Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: aukGNzfDuyUpvS+/YVimcSpO+/LXw0vIX0eT1oEmh18=
Subject key identifier: C3:D7:BE:B4:AD:9F:B5:60:E8:B1:3D:49:7D:48:6C:36:26:1D:E4:80
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 019D38D2CB3E74774566F2972CB2867E699E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: 2S0DCS3+rwVxaDU4EZriF6TyxbH0pHnadjd3EIdtTEA=)
2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cb:3e:74:77:45:66:f2:97:2c:b2:86:7e:69:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=c3d7beb4ad9fb560e8b13d497d486c36261de480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:70:a0:98:87:8b:8a:7a:98:2c:aa:0f:92:
ea:7b:0d:09:e7:48:89:02:2f:a8:79:2f:71:73:2a:
6f:bc:85:7b:8c:19:fd:d2:24:84:c0:74:87:fe:3e:
e5:99:fe:50:25:4f:48:c4:8a:68:df:0e:79:2f:8f:
42:e6:40:ff:9f:eb:2d:68:5d:c5:94:49:d6:4c:0c:
e1:53:16:80:df:d3:cc:57:e9:93:88:a5:33:c2:51:
32:4a:61:65:aa:41:ba:25:c0:2c:aa:aa:fb:51:41:
f8:f6:15:71:ea:25:4d:03:d1:6b:0c:26:c3:6d:5f:
15:4b:ef:4a:d3:1f:48:3f:b8:ed:a4:94:d2:da:20:
56:f6:d7:08:bc:a9:bf:a1:4c:8b:a0:cd:02:a5:5f:
28:6d:8f:5e:3d:c8:6e:b3:3e:25:b2:3c:16:3e:34:
3a:41:aa:f1:a7:08:bc:00:c4:75:24:56:c8:f0:a8:
d2:fc:ad:00:9a:3a:e2:16:3a:a2:ed:70:d5:60:91:
d9:eb:3e:a6:c0:d1:80:19:21:03:55:b8:14:ad:19:
5f:85:04:ce:4f:8b:94:71:b9:40:96:e6:5e:7a:1c:
6e:95:5b:b2:46:96:9a:c0:ed:2b:46:41:bc:55:0f:
68:7d:2a:b7:bf:b5:79:d7:91:e6:fc:eb:52:5f:59:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:BE:B4:AD:9F:B5:60:E8:B1:3D:49:7D:48:6C:36:26:1D:E4:80
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:be:48:a3:65:30:52:b8:fd:b0:d1:96:db:0c:be:31:1d:
a3:e7:6b:5f:a3:e8:96:a4:89:ce:b3:d9:28:79:8b:41:19:d3:
1f:15:75:02:28:fa:ff:55:3d:65:58:66:4f:65:2d:b4:ce:d2:
e1:50:ec:ef:33:a7:0f:e1:b6:17:9b:3f:5f:5e:a6:7d:79:c9:
57:14:f7:cd:a6:ef:d7:10:11:e6:60:b6:63:52:dd:33:ba:0c:
c2:16:9e:de:97:a8:8f:c4:65:7e:9d:d0:e6:53:fd:b5:5c:64:
53:28:03:01:60:a8:cd:25:75:a7:e8:e4:f5:21:ec:2c:66:c2:
5b:bd:5d:fc:d4:ba:0b:0e:8d:9d:14:ae:17:58:14:a8:ad:12:
32:10:e4:0b:5d:0d:57:c0:7c:85:1b:97:64:8a:9c:87:ae:ce:
1b:7a:c5:3f:97:1b:d5:16:4a:cc:a7:a1:1d:13:67:1c:44:d1:
a9:5b:e5:d5:5a:a1:56:1b:77:c9:d6:71:56:4b:64:73:6a:24:
9b:85:e3:98:2b:64:10:64:df:b7:df:40:ad:7c:63:99:08:a0:
75:3e:37:61:b3:82:f3:10:8f:1e:38:3d:9a:eb:7a:5b:e3:d1:
52:fc:90:b2:83:dc:69:31:d3:25:e1:7e:65:77:8f:5e:e7:80:
d0:d1:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:35 2026 by rpki-client