Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: 1c6N1Y99qGKSu6Ewg58DBZ5AXs1bBaFJ4lNv5KH3XZY=
Subject key identifier: 36:E5:59:13:52:91:C4:E9:70:1C:7B:1F:CF:3A:BF:E5:8B:18:B6:8A
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019D37C07DAD9CCC32ED0F7040C8AE1966EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 0A67
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: h/e0j2bVG0DKahINfTTuoxl4iByCwykQio7YNp7qXhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7d:ad:9c:cc:32:ed:0f:70:40:c8:ae:19:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=36e559135291c4e9701c7b1fcf3abfe58b18b68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:81:a1:61:e4:29:61:bf:8e:f5:fe:c9:7e:
21:f0:29:4a:5a:4b:b5:c2:fc:8a:0c:08:0d:81:10:
71:f4:64:62:15:83:bc:74:3c:c0:ca:b5:42:78:3b:
12:dd:4e:8b:99:0e:de:1d:45:05:21:93:1f:5d:c5:
9a:50:dc:cb:8c:ef:2e:c0:76:fb:ff:b0:a2:7f:b9:
3e:35:f9:25:ea:8d:cf:db:f7:a6:8a:1a:93:fd:98:
62:67:14:e8:77:8f:52:a4:dd:d7:78:f8:2c:d6:71:
93:69:db:23:2e:26:d0:df:57:29:d5:0f:89:bc:b6:
48:07:e2:4a:7d:13:95:98:8e:6a:5a:ee:91:86:1e:
1c:5c:4c:60:48:3e:b8:81:be:4a:0f:08:90:7c:9d:
6c:c9:a0:8f:86:51:06:4b:9d:da:64:1a:8d:bb:f9:
eb:5b:00:e3:2d:80:32:31:33:9a:ac:4e:2c:a8:14:
c9:71:28:ca:c0:29:da:ac:a5:03:68:8f:2c:7d:6a:
ec:98:f0:9b:7b:dc:1f:72:25:89:89:f4:7b:86:c4:
7f:40:43:30:11:93:f6:d4:27:78:f0:8b:4d:82:2f:
35:7e:d9:9a:46:d3:35:fb:1a:c5:53:75:86:8f:2d:
f8:6e:54:4a:b1:94:da:61:cc:dc:76:85:a9:fe:43:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:59:13:52:91:C4:E9:70:1C:7B:1F:CF:3A:BF:E5:8B:18:B6:8A
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:bf:58:22:2b:fe:3b:36:ad:16:27:b2:a6:64:5f:0f:c3:
dd:f0:95:da:f0:51:d8:58:41:d4:75:5a:95:18:f5:3b:78:5d:
a1:62:81:60:57:93:ec:7a:88:c0:4b:3d:8f:0c:ee:fa:0b:fa:
88:98:67:1c:34:eb:0b:fb:7a:f8:c0:14:9b:c6:bf:90:83:af:
2c:49:76:64:2a:4e:46:40:98:93:aa:ed:97:4c:e1:4c:b8:c7:
4b:42:bb:ae:ee:ce:b5:ea:68:43:12:c8:08:2f:03:a8:3e:68:
6e:12:a6:68:2e:ee:d4:aa:ad:37:d7:6a:d6:2c:12:ed:b0:7a:
98:61:54:11:c1:a3:2b:2a:a3:52:88:98:21:b7:64:4f:fb:07:
69:f4:da:96:38:03:d5:89:e9:39:77:50:14:6c:4a:12:05:bd:
7b:33:8d:c7:c0:4b:7d:33:88:a7:a8:b8:5c:e2:02:08:33:d5:
9a:69:08:91:77:0e:a5:37:ae:11:93:8f:cb:15:9e:1e:ec:54:
14:15:ef:6d:6b:50:28:fd:06:91:73:8a:07:36:8b:dc:f4:ab:
fe:f7:93:98:84:83:97:5d:90:24:ad:ec:4c:66:dc:99:8b:bd:
a4:53:7e:ce:f9:a9:28:09:3f:a9:52:1d:7f:fa:36:a1:48:e4:
14:ff:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client