Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: /B3+9eTGiUaIeA7l0ta8IB1/YchH1ZYJ3zgksXf2GZo=
Subject key identifier: F6:81:2F:34:FE:67:6F:19:02:A0:B8:F4:C4:87:1B:EC:CF:C7:1E:B4
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019D378983E28D0DFBA8268793B78CAF78BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: EGLIehM5T39K5wga1/N8VXmJMwFKXCE6sOYGEo8id+o=)
2: u7HurLe1N6a5tmgpeAM_l46SL2A.roa (hash: FNqj3YMXJAvL9/wTL5cuE2GwV4N05I6EVIR6yQYxrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:83:e2:8d:0d:fb:a8:26:87:93:b7:8c:af:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=f6812f34fe676f1902a0b8f4c4871beccfc71eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:af:12:f6:cf:13:92:85:ce:4a:5d:4a:3c:
9b:1a:5b:1a:7a:23:d4:de:7c:01:83:33:b7:13:2e:
3c:13:d3:6d:64:6e:cb:be:c4:99:99:34:74:ef:1a:
57:82:3f:72:fe:ee:9d:33:37:0d:5c:a0:6b:f8:be:
d8:12:3b:9e:80:b0:d5:7f:a1:90:fe:fc:48:75:de:
4d:48:4c:f4:ad:98:7e:05:ff:10:fb:ef:3b:c5:1f:
b5:66:4c:f9:b4:fb:35:11:f0:bc:64:69:90:17:68:
42:08:6f:cf:2c:14:7c:1e:39:0e:c2:35:68:f4:91:
97:5b:f5:58:72:b6:25:cd:b8:5b:f0:63:a3:c1:15:
a9:69:2f:7c:a1:8e:01:37:01:f0:42:27:d5:bb:10:
31:98:75:d3:8d:3b:38:dc:5c:51:9d:48:eb:a0:a9:
d4:ce:80:d8:fb:a2:39:a8:65:a7:44:00:e0:42:a4:
d8:6b:96:0b:ea:62:16:64:17:82:03:f3:54:88:c6:
3c:8c:46:c1:90:e8:74:48:1c:7c:25:33:c2:66:9a:
8b:02:91:3b:98:50:c8:68:c6:56:8f:98:ad:ac:e0:
df:c5:56:e7:e6:0c:f6:75:68:b2:5f:8d:11:f7:d0:
35:3f:0d:2b:72:12:9f:8c:68:fa:8b:bd:05:e4:1a:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:2F:34:FE:67:6F:19:02:A0:B8:F4:C4:87:1B:EC:CF:C7:1E:B4
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:ac:16:e3:1e:e6:38:a5:03:a2:4c:97:f7:50:9a:3f:01:
6c:16:d1:36:28:aa:e1:27:75:49:90:40:81:98:df:52:79:0c:
50:2d:71:aa:dc:6c:83:b9:e3:3f:01:3b:a9:e8:7e:50:2f:a6:
33:d0:ab:4e:7d:14:d8:74:d2:55:b4:00:e0:73:24:a8:47:5b:
85:b1:fd:73:0b:b3:e3:d8:f5:bc:b8:43:18:b0:cb:3a:5c:58:
1c:2b:a8:d2:16:11:5c:cf:65:39:e9:ea:c4:3e:06:6e:c9:7d:
97:10:ce:19:14:df:70:d4:78:9d:19:ac:eb:d9:a0:94:36:ce:
70:ed:b1:b4:73:4a:3f:24:e0:c8:1f:40:15:c5:9f:00:d2:e9:
9e:3e:5a:27:b9:33:9f:e7:dd:03:14:23:00:13:11:09:83:cb:
cf:1b:c9:4b:89:26:92:59:eb:2d:83:18:64:8d:96:77:fd:23:
38:0e:08:ae:06:cb:27:ff:ae:19:1a:fc:04:05:3d:ea:0f:29:
be:d1:d0:ac:d1:e5:d4:30:4d:72:61:4a:00:9f:ac:23:29:c4:
32:f7:fe:ce:0b:8c:ce:b4:fe:4d:fb:e3:43:bc:04:56:22:a4:
ad:79:31:f6:29:6c:46:4f:53:a3:7b:18:98:4e:1d:3a:65:29:
08:a9:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:01 2026 by rpki-client