Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: DcB7+75E2RvQnB7aoMJZ2fDWa8EW9zWP7DynVWQqCjU=
Subject key identifier: B1:BF:9A:58:DD:8A:D4:C4:AC:BB:25:EF:EA:CA:38:F6:EB:AE:2D:53
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 019D3865B7204075121D0A174E29C904B7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 076E
Signing time: Sun 29 Mar 2026 07:01:23 +0000
Manifest this update: Sun 29 Mar 2026 07:01:23 +0000
Manifest next update: Mon 30 Mar 2026 07:01:23 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: rhFlaxCY9WRRMojByE0hq9iKIfAnprO7FLOsi/ThSpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b7:20:40:75:12:1d:0a:17:4e:29:c9:04:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Mar 29 07:01:23 2026 GMT
Not After : Mar 30 07:01:23 2026 GMT
Subject: CN=b1bf9a58dd8ad4c4acbb25efeaca38f6ebae2d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:7d:a7:4c:1d:f7:c5:73:19:dd:4c:d2:53:
fe:aa:99:68:5e:eb:22:a9:9d:3f:14:a1:8d:fc:03:
c8:c7:5e:39:bd:00:d1:6f:76:d6:86:53:23:8a:eb:
32:fb:71:a6:e1:3a:c5:b6:9b:cc:79:2e:2b:3b:dd:
04:04:cb:76:2e:f9:4a:b4:ba:fa:79:7b:ce:05:18:
9c:f1:95:19:be:1a:c3:97:53:1d:3d:7a:8a:b6:7c:
e1:4d:45:d4:fd:90:90:ca:28:3b:10:a5:71:f4:d3:
b3:7c:b2:43:10:2f:76:25:11:0c:2a:78:e3:4f:79:
0e:88:0c:c8:d0:8c:bd:93:46:07:27:a3:68:33:27:
8a:b7:b5:d4:77:7b:f4:fe:4e:ea:09:b6:2f:0c:22:
ee:9c:78:94:9f:80:5f:c3:18:8f:66:b8:ef:47:77:
9a:b1:d9:0b:ee:00:04:f5:b8:c5:7b:e5:e8:a0:99:
49:16:91:16:00:7f:c3:4d:65:53:89:6b:ea:67:d7:
a5:c8:a5:75:2f:44:a0:ed:93:31:c3:e3:ff:0b:1b:
eb:8e:c2:8a:a1:26:ee:15:4b:16:de:f2:25:19:6b:
1d:62:72:9c:a6:dd:dc:c9:4e:c6:bf:ff:65:19:86:
e8:4d:7d:11:b8:c6:28:65:ea:98:b8:12:a2:2d:6d:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:9A:58:DD:8A:D4:C4:AC:BB:25:EF:EA:CA:38:F6:EB:AE:2D:53
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cd:04:77:b2:cc:48:31:cd:ad:41:ed:82:16:69:9d:51:00:
d2:ff:3b:49:af:5e:60:24:a8:99:85:64:f8:34:bf:7e:fa:56:
38:0b:9f:0d:b8:1b:7d:2b:79:02:05:2d:74:c4:7a:68:51:d2:
28:44:3b:85:9e:79:cf:b6:ac:ff:c6:b6:71:78:c6:08:e4:47:
da:45:49:15:2e:f6:38:fe:05:e4:43:94:67:c8:ac:af:fe:36:
37:bb:fe:ba:91:c1:a4:53:02:63:a6:8a:86:b7:12:62:8f:6a:
f6:8d:8f:87:cf:79:df:05:c0:75:20:36:fe:21:4e:cd:fe:46:
f3:46:a3:d3:bf:30:79:eb:6c:a6:3c:74:37:d8:e8:5f:87:c1:
1b:75:39:9a:31:40:af:4d:03:c9:75:76:fa:15:9a:40:18:7b:
b3:69:e7:ed:d5:df:25:3d:be:f2:45:b2:76:54:d6:82:c7:dc:
92:34:82:2e:10:89:1b:a1:3f:1c:9e:b6:22:f6:ce:0e:c1:3c:
72:af:97:34:4e:9e:9f:c1:9d:a8:d3:ed:4b:89:69:7f:e5:ef:
23:71:91:cc:32:5d:d6:d1:22:e2:86:81:0c:44:1c:7c:15:2d:
de:63:0e:25:39:56:bb:20:7a:0e:f0:8e:ec:61:7f:6a:2d:d0:
fa:da:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:01 2026 by rpki-client