Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
File: HnTfStSP8hGgY1s38DeXeBnNQnY.mft (raw, json)
Hash identifier: XYytWN8MfIKOTdzdms2XZxANqbbKxrtXtqxvsRoxZC0=
Subject key identifier: BA:E0:6E:A7:1B:62:3A:1E:B9:6D:DD:BA:11:BF:ED:9D:38:0D:5E:3F
Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276
Certificate serial: 019D39AEB4DCB51EE61E2F8ED9F7510F2CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
Manifest number: 01CB
Signing time: Sun 29 Mar 2026 13:00:43 +0000
Manifest this update: Sun 29 Mar 2026 13:00:43 +0000
Manifest next update: Mon 30 Mar 2026 13:00:43 +0000
Files and hashes: 1: 7RWPmp9-_7pNcdzf-XR0ng2OtNA.roa (hash: fZ0u4xWD6WZkxbVhHY3qx/w5uvwymHMnMMF0SIttq9Y=)
2: HnTfStSP8hGgY1s38DeXeBnNQnY.crl (hash: LempDOTveXUvsXXDV8m3eJk1e5JQuEMJPAvKc4aXPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b4:dc:b5:1e:e6:1e:2f:8e:d9:f7:51:0f:2c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276
Validity
Not Before: Mar 29 13:00:43 2026 GMT
Not After : Mar 30 13:00:43 2026 GMT
Subject: CN=bae06ea71b623a1eb96dddba11bfed9d380d5e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:d1:88:21:d4:f3:d8:61:b4:03:09:d5:a0:
28:7d:f1:bd:03:24:22:85:8b:a2:2a:c7:14:c0:b9:
3d:1d:71:d7:d4:c2:8e:72:21:b1:a4:b3:bc:79:33:
ef:17:73:50:a7:e7:d4:88:80:ac:e9:60:ba:04:fc:
ad:14:f3:df:38:75:52:d5:92:1c:9e:76:a0:b6:8e:
3d:0b:58:41:61:14:26:93:26:11:81:40:ef:1d:7a:
77:27:ec:0c:ac:7c:c2:49:23:f1:d3:67:55:8f:c7:
b6:aa:1c:b4:46:2c:c2:3e:ea:29:d7:48:07:a7:96:
16:4a:68:31:26:0e:e0:8b:1d:8d:28:e7:25:54:28:
c4:1d:9f:c7:ae:c2:b0:57:3c:cd:6f:ec:54:ae:09:
b3:79:b4:bd:a9:ba:e1:01:24:1d:50:1c:43:07:1c:
21:32:dd:7d:9d:cf:1d:41:89:78:6b:01:02:bd:ce:
30:95:8c:fe:17:f1:3f:6b:33:92:2d:36:45:00:31:
9d:0f:2a:ad:e7:75:ee:c2:4a:4f:07:6a:39:a6:c1:
1d:14:12:83:54:55:0e:03:72:98:79:1b:6e:d0:c1:
3b:86:40:c6:39:c3:1a:4c:1e:ab:4b:46:66:8a:ec:
b8:ef:e8:3e:6f:d8:b2:29:b5:be:d3:fd:14:ce:a1:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:6E:A7:1B:62:3A:1E:B9:6D:DD:BA:11:BF:ED:9D:38:0D:5E:3F
X509v3 Authority Key Identifier:
keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e5:06:8a:a9:92:76:8c:16:b4:ef:e4:53:61:ea:19:10:97:
d0:ab:2a:3d:ef:a6:6e:e0:d1:37:85:e8:d5:a2:4c:a6:bf:38:
1e:67:87:e6:7b:8a:e5:80:e2:fc:c2:1b:cd:8a:53:c0:97:6a:
a9:6c:93:39:05:ee:5e:8a:b7:c4:35:48:60:66:dd:c7:0d:83:
3d:a7:ac:21:0c:44:48:42:64:27:c0:2b:c6:fd:13:af:2e:a8:
64:f7:be:fc:36:17:f8:5d:d4:dc:f6:05:f1:82:6b:c5:d6:06:
a5:b2:4c:ae:c7:0f:ba:25:6c:64:e4:39:af:d6:d9:92:71:e1:
23:63:09:12:19:2a:7d:02:28:96:7d:c5:bc:27:4e:28:08:db:
81:71:ab:85:a3:80:a3:23:36:47:3b:18:53:3d:e5:35:e8:fd:
af:54:42:dc:5d:4f:d5:3a:42:55:58:60:e8:2d:23:ba:16:7f:
48:f3:50:f7:06:32:ba:1c:45:bc:42:18:d7:83:c2:79:4f:db:
0d:3d:60:c2:e4:6b:f1:73:63:e2:35:72:57:09:36:d8:90:6e:
5a:9b:ca:53:a9:19:e0:cb:d5:06:97:f4:e6:74:b8:db:a8:d2:
9c:63:b5:e9:6d:c3:55:67:f2:47:78:c2:96:cc:92:5f:a0:b2:
b7:f7:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:26 2026 by rpki-client