Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier: jREDvweVtyFN3faVOw6L7kV0yuETTSCB7x4wtsTiKmE=
Subject key identifier: 3C:8B:D6:F5:73:F4:88:41:15:A7:0A:CB:FD:13:7A:08:30:E7:27:4A
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial: 019D37895AFC0CB1B0D7032C87DA5F5D7D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number: 11EB
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: CvlT8XgWCNuSSaYILqFrDUnlk8Q.roa (hash: /PY60x69f1RFb1+VeQA4srQb3VpoSBgqHMBssXQXw/A=)
2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: R53Jb8NcYX4apCDE5LetMchriHXCbvdV8NT1GZ6WS7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5a:fc:0c:b1:b0:d7:03:2c:87:da:5f:5d:7d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=3c8bd6f573f4884115a70acbfd137a0830e7274a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:b5:d6:52:8a:32:1f:cd:fb:76:21:98:7c:
a3:99:82:1d:18:46:5b:2e:fe:d3:d7:bf:2b:58:ac:
05:3b:4f:d8:3f:62:f6:ec:f3:20:7b:4a:a3:4d:56:
5e:80:19:99:53:98:43:c5:fa:a9:1d:86:93:ca:77:
2a:1e:af:be:a9:a5:fb:ed:fa:27:4a:0c:1f:61:78:
7e:4f:7e:ce:a4:5e:f2:42:10:9d:2c:1a:16:e3:a6:
3d:31:60:17:30:4b:b5:bd:db:b8:06:28:a7:63:22:
43:04:e8:ba:a1:23:9c:95:ea:94:cc:81:00:61:ec:
4d:e4:25:9f:87:0e:ea:bb:3f:ec:bc:92:4a:70:55:
19:f6:54:02:44:a3:27:b8:4b:3f:29:ab:6f:1b:d3:
27:6f:60:5b:94:6e:59:ad:8d:c2:78:40:47:3d:f7:
a8:e1:b8:73:11:5b:fb:2f:f6:d3:2a:a3:d7:5d:93:
fa:2c:48:27:4c:a1:72:6d:61:9f:df:5d:07:70:56:
07:2d:a3:ba:93:c6:87:47:29:86:43:16:a8:ff:80:
61:51:93:38:cc:6d:ae:f0:8a:0d:01:a5:55:26:99:
b3:11:88:bc:ed:d4:3b:05:86:7b:d9:50:42:24:64:
cf:c3:31:0e:af:1b:4d:a3:0d:b6:3b:64:6d:ea:42:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:D6:F5:73:F4:88:41:15:A7:0A:CB:FD:13:7A:08:30:E7:27:4A
X509v3 Authority Key Identifier:
keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:2e:79:31:87:af:6b:7b:27:6d:cd:68:c9:dc:35:14:06:
bb:93:b6:03:59:bf:d9:73:e1:47:86:e2:3a:a2:33:49:89:ec:
d4:5d:b4:68:dd:9a:03:ce:bb:90:c7:10:b7:27:02:de:48:32:
a3:8e:c9:c6:db:a9:f9:28:f1:6e:3c:ef:bd:54:e9:9f:0a:cf:
43:e6:44:47:4f:36:77:b3:19:a3:a0:f4:cd:1f:c5:0f:03:9a:
63:44:7c:52:b4:24:c3:e4:ab:17:6b:eb:d6:0f:3a:19:db:3f:
b1:60:46:95:8a:e5:48:56:75:cf:f4:2d:ea:39:a3:1f:0c:f8:
60:6e:66:27:23:bb:53:b6:dc:b2:35:bb:b0:c6:b8:a5:0c:3c:
53:ae:78:58:c9:d9:58:99:6d:28:8f:12:0f:83:9e:6a:fd:a2:
04:da:0f:ef:7b:bb:da:23:d0:c4:0d:6a:f6:42:98:76:50:37:
ea:65:7b:2c:6c:d9:16:46:74:a1:0c:63:f3:4e:71:c6:85:68:
05:05:28:36:d7:4d:c0:ef:a3:d6:f0:15:2f:fd:35:2b:83:59:
1c:5e:53:a2:93:c0:d4:f0:a2:a1:25:77:d3:25:8b:b5:0a:17:
d5:48:ef:82:b3:f0:d3:38:35:33:0a:93:5f:64:b2:68:20:33:
ee:0f:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:55 2026 by rpki-client