Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: 9BSvnto5KffVibWupYR0J/dTnhXdcMvnnwaemaZ7zFk=
Subject key identifier: 7D:E1:E3:22:EB:C7:DE:89:05:BF:21:FB:37:C9:DE:53:66:BB:23:21
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 019CE5FF138BC2872B552847A67390005E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0F05
Signing time: Fri 13 Mar 2026 07:00:24 +0000
Manifest this update: Fri 13 Mar 2026 07:00:24 +0000
Manifest next update: Sat 14 Mar 2026 07:00:24 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: q2pRkUSsoXJ3zv3Ibn635/9gR471HqddqpZpuVQH2V8=)
2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:13:8b:c2:87:2b:55:28:47:a6:73:90:00:5e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Mar 13 07:00:24 2026 GMT
Not After : Mar 14 07:00:24 2026 GMT
Subject: CN=7de1e322ebc7de8905bf21fb37c9de5366bb2321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:fd:d0:79:dd:17:fd:84:2a:43:7c:96:31:
6b:d2:60:6f:27:ab:0b:ad:5d:a6:30:33:46:d5:86:
f9:94:ef:90:20:fc:db:c1:8e:11:d7:4f:5c:f1:11:
9b:7e:39:49:a1:cb:96:cb:b3:5f:9c:c1:95:cb:2e:
86:b9:54:86:13:6f:e1:1c:d9:5b:60:32:81:40:ed:
45:4c:6f:a6:e8:85:ce:2c:b5:72:76:fd:db:66:f7:
88:a5:48:9f:89:60:fa:da:b8:46:e3:46:ab:63:43:
97:4c:18:c9:87:06:53:ca:dd:e4:12:24:03:32:aa:
50:61:fe:cc:5c:b5:e9:9c:3f:8c:73:42:2d:ba:93:
69:f2:5a:7b:ef:2f:49:9b:a0:a5:2f:2d:c4:6c:c1:
2b:09:85:de:fd:d2:a9:e1:00:8c:f3:4d:5f:20:3e:
dc:70:09:9a:1c:0f:86:72:8e:13:bf:00:9a:12:29:
7b:81:90:83:0f:a7:e5:f9:df:4d:7f:b2:89:2c:f7:
2a:35:e9:9c:43:82:82:c3:ea:90:15:a0:65:dc:26:
94:77:01:83:51:0e:35:36:22:f6:14:4b:fa:a0:be:
d6:1b:15:44:ee:0a:f3:15:4e:dc:2f:9c:73:48:f3:
61:45:36:77:0c:07:91:5f:d6:e2:84:bd:e3:6d:2a:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:E3:22:EB:C7:DE:89:05:BF:21:FB:37:C9:DE:53:66:BB:23:21
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:73:57:f4:88:9b:86:97:7d:5f:8e:6c:59:89:99:1d:75:
85:81:77:0e:7f:2e:b3:3f:ec:9e:bc:14:b5:7a:66:c2:82:95:
a1:52:29:02:c3:bb:a5:fb:2c:6a:6f:52:2f:e3:b2:27:86:0e:
b8:10:37:fc:e5:22:53:94:51:58:ed:73:93:a8:59:be:54:45:
a2:08:31:fd:6b:ee:6c:b9:79:08:6d:da:c3:36:a0:4a:25:62:
c2:22:7f:6a:44:19:7a:6e:63:b2:81:36:13:8d:01:0a:6f:45:
22:80:c7:8e:ac:e4:55:6f:d8:14:bf:93:9b:94:23:c7:37:b9:
f5:9a:dc:cb:20:34:88:3f:a0:0f:09:af:12:c1:30:9c:2c:87:
06:ad:42:9a:41:18:ce:d2:f3:5b:ec:81:59:76:7c:1b:6f:d6:
1a:38:89:24:da:56:05:89:9b:6e:8d:75:b0:76:e2:13:2a:e6:
d1:f6:ea:94:f8:a5:e2:b1:cd:2d:ea:43:3d:b0:eb:05:fe:2d:
f6:4e:c0:01:f7:ef:cc:e9:30:15:1c:64:3d:2b:16:c2:98:1d:
7f:8b:7e:e2:c1:e5:45:e7:f3:a0:a1:43:c4:58:b6:08:d6:42:
e1:bc:82:8e:b8:a1:4a:e7:fe:3f:4e:4b:dc:68:e7:0d:0b:fc:
38:99:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:34:12 2026 by rpki-client