Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: 9GDowEvXJjD6zQvep+pF6d9OuOlveRoEN2hlOkYJhl0=
Subject key identifier: AC:B6:77:BA:E7:B1:AD:C1:41:AD:A1:64:DD:FA:08:F7:A3:7A:C6:9E
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019D38D32A8C23FD8A3F4EFE0F64D4D6E53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 151C
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: NHfLJ0iKco1aColDd7TD75cfFg4j3MaXKG4R5LKsAhA=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2a:8c:23:fd:8a:3f:4e:fe:0f:64:d4:d6:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=acb677bae7b1adc141ada164ddfa08f7a37ac69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:6b:51:11:a0:b9:6c:c5:56:c2:67:79:fb:
ec:b9:7a:07:2c:bc:73:5c:7c:57:a6:94:98:c1:99:
a3:e2:42:f7:bc:47:6c:d1:df:e1:d4:61:f9:97:bf:
27:94:0f:07:98:ed:33:c7:30:c2:66:df:c1:fb:a9:
f8:6c:29:11:cc:ce:d8:c8:89:05:b5:e9:25:ce:76:
89:ca:0b:12:5c:39:cf:2a:65:11:c4:b9:e4:2e:3f:
a1:77:6a:31:fe:4f:22:cb:b2:5d:ca:77:e5:8d:1f:
59:b0:c8:d8:4f:0f:29:23:6c:f4:c1:e1:d1:7e:ca:
85:e2:a8:b7:c0:a0:77:19:aa:48:60:df:76:ec:a3:
29:a7:55:5b:91:30:95:8c:1c:27:7f:cd:3a:41:68:
76:7d:a8:e8:a6:86:ed:6a:cd:de:45:e6:b2:3e:65:
02:a9:2c:f2:6c:58:e0:7e:bd:34:d6:3e:cd:6d:3c:
b1:89:e6:e6:85:70:b8:44:f1:08:6e:95:e0:82:66:
d7:94:33:2f:30:dd:44:44:0e:1d:7a:0c:23:b7:cf:
ab:5e:e4:a9:7c:e4:a2:cc:02:c3:53:0e:8a:90:f2:
7a:fc:84:bc:f4:31:e3:16:3b:40:b3:b1:c9:fc:0c:
ce:7b:0b:7d:00:18:50:54:32:73:f8:03:b1:10:e1:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B6:77:BA:E7:B1:AD:C1:41:AD:A1:64:DD:FA:08:F7:A3:7A:C6:9E
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:26:6c:d7:83:b5:3d:c3:60:55:f5:d1:fe:55:b6:9a:ae:ee:
43:9e:d6:48:1d:e3:ec:e6:fe:2f:20:6d:b8:a8:59:2c:8f:9a:
0b:9d:44:88:ff:45:d0:58:57:0c:98:39:72:50:ec:67:80:a6:
59:de:10:17:3e:a8:d7:92:5f:68:47:c8:ac:a5:1a:67:55:95:
ed:eb:f9:82:44:3a:69:82:6a:c1:2c:fc:e9:4a:81:8e:e8:4e:
91:04:a3:5c:81:53:5b:0c:3a:09:32:5a:4a:31:9c:3b:5b:f6:
d3:b5:0c:5a:9d:10:17:a2:9d:b3:94:c8:65:f0:0e:bb:27:02:
22:da:4c:64:70:83:59:ad:93:ac:92:19:b7:f3:b1:fa:13:e9:
d9:3a:8c:17:79:e5:f9:b2:42:4e:08:79:42:5f:15:50:ad:b8:
f9:c0:5a:05:39:04:7b:03:bc:f5:2c:97:66:8c:1c:e6:d5:2f:
71:9e:eb:4b:7f:86:1a:47:eb:f4:02:ae:66:e2:56:da:2f:c6:
f0:ce:63:62:5f:d6:17:89:10:66:c8:5a:24:be:f9:cb:cb:68:
f1:80:b0:99:b8:81:16:48:02:07:a4:dd:3f:29:23:fd:65:2b:
1b:19:55:2e:78:f5:54:8b:32:3e:8e:2a:75:3d:38:e5:67:d4:
ef:70:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:29 2026 by rpki-client