Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: gRRUUnbMo0MFU446IiUy2FwQ0nPw/nmSV/9QK8JCWEg=
Subject key identifier: 02:93:3B:B5:AA:45:82:5A:2C:A3:34:D7:D3:84:01:D9:FE:9B:01:DF
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019D38665AEF08DEFA278EC59811CF4274E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 09CB
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: oKfM9RFihjV20SlVnI2w12EWA+1U2Pvvjf+zZpgl7c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5a:ef:08:de:fa:27:8e:c5:98:11:cf:42:74:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=02933bb5aa45825a2ca334d7d38401d9fe9b01df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:b0:88:e7:33:d4:51:79:37:69:67:19:e7:
9b:6d:1f:fa:68:ee:94:f0:88:83:fa:02:0f:8a:7d:
82:64:bb:e3:91:98:58:b5:be:28:2e:74:cd:03:83:
06:80:6a:c2:f4:5b:33:fc:38:75:f5:11:a9:19:28:
3e:6e:b1:40:07:f8:d1:b3:17:50:0e:ae:d2:67:1d:
8a:a7:f8:d4:18:79:58:ed:6f:46:46:87:69:97:1b:
9d:41:cc:72:e8:24:0b:86:0e:e2:e7:cc:0e:01:c7:
88:ea:f8:fc:93:0f:07:43:d0:59:22:3b:83:c1:a8:
d9:d8:2c:4d:06:ac:78:7f:88:16:81:5c:f2:3b:bb:
b3:6b:17:6b:9a:3d:f0:3a:38:a6:2e:ce:16:48:c9:
40:ff:dd:21:de:14:17:b1:fb:bf:89:fc:a8:9e:83:
d0:a9:9c:dd:28:68:fb:00:38:b3:dd:bb:40:d1:76:
9a:57:df:e4:05:c6:cd:1f:3b:e5:8c:f7:e7:cb:91:
68:0a:d7:2d:e3:66:54:2d:74:02:63:1d:0a:bd:e8:
8d:06:78:a3:18:13:9d:79:2d:9e:47:99:bc:57:b1:
1b:eb:4c:c9:ba:25:93:e0:9c:4d:2b:bf:19:6d:b8:
87:d6:38:94:4a:af:80:0d:61:48:6b:c0:75:79:6f:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:3B:B5:AA:45:82:5A:2C:A3:34:D7:D3:84:01:D9:FE:9B:01:DF
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:14:2e:4c:d2:97:cc:16:95:54:25:cd:b7:db:eb:52:6d:66:
e0:38:f0:c5:d8:18:43:a9:42:62:b7:c1:3c:15:9f:b5:0b:9d:
cc:bf:cd:73:b9:1b:26:fa:18:7c:7f:2f:e4:16:db:b8:9b:fe:
7c:a5:54:22:f3:ff:66:32:8f:cf:93:87:9c:17:d9:7b:b1:97:
15:0d:8f:44:08:e2:51:ee:c0:60:d0:df:e9:30:cd:a3:09:d5:
dd:90:59:e6:d0:13:70:70:eb:23:76:6d:4f:78:42:18:a7:4d:
ca:85:ab:63:5e:16:c4:12:18:a1:00:61:ab:b5:de:ba:1b:27:
e1:56:3c:59:99:e9:e3:2c:73:dd:63:87:c3:4f:eb:2d:a9:24:
41:f0:34:e0:f9:b3:61:97:20:bd:64:b7:1a:ed:bb:25:f1:1b:
69:2c:37:78:05:ad:a5:f4:f8:fb:f8:c4:89:f3:61:0e:0c:ff:
8a:ff:b1:1a:95:ba:2f:76:f9:2c:57:00:ac:9e:0d:a6:65:f1:
e9:cf:c4:d8:74:d5:fd:2d:0f:c9:33:eb:28:1e:b7:5f:0a:8d:
58:26:d7:2d:76:1b:f3:d9:5d:21:b0:f0:f2:ed:69:26:a6:7e:
dc:11:80:7f:59:d6:35:f3:9a:b6:ab:04:a6:8d:81:6f:13:1e:
c9:f3:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:34 2026 by rpki-client