Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: Vpy+8W/YeNNSiF0W7434VrZRA8HZEaQnVT5/wZU4cPc=
Subject key identifier: 58:C3:E9:C2:F9:51:D7:C1:C0:21:37:2F:41:97:9F:4F:5C:4E:8D:3B
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 019D38657FBA74561B65CBD8BDCCA91660C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0E60
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: ++KyyXwisGSj59cCJvZZOGHgybfHCZ6QofxbqLoMgX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7f:ba:74:56:1b:65:cb:d8:bd:cc:a9:16:60:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=58c3e9c2f951d7c1c021372f41979f4f5c4e8d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:82:6e:f0:d3:7e:75:8f:c0:b2:12:fe:2e:
15:e6:87:03:7d:3e:61:60:fd:06:78:a9:4f:38:fb:
0d:34:f1:db:24:64:49:3c:42:7f:d3:da:c4:07:fa:
78:6e:6d:30:42:b6:da:fd:e1:66:15:6b:31:68:3a:
1a:fc:27:1f:da:cb:09:38:dd:f0:7c:43:02:95:ce:
9d:17:22:9d:ea:be:e7:56:85:45:f9:bc:94:a1:e9:
17:46:2b:b9:40:12:b2:ab:11:a9:e0:aa:74:af:88:
37:ed:41:b5:13:a5:3b:a8:18:d4:c7:d2:8e:07:e7:
89:7a:ed:2e:95:e0:f0:f8:ec:68:da:a0:12:f6:3d:
00:be:78:bb:dc:4e:27:09:ef:d2:4b:b6:52:fe:e7:
8c:45:7c:65:b7:d3:10:46:ed:7c:fa:14:d7:b6:d8:
1b:5e:50:ba:b2:bd:b0:2f:6c:e1:30:28:23:40:a1:
ad:b4:8f:92:a3:ee:e6:59:3d:14:2f:31:4c:e7:9c:
1b:57:5f:ca:68:34:68:3b:c0:0f:01:81:b7:ec:26:
ed:84:eb:56:05:f8:cc:43:80:44:b1:84:32:d3:11:
4d:4a:4c:d0:e3:9d:de:84:fb:98:92:ac:08:33:c9:
8a:f1:7b:de:de:c5:aa:11:cc:21:ff:f2:cb:ad:35:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:E9:C2:F9:51:D7:C1:C0:21:37:2F:41:97:9F:4F:5C:4E:8D:3B
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:08:1b:2e:71:9e:16:62:55:24:ea:41:23:c8:db:47:c7:b7:
e5:df:e6:8a:7c:a9:87:51:3c:a7:46:33:da:5a:44:fb:45:01:
e1:86:b5:fb:51:87:07:56:ff:9d:89:88:a9:b2:58:08:10:5e:
2d:67:9f:73:78:98:1a:bf:0d:87:ca:40:37:46:a1:82:dd:e9:
bf:45:f4:2d:ab:27:64:d7:5b:c4:73:7a:88:31:ae:0d:12:12:
01:c8:a4:3d:f5:61:80:09:90:46:e9:09:c9:d6:79:5c:31:7c:
e4:03:ec:60:87:f9:73:ff:81:7b:ab:49:fb:29:da:6f:6f:19:
f1:fd:3d:fb:41:34:ac:e9:be:f1:7a:e5:d0:23:19:b3:f9:d7:
dd:20:bd:02:45:df:e3:fb:23:08:de:c2:dc:10:7b:d3:6d:b6:
21:46:13:5c:98:89:44:de:7b:03:93:ea:61:58:45:c0:da:1a:
3b:f3:4f:6d:38:bb:30:f7:92:cf:8e:38:71:2e:27:c0:bb:cb:
2a:e7:7d:55:7a:67:0f:e9:76:1e:df:1f:be:ed:36:77:69:14:
3b:87:d2:f0:16:ce:b8:69:77:38:cd:99:76:91:31:36:75:ff:
1b:ed:0a:19:52:f6:30:2c:d1:53:0f:1a:1b:bf:fa:c3:58:62:
c0:2d:ae:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZX+6dFYbZcvYvcypFmDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTJlNjBlNzlhMWRlNzUzMzQzZDc4MTViODcwYzk2ODBj
MGFlN2YwHhcNMjYwMzI5MDcwMTA4WhcNMjYwMzMwMDcwMTA4WjAzMTEwLwYDVQQD
Eyg1OGMzZTljMmY5NTFkN2MxYzAyMTM3MmY0MTk3OWY0ZjVjNGU4ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RqCbvDTfnWPwLIS/i4V5ocDfT5h
YP0GeKlPOPsNNPHbJGRJPEJ/09rEB/p4bm0wQrba/eFmFWsxaDoa/Ccf2ssJON3w
fEMClc6dFyKd6r7nVoVF+byUoekXRiu5QBKyqxGp4Kp0r4g37UG1E6U7qBjUx9KO
B+eJeu0uleDw+Oxo2qAS9j0Avni73E4nCe/SS7ZS/ueMRXxlt9MQRu18+hTXttgb
XlC6sr2wL2zhMCgjQKGttI+So+7mWT0ULzFM55wbV1/KaDRoO8APAYG37CbthOtW
BfjMQ4BEsYQy0xFNSkzQ453ehPuYkqwIM8mK8Xve3sWqEcwh//LLrTVxnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjD6cL5UdfBwCE3L0GXn09cTo07MB8GA1UdIwQY
MBaAFIVS5g55od51M0PXgVuHDJaAwK5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEt
OWZmYTYwZGI4ZjcxLzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEtOWZmYTYwZGI4Zjcx
LzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAgbLnGe
FmJVJOpBI8jbR8e35d/minyph1E8p0Yz2lpE+0UB4Ya1+1GHB1b/nYmIqbJYCBBe
LWefc3iYGr8Nh8pAN0ahgt3pv0X0LasnZNdbxHN6iDGuDRISAcikPfVhgAmQRukJ
ydZ5XDF85APsYIf5c/+Be6tJ+ynab28Z8f09+0E0rOm+8Xrl0CMZs/nX3SC9AkXf
4/sjCN7C3BB70222IUYTXJiJRN57A5PqYVhFwNoaO/NPbTi7MPeSz444cS4nwLvL
Kud9VXpnD+l2Ht8fvu02d2kUO4fS8BbOuGl3OM2ZdpExNnX/G+0KGVL2MCzRUw8a
G7/6w1hiwC2uxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:55 2026 by rpki-client