Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: 4MZtcVhlXbzFWxyJc+C20m/Whwy57+jDcSmJVBtB2qE=
Subject key identifier: 3E:00:E5:E2:20:05:21:AD:5C:4D:79:3E:05:E4:89:0D:49:45:0C:35
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 019D382DE324E713158AE28B6C22A7100549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: sweB+Ph2/z6IKYm9sBCVNuSKyVDxVqr1PlM0q19j3u0=)
2: w0HfD9OyluQqly0Onm0X_I_L5yk.roa (hash: Z0gnGoagQr+uA1M5JDoWrnZSUOuqJJgP2N6rVdd6JcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e3:24:e7:13:15:8a:e2:8b:6c:22:a7:10:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=3e00e5e2200521ad5c4d793e05e4890d49450c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:ae:c9:6d:5a:06:eb:21:fb:23:75:cd:c5:
14:e2:ea:5e:e4:6e:9c:31:04:2c:d2:d8:b5:8c:ff:
2b:81:0d:05:f8:67:d8:ce:a7:4b:88:5b:a6:4b:b7:
1a:50:31:a7:52:8e:55:d2:53:a2:bc:8f:17:55:1a:
51:6c:a7:b7:33:bd:66:e6:94:f3:e4:6b:05:9a:65:
56:a8:11:42:f5:84:ad:7e:bc:d8:73:95:01:58:fe:
03:9a:8e:0d:43:a6:78:5b:22:5c:67:78:3c:6b:b7:
13:69:74:33:35:71:49:20:b0:20:e2:a3:cb:c9:97:
c1:92:3e:05:1f:7e:89:dc:4e:5f:75:cd:41:8c:9c:
9b:46:4b:88:08:dd:e8:a6:41:17:a1:4e:2e:e8:ee:
f3:2a:6b:92:e3:5c:cd:3d:c7:93:a7:d4:2a:57:19:
97:72:28:b1:23:33:fe:66:04:75:48:a0:05:01:d7:
4f:30:f1:d0:3e:19:a9:2d:73:a9:23:d5:0e:9a:92:
fe:63:78:7f:a2:3a:88:9e:d5:fe:37:1d:e9:f6:e5:
ff:f8:95:01:49:c6:9e:0f:18:52:0b:01:f1:d2:f5:
31:15:25:f8:06:07:5a:44:43:4c:94:db:1f:23:38:
17:8e:c6:db:06:d6:53:04:b4:f0:77:73:89:4b:91:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:E5:E2:20:05:21:AD:5C:4D:79:3E:05:E4:89:0D:49:45:0C:35
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:71:28:6b:d2:65:9c:a7:c4:79:0a:69:f5:a5:e2:29:0f:bc:
28:f9:ff:2c:eb:7d:fb:91:ad:a7:48:33:9d:ce:3e:09:33:ce:
0e:6b:fb:21:28:51:d2:95:86:5a:03:9e:c4:74:9c:20:f9:fe:
d2:73:7d:9b:2c:ad:19:77:be:c0:79:64:85:2c:50:ab:6c:08:
65:c2:1c:d5:75:e2:bc:6d:ab:61:3f:32:85:4d:20:78:28:c0:
d4:b1:94:4a:0a:1f:0c:a2:f6:54:d2:4c:22:d8:30:d3:98:d7:
e2:92:94:36:37:d5:a0:0b:48:43:0e:35:ea:f1:a3:6d:d1:82:
53:2a:09:5f:7a:53:ed:e9:7e:e5:6b:97:f3:0d:33:1c:89:ef:
45:fa:9f:3b:1e:3a:66:e5:23:9d:89:f0:bc:c6:ad:e9:a6:cd:
8d:32:28:7b:3b:42:c1:44:80:68:80:a5:c5:d6:88:cd:6e:69:
d9:64:4a:4d:8d:e2:b3:45:c0:81:45:c8:b9:73:0b:56:b7:6b:
9b:ed:e0:e2:d4:b8:72:1e:d1:85:2a:02:35:71:69:b7:90:41:
5a:fc:26:a5:69:24:20:78:de:ae:9e:2c:ee:54:d9:cf:1e:31:
cf:47:cb:ab:23:f4:c8:79:0d:56:dc:12:94:b5:24:65:f5:14:
9e:97:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:30 2026 by rpki-client