Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: moRbh5zC/82EOHj6QLpthp6d6ncMXEkoXQXDHhvJ8kc=
Subject key identifier: 28:7F:8A:03:A4:07:CD:A8:58:E6:44:90:CB:D4:82:2A:51:DA:44:C1
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 019D390A2BF119098DD5A997566C0F6B66A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:01 +0000
Manifest this update: Sun 29 Mar 2026 10:01:01 +0000
Manifest next update: Mon 30 Mar 2026 10:01:01 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: ec2mxvPaue3fiOdJl5fSbzDdcrwHCzZ81ibuewE9bI4=)
2: jo-cApUMfytJRLjyqZu8PQpfm7Q.roa (hash: nKsoRDB1XLESPLhaJ1oOEaKx2I9wuaAQLSTqRK4tXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2b:f1:19:09:8d:d5:a9:97:56:6c:0f:6b:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Mar 29 10:01:01 2026 GMT
Not After : Mar 30 10:01:01 2026 GMT
Subject: CN=287f8a03a407cda858e64490cbd4822a51da44c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:91:c8:4f:70:51:1c:09:58:80:a8:1c:b8:
50:b4:f5:f5:c9:1d:2a:96:d8:f0:2e:41:b9:8a:55:
5b:1d:fe:bf:fd:83:f7:1d:b4:bb:1f:18:9a:44:da:
34:94:6d:c6:01:e9:4f:28:57:e9:c0:23:bc:d3:ee:
56:41:85:86:cd:9e:03:fa:a5:9c:ff:7f:d5:fa:1b:
8c:48:15:99:37:cf:fe:66:21:ea:6f:1d:7e:92:d0:
c5:51:15:9e:51:a3:78:18:11:2a:70:3d:aa:72:fc:
70:64:1c:b1:32:cd:1c:e9:c3:93:b3:bd:18:04:e2:
55:6b:d0:51:08:72:49:08:d9:c2:85:2b:5e:1b:ad:
3a:f2:b9:45:17:96:e1:28:40:ae:05:0f:94:5d:eb:
53:a9:9f:ee:64:bf:f4:4f:b6:68:43:c9:36:55:6b:
32:28:61:df:5e:dd:f4:cf:a0:6f:02:73:86:25:47:
af:ce:98:77:c1:4f:17:40:3f:ae:0c:30:3d:12:ee:
83:5a:09:72:77:d1:84:ac:01:0d:27:ab:a6:84:e2:
b4:52:fb:eb:bb:d2:fd:f0:8a:e3:eb:77:a8:a7:0e:
1b:5b:f7:69:c2:81:c3:14:75:bc:ee:1b:28:e0:b8:
43:1b:96:f4:b0:9a:57:58:a9:66:94:6c:40:b4:6f:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:8A:03:A4:07:CD:A8:58:E6:44:90:CB:D4:82:2A:51:DA:44:C1
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:24:b7:8f:16:e8:47:49:0c:4a:e8:2c:53:53:95:06:4d:e9:
1b:b9:a8:04:74:f1:14:fe:f9:94:4f:bd:85:ca:d7:bb:2d:6c:
74:47:6f:d3:f3:b6:0c:61:1a:b2:f2:fc:33:5d:77:0c:6e:5c:
0e:9a:9a:93:1a:fc:ef:b1:aa:8d:96:22:32:13:2b:d4:ef:fa:
e5:66:3b:bd:39:64:6f:de:61:d9:23:f6:57:53:a0:65:12:09:
2e:aa:02:cd:36:89:33:f7:32:35:f2:c1:99:a4:cf:e5:8f:46:
ac:63:73:10:33:d4:1b:a7:8d:98:57:32:b1:76:bc:52:69:8c:
b9:1f:cd:99:d9:90:9b:5f:bb:72:d5:4a:a7:51:45:59:fd:b6:
28:88:a6:6e:78:c9:d6:1e:4b:db:1e:d5:85:0a:91:63:4e:e7:
8e:7d:0c:0e:be:a1:8e:c2:b6:b1:c9:ca:94:ee:5a:0b:59:e9:
af:7f:ee:14:20:0e:a0:fa:38:ad:01:12:60:8f:43:28:8a:04:
2e:f2:8b:24:3d:35:60:07:2d:bc:3a:cb:cf:7b:9e:5a:0b:2f:
37:93:ed:d2:9a:6e:02:8b:b6:8c:c8:b5:cd:74:65:77:ca:b8:
60:28:ae:73:40:2b:af:be:9c:17:ef:42:6f:da:33:06:45:88:
e1:58:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:42 2026 by rpki-client