Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: t4yk2sRd2FLOZyCJ7MoCm2psNa3xEiobtQluoaDeS2o=
Subject key identifier: 79:6E:BA:B5:8C:93:72:C5:AC:8E:53:FA:94:76:D2:A3:B0:D5:0D:F0
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 019D39AF17E1EBA4E8B5BBF6A4A23AAE20FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 13:01:09 +0000
Manifest this update: Sun 29 Mar 2026 13:01:09 +0000
Manifest next update: Mon 30 Mar 2026 13:01:09 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: P7OAUCWNvxc7oV3T5nqrwNRptrIRL6H/n+nBlRL44q0=)
2: iRVjihfwRYJETXspv6JRTsIrfXI.roa (hash: 3nsOjJGMe27V8EM8Am0pLzNkNlpRhB+GO1fG/bewBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:17:e1:eb:a4:e8:b5:bb:f6:a4:a2:3a:ae:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Mar 29 13:01:09 2026 GMT
Not After : Mar 30 13:01:09 2026 GMT
Subject: CN=796ebab58c9372c5ac8e53fa9476d2a3b0d50df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:11:96:f4:7f:3b:ae:54:4a:9a:b2:53:d9:
56:5c:fc:3c:d3:7b:81:ef:22:5e:35:a4:25:a9:08:
cd:45:5c:a7:dc:e7:c1:46:51:17:d4:6b:4f:be:90:
3f:a0:40:c8:d4:18:fe:ac:c8:c5:30:47:e4:f4:1d:
45:2f:8d:7d:d9:b1:cf:f8:58:66:4a:3c:79:46:aa:
a3:ef:a4:00:16:49:c7:0a:43:e8:00:ee:9f:20:38:
18:60:d7:cd:f5:f0:40:97:a9:77:b3:98:7d:4b:cc:
83:c8:69:df:4b:f7:cd:9e:a4:45:b6:2d:55:26:d5:
22:f6:a0:58:e0:85:86:10:33:78:04:f9:4a:dc:09:
83:df:e0:f6:65:ad:ba:44:75:e9:2c:54:d6:54:c1:
24:b4:ab:c0:d4:91:e2:b5:7d:64:1a:59:65:ac:df:
e9:e0:01:2b:74:49:d2:e1:ec:40:55:a1:e8:50:8e:
90:48:01:79:48:fe:5a:52:d4:73:6d:58:82:62:6c:
da:ed:ef:8a:1f:2d:5a:e8:b1:18:71:1f:4e:28:c7:
b1:cf:48:5d:c0:b5:a4:b9:9e:3c:75:8e:7f:f7:28:
09:f1:10:b7:1c:6e:fd:6b:11:a7:82:2c:a3:9b:bb:
9a:aa:60:c0:0f:eb:01:9d:ef:ad:25:e3:b4:4d:f4:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:BA:B5:8C:93:72:C5:AC:8E:53:FA:94:76:D2:A3:B0:D5:0D:F0
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:29:50:14:87:88:f1:ec:29:1b:06:a7:36:b2:00:8a:c4:f2:
bf:37:1b:06:42:0a:f2:fc:d8:7b:c9:c8:81:b1:ad:fa:f0:aa:
89:cf:07:31:2a:bf:be:83:55:27:60:af:7b:49:cf:53:95:ba:
38:92:30:7b:6f:64:fa:25:5c:d9:b9:aa:dc:a1:ce:5a:33:bc:
53:2a:b5:ba:2a:9a:a4:a3:9c:2a:22:1e:8a:0a:d3:20:d2:5f:
04:af:86:a2:fe:5d:27:17:06:f8:4e:3c:f0:22:7f:00:c1:94:
f1:39:d2:22:a4:90:fd:a3:7f:a4:9f:a8:88:71:18:90:69:ed:
c0:63:2e:d0:5d:ed:0a:ab:a4:5f:f9:af:50:79:cb:45:33:87:
ce:cb:0b:13:cf:24:45:4f:18:a1:c8:95:7a:59:46:4e:92:ad:
45:2e:7c:33:16:ee:ed:01:16:80:0c:63:67:98:8a:48:5a:27:
76:e9:83:ba:35:43:cc:22:5e:45:5a:81:3f:d0:1f:a8:02:46:
1d:fb:f6:3d:ab:a2:b5:ac:53:3f:85:6b:83:a4:f9:fa:9d:2e:
23:2d:3a:cc:05:66:3a:50:b4:dc:99:c8:83:f6:7c:ab:cf:ca:
0a:6b:41:bd:5e:a4:8c:e1:16:29:da:18:6f:54:27:a7:12:54:
85:8e:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:16 2026 by rpki-client