Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: gLRRg8VFdpiowY1TsfCGSPXT9HDkh/Cl4kkdRZi1LlI=
Subject key identifier: 0D:AC:A0:CC:20:64:BC:A3:46:F2:97:FB:E4:A7:63:87:69:B5:B9:9B
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019D3909CF42DEA66AD8139338CD3F0C7398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 180B
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: gY+dGASqjGMMRRQuEsaDojP9NROAC8k2MW/CS0g/UTE=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cf:42:de:a6:6a:d8:13:93:38:cd:3f:0c:73:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=0daca0cc2064bca346f297fbe4a7638769b5b99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:bf:c9:38:11:06:40:46:7f:00:9d:fd:cf:
22:4e:ae:8b:f3:59:63:05:df:3b:5d:8e:38:5c:12:
2e:8d:05:28:b8:d2:3d:76:a5:56:b5:0b:32:d9:42:
47:18:22:97:02:df:a1:a7:b9:bb:9a:bf:55:30:d0:
7d:63:98:63:1e:75:26:34:fa:ba:a4:a4:23:be:2e:
75:ef:13:c8:e6:0b:0e:97:57:d2:c8:97:c4:57:f6:
64:f1:36:fa:77:bd:6e:0e:84:44:05:ca:e5:4d:1b:
34:45:1b:28:dd:c8:6c:f2:b7:b6:70:46:25:70:a4:
ff:4c:86:f3:60:70:ad:69:50:e2:7b:13:17:1c:17:
f8:4c:26:b6:29:17:92:5f:f3:de:f7:c1:2b:9d:a8:
a8:77:97:58:15:a7:32:51:4d:8f:f4:b2:55:27:e5:
8b:1f:8f:42:5b:31:02:b2:cf:f9:c9:2e:e1:dd:fc:
67:ed:a1:d5:9f:c2:da:cb:0a:b9:12:79:d3:87:74:
e2:d0:aa:2a:22:03:e3:e7:41:92:67:78:b1:52:ba:
39:61:70:fe:d2:e3:91:3c:64:a6:e6:98:60:b9:ee:
11:9e:cf:a8:c9:ac:9c:6b:4b:d8:da:9a:e8:a5:66:
3b:8f:02:1c:cd:46:0c:e5:ec:7c:7f:d0:60:8e:67:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:A0:CC:20:64:BC:A3:46:F2:97:FB:E4:A7:63:87:69:B5:B9:9B
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:4d:d4:20:b4:01:5c:89:7c:20:64:a7:1d:59:e6:9a:19:
5d:be:a7:3a:2e:9d:44:cb:f0:78:6f:7a:39:c5:69:17:b2:e4:
95:e2:d9:59:f2:e6:1a:cf:2c:18:7a:dd:03:bd:67:76:b4:e3:
2c:e5:62:08:47:72:a5:ed:cb:bc:d7:9d:89:81:a7:ea:35:4d:
e3:73:78:46:8a:44:b3:78:59:65:c2:3c:f4:45:0a:61:35:5e:
ee:12:5d:0d:d6:22:ea:8c:75:2a:cd:ec:f1:29:7f:5f:ef:68:
c5:12:52:3b:2c:b8:0b:ea:fb:17:a0:ee:10:ce:25:41:44:df:
53:28:00:5a:56:0b:cc:30:b5:62:77:d8:42:6b:b1:f5:fa:62:
09:ab:f6:6a:77:76:39:59:a7:28:6e:84:95:b6:11:3a:80:58:
bc:a3:bc:93:3e:c6:4f:da:9d:06:77:d6:9e:f9:33:34:03:35:
0f:94:ab:c1:3a:3d:f9:18:d3:f4:3e:8e:3f:da:35:6b:79:d4:
e3:55:6e:8c:05:31:cd:2e:40:61:4c:ae:56:67:94:02:c6:d6:
17:25:5a:f3:29:72:9f:a1:f4:a7:f3:ef:10:67:18:d6:bb:6c:
91:9d:f5:80:5b:35:a4:53:56:ce:73:98:63:a5:28:ce:e4:b4:
b4:45:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:42 2026 by rpki-client