Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File: HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier: mrmvT0bypypMKrfvvV3tikYt7x23IO+4ZF/PYTaNiI4=
Subject key identifier: F4:DC:85:16:79:74:C5:12:EE:B1:FD:13:6B:64:1F:5E:8A:A3:34:15
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer: /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial: 019D39AF0F955650BD01F9910781F1EAB0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number: 0D5B
Signing time: Sun 29 Mar 2026 13:01:07 +0000
Manifest this update: Sun 29 Mar 2026 13:01:07 +0000
Manifest next update: Mon 30 Mar 2026 13:01:07 +0000
Files and hashes: 1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: IxNM0U06bxnW9MFHGwqI1mi+iSFxmuWoUJ/i9gKJUIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0f:95:56:50:bd:01:f9:91:07:81:f1:ea:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Validity
Not Before: Mar 29 13:01:07 2026 GMT
Not After : Mar 30 13:01:07 2026 GMT
Subject: CN=f4dc85167974c512eeb1fd136b641f5e8aa33415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:54:57:cd:02:dc:10:10:ff:89:5f:d3:36:
c4:60:bd:20:b1:c8:55:9f:28:78:af:8a:30:ed:22:
19:ea:a5:dd:f6:d3:8b:1b:61:27:7e:96:7d:fd:6f:
b7:93:51:49:1e:76:a5:c1:58:66:39:6c:45:6f:27:
9e:9e:4c:cc:2f:9f:46:37:9d:88:49:ba:86:a6:df:
4d:c7:ae:c6:dd:95:19:0d:d3:86:e0:ce:86:ca:39:
d3:38:ce:2c:cf:c6:4b:d7:7e:86:34:f4:4d:5d:b9:
5e:77:50:c9:06:8c:32:d2:59:63:d5:db:ab:45:69:
1d:ba:60:86:f5:89:a5:e5:f8:66:c3:21:45:2b:31:
ba:f5:c0:42:f3:1c:a1:7c:8d:ed:3a:d7:77:84:32:
aa:f0:ef:e6:c5:cf:fe:d4:7b:8e:d6:0c:55:02:3d:
da:60:cd:91:da:1f:59:e7:2c:1f:4b:59:33:2e:df:
3a:78:56:f0:74:06:62:62:cc:50:d8:95:d6:86:2a:
af:9f:37:c7:ce:76:1c:a8:43:c8:68:5f:cc:60:2f:
6a:b4:96:45:52:b4:42:c8:be:cc:99:91:63:66:fe:
35:c2:c3:a5:27:43:d6:4f:5b:39:f7:76:af:0d:43:
34:a0:17:5d:c8:7b:54:f2:e9:7b:89:a1:df:4e:1e:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DC:85:16:79:74:C5:12:EE:B1:FD:13:6B:64:1F:5E:8A:A3:34:15
X509v3 Authority Key Identifier:
keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:7b:4c:19:90:8e:16:c4:e2:96:a1:05:2c:43:d6:59:6d:
92:78:52:6c:7b:a7:19:92:3b:6f:97:52:07:1d:c5:f4:0c:8b:
f6:1e:69:13:4b:55:13:1c:89:b3:0e:4f:39:5e:ff:4a:ed:b6:
52:b9:11:4f:1d:97:1e:fc:18:fa:e6:83:60:c1:14:d7:df:b8:
0b:42:a5:db:7f:42:74:f0:10:5e:2b:a8:24:d3:2a:9b:66:68:
c0:06:7c:28:bb:b5:b5:dd:4c:24:04:e9:03:6f:c4:99:ab:56:
be:df:3e:c3:a2:eb:38:e0:29:d2:64:b7:10:ea:95:95:f2:80:
25:cf:fc:e3:78:e9:83:28:de:9b:1e:c0:48:cb:4b:41:99:d9:
c1:d8:51:8e:f1:22:5d:c1:6d:67:ba:8c:56:39:82:df:73:6b:
d0:e8:87:dd:c6:19:7d:81:ca:e2:e4:a5:d9:81:96:1d:dc:e7:
88:39:e6:ef:4d:df:3f:21:a7:16:52:c7:7a:47:28:51:b9:79:
2c:01:8f:38:3b:05:d7:4c:0d:e6:09:68:9f:4e:ea:7d:cf:c8:
8e:e0:64:3b:6e:47:20:12:24:2e:47:61:39:6c:5c:a7:5a:34:
7b:6b:3f:2d:25:ac:db:78:da:a8:58:e0:64:25:14:82:e9:bb:
cf:1f:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:47 2026 by rpki-client