:bf:25:e0:30:
b1:be:9b:e0:f8:79:8c:4d:8a:05:69:72:67:3b:68:
05:ea:f3:9f:23:86:5c:e8:6d:26:11:0b:b7:84:96:
9b:81:ca:7a:79:f8:87:58:4e:8a:b7:51:0d:64:90:
2e:64:03:0b:a8:9b:05:39:8f:5a:ba:85:da:9b:55:
52:0c:be:74:a5:93:6c:78:ad:4b:0f:bf:45:1c:ea:
9c:d9:71:55:e9:fc:e8:da:83:5c:84:89:09:3c:d2:
46:28:59:34:4d:62:1c:0c:80:73:79:d5:57:a9:56:
72:11:52:df:f7:a5:82:41:76:20:60:ab:d6:44:cc:
3a:ce:c8:9e:45:a8:5f:17:0c:cf:20:b1:fc:1a:a6:
43:2b:c3:55:e3:7a:12:b8:47:26:c9:ae:85:b5:24:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:0C:30:B5:6A:3C:4E:FC:A5:46:A4:82:2A:59:67:D1:71:C2:98
X509v3 Authority Key Identifier:
keyid:86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c0:67:5a:4a:5c:ec:e0:a1:15:dc:eb:66:ac:e4:9c:d6:4e:
7c:32:7e:40:fb:1d:ff:09:1c:29:f8:6e:cc:b5:9c:29:82:72:
f9:43:f3:c6:6a:4d:42:4f:e1:47:30:7b:1b:b8:8d:0f:0e:3a:
93:02:0b:c1:1e:16:a3:c4:be:24:72:12:f8:5c:53:b2:b2:f8:
b2:4b:8c:5c:bd:94:7f:45:08:f1:95:62:f7:8f:40:99:d1:9c:
fd:93:46:bf:62:0a:ad:69:7a:58:f5:dc:39:22:7a:c1:02:32:
f8:9b:4c:a0:90:5a:7f:2e:e6:0d:f5:ff:2d:46:59:fb:fc:b6:
1a:a9:43:2e:6a:d6:f6:18:a5:64:80:06:1d:44:9d:6c:d4:c2:
a9:93:25:76:f5:f4:8c:28:d5:7d:a3:8e:06:ba:26:36:4d:86:
20:42:41:de:f0:e4:17:00:e9:b2:c8:94:bd:1b:d6:e3:47:05:
2f:3c:42:1d:41:9b:b4:99:60:a6:a3:0b:53:db:28:2d:f8:3e:
05:8f:e1:7f:d2:db:30:75:ae:58:51:b6:1a:3e:1e:63:3b:84:
c0:fd:ad:cf:13:42:d3:3d:f5:80:97:ae:b6:39:59:c8:54:77:
00:b9:89:dd:90:5d:3d:b1:95:09:a2:85:8d:dd:6d:46:31:5e:
45:d5:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:54 2026 by rpki-client