Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier: ozJ79jfW+/tTh12A0dDDwKT/glgtuElFE0msrXJ2jC8=
Subject key identifier: 10:17:8E:58:F6:B6:5D:A8:E9:CF:28:B6:A1:6F:22:C3:5F:E5:8B:B6
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 019D1AC8922874CDFACB3972C49315E3EB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number: 0384
Signing time: Mon 23 Mar 2026 13:00:45 +0000
Manifest this update: Mon 23 Mar 2026 13:00:45 +0000
Manifest next update: Tue 24 Mar 2026 13:00:45 +0000
Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: 6me1Avm+Z6rZoWbiYRcgj+FQCvXuVOKojigtkl3/LiE=)
2: ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa (hash: v7QZ8HhFIWG34nVuRTJxlOgKji8pCozgn4SVeyKdDG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:c8:92:28:74:cd:fa:cb:39:72:c4:93:15:e3:eb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Mar 23 13:00:45 2026 GMT
Not After : Mar 24 13:00:45 2026 GMT
Subject: CN=10178e58f6b65da8e9cf28b6a16f22c35fe58bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:85:c3:ad:9e:68:4f:ce:e9:c7:13:46:aa:
85:23:ab:67:23:0f:7b:bb:ea:ba:7d:51:dd:8d:08:
2c:d7:3f:13:bb:2c:63:08:1a:2e:b2:32:c4:c2:f5:
f4:e1:98:a4:1c:db:5e:9b:ff:5f:5f:71:25:ba:b1:
8b:e7:5d:83:07:7f:16:25:a4:16:38:fd:f1:99:aa:
4d:d0:5a:a7:d7:f6:e6:10:78:88:6f:22:8e:30:26:
ee:72:06:5c:b8:6d:05:70:65:75:e8:cc:e2:1e:d1:
24:81:cb:f7:3d:eb:29:6d:d8:91:ef:e6:a6:7f:94:
3b:82:2b:a1:3f:7a:13:13:c1:4c:7c:cb:e9:db:76:
a7:66:92:b2:3e:f3:da:35:b5:b7:d4:f4:b6:7e:23:
80:4b:53:f5:f7:88:c3:d0:7a:77:7d:f9:86:62:70:
6f:88:82:c4:1e:eb:4b:fe:d7:18:3c:94:31:6a:d6:
fd:76:c5:4e:b4:06:ff:28:83:b3:5d:b1:cd:7a:03:
d2:ba:43:39:d4:c6:a5:ad:97:99:50:dc:21:7b:b1:
4d:fb:94:12:a5:5b:44:1e:ab:c9:7f:fd:d9:3c:d2:
d5:27:ac:e6:e1:d0:8a:d7:3a:d2:f1:78:5b:08:ed:
0d:8a:c7:21:81:52:33:75:6b:ff:6a:85:1c:89:b5:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:8E:58:F6:B6:5D:A8:E9:CF:28:B6:A1:6F:22:C3:5F:E5:8B:B6
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6d:45:90:19:2b:45:db:fe:c3:fb:cb:31:d5:c7:f0:df:e3:
c6:31:c4:6f:f2:d7:f5:eb:59:81:85:c2:ef:a6:da:0f:66:36:
ec:33:50:45:e9:c3:b6:70:f0:56:e2:85:a8:fa:d6:a8:90:8f:
29:f8:e3:7c:52:f9:48:f5:33:a9:e6:e9:68:54:1b:f0:5c:67:
2e:69:57:e1:57:85:f0:58:53:fb:74:88:43:b3:81:a9:32:3d:
06:ac:62:02:9f:f4:a4:0d:a3:bd:03:12:89:33:a7:fb:08:4c:
ec:ca:82:c7:25:8e:d2:d4:d0:79:e8:15:65:51:e1:0b:99:51:
c7:bc:08:c5:48:b3:7b:c5:46:65:28:de:f1:6f:c3:5a:6c:5d:
50:96:f8:98:4f:6c:22:28:f1:83:f5:43:0b:8a:39:9c:b1:f8:
08:bf:2b:80:37:70:18:a7:e8:4d:1c:7a:48:dc:3c:8b:63:e4:
ae:d7:e8:b5:de:b7:5e:58:d1:9e:8e:66:9c:ed:34:2b:f5:48:
63:a9:20:c5:53:0c:d2:f3:6e:1f:27:ba:28:8e:a3:01:58:67:
67:67:14:89:83:45:b0:d9:fd:ff:58:fd:73:40:20:80:25:0d:
8d:29:7d:67:7a:0e:52:36:71:a9:d0:f5:20:fb:d0:a3:2b:8f:
e2:08:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:59:01 2026 by rpki-client