Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: Y+51dEhLf5UCpE7W+HAGz3ABBg6wn7fPju44iSpmARw=
Subject key identifier: 5A:D6:ED:04:19:EB:25:1D:C3:66:0A:D3:45:98:A2:BA:9A:68:22:B0
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 019D37C02599C2A54DA1DA85EE50C382873E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: 7umZakUzeT/ntt8iF63z8+dO3gFpH+FpX9Slb3DPjNA=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:25:99:c2:a5:4d:a1:da:85:ee:50:c3:82:87:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=5ad6ed0419eb251dc3660ad34598a2ba9a6822b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:b3:b0:5a:ae:09:3d:ef:85:aa:d8:32:eb:
2e:c2:cc:5e:36:4b:d9:7f:6d:86:7a:a3:31:fc:c8:
99:76:15:42:28:02:6a:db:be:e4:a8:c1:29:ef:7d:
3c:e0:d0:d9:a7:b8:7f:bc:e2:7f:20:4c:57:f2:54:
fe:d7:4e:83:b6:e2:3b:de:19:e2:91:0e:eb:cf:3f:
5b:45:40:64:e9:3c:94:8b:a5:20:6a:5d:86:d7:34:
1e:5a:81:37:a3:4c:fb:48:e7:df:5b:9e:82:6b:3d:
42:b1:fb:9c:1b:b3:89:92:8b:28:ca:4e:8a:27:0a:
c3:67:ec:cc:80:71:e1:93:17:f2:c9:05:68:fb:63:
99:3c:10:7f:67:30:dd:b9:cc:97:66:53:91:9a:1b:
73:bf:a8:55:f1:74:d0:33:c7:91:ed:3e:fd:67:e4:
a5:5c:3b:97:a6:0b:06:55:35:e1:fd:d6:92:c2:36:
e1:1d:c7:65:5d:dc:18:2a:d0:f6:a7:47:c7:94:02:
22:40:56:38:a2:65:18:c5:ad:00:9f:38:40:a3:ee:
96:d9:06:e7:9f:09:41:5d:74:d1:68:ab:a7:e1:3d:
0a:29:71:f7:72:81:e1:a7:78:40:98:0b:67:44:59:
9c:c8:bc:9e:c8:c9:2f:12:63:df:b5:05:47:1f:a2:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:ED:04:19:EB:25:1D:C3:66:0A:D3:45:98:A2:BA:9A:68:22:B0
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c0:99:bd:ea:ed:f4:eb:14:c0:3a:86:f7:50:71:d5:36:e1:
bc:4a:e8:00:24:46:77:e0:f0:af:d9:ee:b2:ad:3c:35:60:8a:
11:14:58:9e:14:fb:06:c7:a7:65:c9:e6:52:bd:02:f5:26:29:
81:20:5d:59:c0:08:6d:fb:6a:b5:d7:11:bd:80:3c:bb:5a:5f:
1e:95:ac:bd:fc:f7:8f:1d:d8:f6:6d:2a:b6:10:eb:0b:ac:73:
9e:f7:ed:fb:9a:a0:0a:e2:66:96:0f:a3:08:17:b2:f3:29:3e:
42:8a:85:2c:84:7d:21:62:aa:c8:6d:3d:c3:54:67:02:8e:a1:
ea:f0:e7:55:f1:39:bf:59:ca:0d:e1:e8:f7:63:49:c7:ae:da:
78:7d:3b:fb:4a:11:64:fe:70:dc:b7:c0:44:88:ca:15:e8:32:
a6:b0:07:43:5c:b1:39:ea:4c:88:35:8d:5a:e9:c3:8b:e1:9a:
3e:44:e8:6d:a5:0b:df:9e:2d:e9:ba:ce:49:a1:64:14:da:f4:
bf:84:fa:3a:d7:48:e1:b5:27:a6:1e:93:ae:75:0c:4e:e8:63:
95:9b:7c:c1:75:57:81:44:9f:5d:b2:8f:5a:22:12:c6:46:e2:
e9:7a:d2:3d:e0:9a:1b:25:40:d1:ea:54:49:5d:f4:ca:7c:4b:
54:7e:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client