Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: jrcxAHc26RF/sF5pgqoGvGTf7nVtFtHbYHohcFPcEUY=
Subject key identifier: BD:C2:A4:B9:72:57:B5:84:9A:C1:5F:3D:81:56:6E:16:12:38:5D:C4
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 019D38669CA5E82DE5DBBFC2B4826B3E5817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 0920
Signing time: Sun 29 Mar 2026 07:02:21 +0000
Manifest this update: Sun 29 Mar 2026 07:02:21 +0000
Manifest next update: Mon 30 Mar 2026 07:02:21 +0000
Files and hashes: 1: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: N8S3jeWZXKg1ZDS8+Xm3RWA8XmvpvO+3AyJfeFwvenU=)
2: hBZaHAyGtqRnE1DvLWWpXGTmsPU.roa (hash: hJDZYJp6gaUMZ+FxtfpKN3lHq8XA9oWvb1C80fIulho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:9c:a5:e8:2d:e5:db:bf:c2:b4:82:6b:3e:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Mar 29 07:02:21 2026 GMT
Not After : Mar 30 07:02:21 2026 GMT
Subject: CN=bdc2a4b97257b5849ac15f3d81566e1612385dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:60:c3:a5:03:13:28:12:f9:94:49:a6:3e:
0c:84:a1:d6:06:f9:98:1e:37:2a:fa:d6:e0:fa:f8:
55:d5:79:4a:89:f5:3e:32:d6:cf:0a:5e:f4:62:82:
d3:49:9d:b3:7c:2f:15:3a:88:40:dc:d2:d6:b4:ab:
ad:f5:1d:e6:f2:c2:9d:b5:9c:70:47:b8:0d:37:00:
0b:b1:89:f4:e3:dd:02:97:17:b7:cf:b4:20:49:69:
ca:e9:8b:39:43:78:47:d5:9a:d8:ed:2b:d8:8e:f0:
67:f3:d6:01:30:ec:5a:0f:a7:ef:a8:ac:7b:d2:90:
7c:4e:ac:30:7a:a1:d2:ba:24:4f:04:99:93:d8:ff:
a1:cd:a3:66:23:de:a5:8a:2b:60:ba:8e:5f:43:dc:
b9:b9:51:f3:c3:11:aa:97:85:79:62:9b:3b:49:82:
c7:cc:fd:45:22:79:47:ef:46:2b:b1:23:63:2c:fc:
4c:c7:a4:7b:cb:e7:c2:3c:3d:bb:b7:56:d5:2a:95:
44:3f:b1:59:db:9a:88:3d:06:09:1c:6b:81:10:df:
dc:2b:b0:1b:a6:59:a4:90:d6:bc:9c:3a:43:fe:b3:
2f:f3:71:e6:f0:ec:d1:5e:d9:59:78:85:62:b3:7e:
8b:ae:d5:06:a6:b5:c6:54:01:54:17:d4:32:09:56:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:A4:B9:72:57:B5:84:9A:C1:5F:3D:81:56:6E:16:12:38:5D:C4
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f3:58:84:21:61:38:5b:56:a6:d2:05:be:04:f1:e1:6a:d7:
cb:2b:d3:91:17:aa:1c:0e:a7:71:08:56:03:2b:88:dc:ad:51:
57:33:85:be:47:3d:2c:ce:92:8a:37:0c:38:29:3b:e6:fa:5b:
50:e1:19:fd:cc:83:26:ae:4e:ab:62:3a:43:3c:03:d5:65:aa:
92:7a:83:f7:b1:d4:72:f0:e8:6d:3e:b9:9b:66:00:33:5b:9b:
53:ac:ef:8a:0c:53:f7:c7:dc:00:76:91:e8:23:dc:fe:f8:9d:
47:c7:ff:3e:ad:6f:21:7c:fd:03:00:06:e6:e8:4c:8e:94:cd:
ff:6d:22:a5:c0:03:3e:57:cb:07:a9:fd:0b:ba:b2:18:1c:f8:
1a:de:48:5a:90:90:6a:8a:fb:39:f1:0c:c1:64:07:ff:f1:f9:
7c:e4:24:c8:b0:5c:1d:0a:cd:97:69:e3:fc:60:82:fa:2b:5f:
81:b9:9e:53:b9:2b:0a:fd:dc:69:70:38:a9:b5:df:d5:94:f8:
b4:dd:3b:e1:c9:b4:db:4b:15:17:15:0c:9e:1c:13:e3:aa:86:
b9:30:2a:22:06:d1:55:b7:a7:e6:f5:74:28:8a:da:19:d5:af:
f6:ab:c9:b7:17:77:f5:80:be:4d:cc:93:43:6a:cd:fb:5d:11:
68:17:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:20 2026 by rpki-client