Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier: onP7oTTxOJBmroJnTGRy+VoB8ldLZSP26iCLUMsfAYo=
Subject key identifier: 23:3D:3C:C1:CF:66:B6:65:9E:F3:69:85:C7:4F:32:59:28:F1:35:04
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial: 019D390A6CE5B307F738ABA130FF2F6F3EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number: 1376
Signing time: Sun 29 Mar 2026 10:01:17 +0000
Manifest this update: Sun 29 Mar 2026 10:01:17 +0000
Manifest next update: Mon 30 Mar 2026 10:01:17 +0000
Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: stwS31uW0VcjMyfo4IZnDkQppINfZrCLZsujKFvrK18=)
2: iw4AqRmRIMQgRY1v_jIj27JTYNA.roa (hash: gkzi1z5bUJVhySMVCKKlEz9ici4xT0whvHOWhFzYVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:6c:e5:b3:07:f7:38:ab:a1:30:ff:2f:6f:3e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Validity
Not Before: Mar 29 10:01:17 2026 GMT
Not After : Mar 30 10:01:17 2026 GMT
Subject: CN=233d3cc1cf66b6659ef36985c74f325928f13504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:3c:ba:97:9d:d6:2a:9f:bb:fa:97:16:51:
5f:36:f3:e8:8c:56:73:10:4b:19:5b:d1:64:d1:b1:
b5:43:c4:ba:8a:85:af:35:c5:93:31:78:9f:d1:ef:
c4:3a:73:d8:d4:8d:00:94:4f:bc:6e:77:ee:0b:86:
58:6c:79:8a:d1:9c:63:57:06:7b:c6:ee:cd:05:71:
42:85:66:b7:2e:6e:6b:9b:cd:06:9e:8c:c5:d2:31:
96:73:da:95:d9:ca:f2:2f:2d:0b:82:fe:d5:69:2c:
12:67:09:2c:de:b2:be:45:42:7f:00:14:3a:33:40:
00:6f:81:46:48:bb:8d:82:41:b0:b6:7c:b5:10:66:
a1:d1:b0:12:8c:b2:ca:c3:b3:2e:88:f5:ee:30:c8:
9c:08:16:3e:79:60:e6:76:5c:1e:84:9d:c3:03:0c:
e2:5a:25:56:f4:26:8a:dd:a6:d0:4b:40:88:04:b6:
02:a6:9e:f6:55:06:a9:ad:a2:05:05:4c:07:72:6c:
86:ac:ac:c1:f4:5e:ac:f2:74:b4:82:30:71:68:73:
89:70:61:8a:9c:e8:da:df:4c:81:42:f8:6d:48:9e:
24:2d:41:63:04:f9:aa:55:1a:39:77:04:6d:36:27:
75:33:22:61:74:8a:05:b3:6c:38:36:cc:34:73:3a:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:3C:C1:CF:66:B6:65:9E:F3:69:85:C7:4F:32:59:28:F1:35:04
X509v3 Authority Key Identifier:
keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3b:a3:28:75:90:e3:59:99:9e:26:a6:0e:1c:ae:dc:18:ec:
70:9a:1f:ab:d7:cc:2d:7c:17:96:10:92:a3:87:89:02:1c:08:
6f:bc:3d:fd:cd:36:46:4b:62:07:63:7f:e6:71:b1:20:03:c7:
68:03:fb:e6:ce:c9:82:dc:ee:5b:28:1c:de:73:99:a2:ab:e6:
ed:b2:1e:2f:f2:f6:34:7e:fb:95:a5:a7:23:14:e8:fe:71:d3:
28:1a:92:4e:eb:66:e0:f2:4b:3e:47:f8:f1:e1:15:58:cb:5f:
29:f2:f5:03:c9:ef:f5:74:0c:dd:d0:ac:02:6b:1d:86:b9:4d:
52:34:c8:8c:fe:2b:ce:9c:31:45:6f:e9:b9:1f:03:2b:48:a1:
d0:44:70:81:b8:47:b8:8a:f7:d6:27:ee:8c:b2:79:46:2c:f8:
fb:6c:32:e0:f7:19:d7:c4:25:29:11:21:ad:ff:c9:92:80:23:
0e:f7:98:1c:53:20:48:80:2b:f9:19:d3:0a:1b:84:99:e3:be:
a6:7d:9e:20:e8:4e:93:6d:7d:f4:55:fe:48:72:c8:2c:bf:22:
9c:4f:3c:01:6c:1d:dd:71:54:0f:49:18:c6:03:ad:55:8a:0e:
8c:3b:cc:ad:9b:21:e5:aa:a0:4b:c4:55:2a:a3:b6:1a:27:38:
0b:88:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:48 2026 by rpki-client