Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: /6R2CZ+DDrGyh/Oo4fi8TMbWe8VkG3L9wqo+vUQl3TM=
Subject key identifier: F3:3F:6D:CA:DA:E1:11:B6:37:46:12:7B:DE:E4:B0:CE:40:2E:79:5E
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019D39AE7CB04069475CD84F94E02FFFE58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 17AA
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: T3YcKBjDHNBVzN4DJmlIHj6TichxpyJULRvjaYxM4js=)
2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7c:b0:40:69:47:5c:d8:4f:94:e0:2f:ff:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=f33f6dcadae111b63746127bdee4b0ce402e795e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:0d:9e:75:1c:27:50:49:74:2d:af:29:f3:
da:cc:b6:3f:0e:72:25:7d:4e:a2:ef:d7:2f:b6:9f:
27:06:ce:2f:6a:36:d2:4d:2d:cb:b0:09:25:cd:7b:
a5:7b:f1:6e:cf:cf:25:eb:ff:61:c8:aa:c8:de:94:
48:cb:0f:e5:19:a6:7f:2d:12:eb:b3:66:f4:46:00:
5d:05:9d:27:2c:35:bf:d2:9c:55:9b:f9:38:f2:82:
b4:45:71:8c:0b:9e:a9:1a:8f:01:48:d8:91:2f:41:
74:b8:ee:17:33:bf:52:f1:24:d0:20:ea:e4:48:28:
84:c0:06:c4:28:77:89:74:a2:dd:f6:ad:73:bf:4e:
64:cf:7b:a4:42:4b:82:0f:56:15:71:fc:55:97:1c:
4c:67:86:d9:c4:9c:28:22:20:e7:05:fc:c5:d7:37:
6a:23:d4:06:f4:6f:02:7d:28:bd:13:f4:34:f7:e6:
a6:7d:27:df:97:d0:6e:c4:de:e0:6e:e3:78:5f:2d:
85:33:5e:a2:fe:92:50:e7:91:e6:70:c8:de:6d:6f:
3e:e1:f7:44:9c:4e:ff:e1:21:59:44:57:03:cf:9b:
ad:e4:6c:ab:2a:e4:60:44:62:f6:3e:2a:f2:b7:4b:
9e:45:b4:ce:4b:3a:dd:27:0c:77:f8:6c:01:3c:e2:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3F:6D:CA:DA:E1:11:B6:37:46:12:7B:DE:E4:B0:CE:40:2E:79:5E
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:56:af:a7:be:97:8c:41:66:9e:a8:a1:c7:49:13:d3:1d:8f:
1e:5c:44:ab:a0:44:fd:f1:c2:56:15:03:f4:61:d2:17:d8:53:
02:e9:f5:cb:9b:d6:f3:3b:3f:03:a0:23:60:07:4b:d9:04:20:
ab:25:fa:4a:14:c3:2b:a7:5e:3a:55:56:67:37:00:33:9b:ae:
1d:45:a8:0d:af:5d:71:2b:f4:19:17:9c:f9:b3:4f:e4:07:fd:
1a:08:5a:53:09:00:c9:a8:79:11:ff:a8:5d:54:8f:b2:a2:7b:
15:39:79:8e:52:ce:16:20:e9:61:26:54:90:30:00:f6:59:79:
25:bb:dd:96:2c:f0:44:4e:40:ec:7a:89:a5:40:74:57:5a:2c:
c1:6c:15:3a:0a:1f:09:2b:1f:80:17:f9:29:86:2c:ee:ed:cf:
c0:ec:7f:bc:07:a0:73:f5:ff:55:64:33:dd:66:1d:cd:4f:ad:
d0:cf:4d:c0:2f:83:39:75:d7:f6:85:67:35:17:34:57:c0:34:
15:4d:7e:dd:bd:df:96:b6:97:83:34:08:3e:35:1c:de:30:34:
8c:6e:d5:98:6a:8f:80:8e:6b:96:07:19:f6:bf:a4:55:32:5a:
ce:df:43:36:a2:1e:e7:c9:be:bf:b9:c6:9a:31:08:3a:be:99:
a1:73:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:24 2026 by rpki-client