Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: 0QHv6d4xH6iecqvsAWirxv652c7xUyB5Yxb9yRKsfWY=
Subject key identifier: 3A:C2:6C:28:AC:B0:08:ED:C5:34:BD:16:01:97:5F:9C:46:69:2B:D9
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019D318780448BBD419F71A837158EDDE1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 0303
Signing time: Fri 27 Mar 2026 23:00:56 +0000
Manifest this update: Fri 27 Mar 2026 23:00:56 +0000
Manifest next update: Sat 28 Mar 2026 23:00:56 +0000
Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=)
2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: 6Atvt2NFnA34ED5Z35L2aJ6yjBYh02ZtrYAGZLrwlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:87:80:44:8b:bd:41:9f:71:a8:37:15:8e:dd:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Mar 27 23:00:56 2026 GMT
Not After : Mar 28 23:00:56 2026 GMT
Subject: CN=3ac26c28acb008edc534bd1601975f9c46692bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:dc:9a:e2:9b:aa:16:23:18:29:6e:cf:dd:
86:97:0b:f8:13:de:0a:25:54:0b:84:06:81:06:c2:
31:6b:4c:67:56:23:54:b9:c4:89:01:1c:8a:bc:09:
05:95:42:e4:e7:e0:f1:8f:a0:df:fc:7f:01:09:15:
a2:3a:23:c3:b7:d4:8a:34:32:0c:7a:31:56:20:ab:
ed:a8:63:c6:9a:4f:a3:96:90:34:a1:cf:a5:f4:cc:
45:a2:7d:6f:a4:2d:fe:e9:86:80:85:d2:7e:0d:30:
e9:6f:4b:c1:76:42:81:ad:d9:02:82:18:f8:d4:65:
27:44:55:12:af:df:f6:67:3d:f0:99:97:29:7b:2b:
bc:64:42:30:32:8b:ac:a2:d3:6f:61:87:5a:5c:20:
a7:0e:4e:1d:e6:32:5e:ab:88:52:da:38:33:19:a4:
15:da:7d:59:15:56:76:af:f3:1b:9e:3e:3c:09:28:
3d:1d:df:66:66:ef:a7:9b:58:25:1c:cf:c3:84:48:
18:1d:3d:d6:c1:3a:76:4d:ce:bf:bb:85:0b:50:58:
1f:23:10:82:bd:86:b8:0a:e3:8c:77:a8:b8:95:b2:
a5:4e:d0:be:ab:de:0b:a6:c1:15:8e:94:c9:3e:46:
4f:c4:5f:cc:33:a1:70:72:b3:16:da:1f:89:63:c2:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C2:6C:28:AC:B0:08:ED:C5:34:BD:16:01:97:5F:9C:46:69:2B:D9
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:55:aa:9d:66:82:86:70:04:83:47:89:dd:9a:6b:f9:8c:
a4:d1:f8:94:b6:81:a5:96:63:43:25:11:5a:7a:ca:db:26:a8:
79:6c:67:2b:26:4e:f7:ce:d3:1f:f7:a4:fe:29:c6:98:5f:8b:
68:59:98:42:d6:26:81:d1:e2:4a:09:c7:c0:3c:e0:b2:65:88:
7d:3e:b4:16:9a:69:d5:f6:c5:a3:3a:4d:32:cf:63:8e:e8:af:
66:cc:5f:84:fe:6e:20:9d:40:cd:94:20:66:00:51:f7:d0:52:
98:58:2c:f6:6c:91:be:a1:af:c4:7c:f2:11:58:68:d2:fd:40:
f4:35:93:4d:03:28:72:e4:0b:7a:fc:b1:46:e5:4d:20:e0:31:
52:a7:7c:85:ab:91:d9:f6:54:ca:01:c8:71:d8:55:77:30:f4:
12:91:b4:f1:33:1a:6a:19:c5:8b:48:2c:18:00:da:43:63:91:
25:7a:fe:ac:9d:d1:db:50:62:c6:71:e9:b6:8a:79:8e:5d:40:
dd:e9:13:39:5d:fa:99:d0:18:0c:99:c0:1f:4d:a4:93:57:b6:
e9:ce:20:e8:4f:e2:0b:fb:ba:42:29:68:ee:18:1c:d3:04:88:
ee:70:a2:af:7a:9d:79:a8:0b:c6:e6:7b:7d:34:0c:c9:d5:da:
a8:42:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:45:26 2026 by rpki-client