Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
File: HeL84IWat-AbhRy2Buvb1cAzgSU.mft (raw, json)
Hash identifier: C0KKGmbq99eDW4yprKnA//IW4aejZAMisXKofEk6+As=
Subject key identifier: 1F:83:8B:58:77:6E:3A:B6:27:A8:62:F1:4E:95:4B:59:5F:4B:CA:63
Authority key identifier: 1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25
Certificate issuer: /CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125
Certificate serial: 019D38D2C51FBBAB9DC905DB477DB0981311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
Manifest number: 0118
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: Dqcp4RvQl7P2OEX63xUaN0DRBVg.roa (hash: IQ4Oj0h0gSI/GePJB5bn18PdQHZHOsSLQnCDVouxx7g=)
2: HeL84IWat-AbhRy2Buvb1cAzgSU.crl (hash: daj1PaZtei502vPhbQwGxjwqcoTk+QpfjlfVue9BE08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c5:1f:bb:ab:9d:c9:05:db:47:7d:b0:98:13:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=1f838b58776e3ab627a862f14e954b595f4bca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:28:a3:93:e9:75:51:18:a9:ec:8f:51:35:
ef:4f:1d:d2:da:24:b5:bc:a9:be:95:5d:6e:d2:b3:
5d:ab:ae:5e:87:e2:8c:a6:a1:2c:a5:17:5b:e7:4e:
09:4c:5e:7a:5f:0e:91:94:fb:f1:48:61:14:c2:fd:
ae:58:d4:40:8f:51:f5:94:af:c6:7c:62:ed:61:7f:
15:8f:eb:91:45:12:a0:f3:ad:e6:1b:43:f8:08:7f:
d4:49:de:04:47:e3:8a:4d:89:1f:93:e9:c4:00:d6:
38:1c:c5:d8:17:dd:ca:2b:c0:51:c0:01:8c:40:44:
af:41:67:29:22:f4:be:b0:8d:b7:90:d8:7b:ff:14:
2f:26:57:c3:b4:d7:1e:2b:2c:d3:ff:12:d0:0c:e9:
fa:f8:b6:41:13:ea:b2:af:55:94:f9:74:38:53:e8:
6d:f0:92:fa:c5:ba:71:0b:27:b6:ed:33:5d:45:2f:
ff:42:b3:8a:0c:25:8c:f6:ff:37:3b:4f:fe:53:48:
cb:29:6a:16:ae:2d:d7:68:fe:57:8b:10:4f:8b:c8:
c9:89:35:79:62:ff:be:da:5e:d7:d0:f6:c8:27:ad:
c2:41:17:3a:b6:54:71:70:e9:f9:45:87:6e:2b:d4:
8b:d6:16:07:6c:44:f2:16:46:c2:7e:e4:7a:fe:cf:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:8B:58:77:6E:3A:B6:27:A8:62:F1:4E:95:4B:59:5F:4B:CA:63
X509v3 Authority Key Identifier:
keyid:1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:3e:39:c3:4b:e7:d3:47:9d:0d:c5:b5:c3:be:7a:16:3a:
40:ff:61:a6:a3:77:91:37:df:12:27:9b:48:6e:9c:2e:f5:48:
fe:d0:bd:32:39:94:9e:3d:c4:8e:14:14:69:43:57:a9:81:e6:
5b:c6:88:3b:8c:3b:c6:c7:21:3f:9d:6c:71:ca:85:bf:7c:7a:
4f:7e:47:57:c5:c3:96:a3:5b:d4:68:98:1d:b7:9c:fc:c4:75:
43:92:9a:6f:fe:e7:d8:f4:97:84:36:2d:4b:2a:5a:a4:fb:6e:
ae:9a:60:f2:75:8d:f2:78:bc:95:5d:22:c8:f9:f4:8f:f5:6d:
e2:b6:34:23:70:03:0a:c3:28:3a:19:f1:ee:9a:56:bb:40:bf:
a3:5a:ae:8d:51:00:93:c6:b2:59:6d:20:70:41:43:51:d0:52:
19:0a:4d:d5:bc:93:5e:ad:e6:fd:74:a0:c3:c8:ab:a3:31:85:
08:17:b8:6e:44:32:50:79:a8:8d:4a:a8:c9:a4:95:bc:27:32:
d2:fb:92:1c:92:63:08:38:57:30:95:ed:6c:05:9e:7c:10:f3:
60:46:de:34:1e:f3:15:92:aa:cb:a8:05:9c:27:4b:cb:2a:0d:
a4:ba:ce:5a:6d:73:55:54:9c:40:97:9d:cc:f1:83:12:7a:3f:
71:38:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:31 2026 by rpki-client