Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: dekMF0UbOdE7kVj0o6pFKqgNOdAiS0kenEd6NcHPIKI=
Subject key identifier: 96:5F:93:67:47:7A:2C:ED:80:D4:0B:D6:7F:E2:A7:5C:C9:F4:D4:3D
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 019D37C09224E00D69BA914E2FE7AB06F777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: 03C0
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: iW5kA+Y7BuIwZneJHuoHKT9HvAFv0S2CW0th+s+t8DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:92:24:e0:0d:69:ba:91:4e:2f:e7:ab:06:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=965f9367477a2ced80d40bd67fe2a75cc9f4d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:a7:8a:b5:6f:a0:7c:f3:8d:3c:72:4d:07:
38:f2:dc:b3:8d:10:1d:d8:8b:28:8f:31:c5:1c:8f:
2f:97:ac:ea:11:ec:d5:e7:e7:9a:9a:8f:01:52:6a:
9f:72:08:9a:2d:3b:b7:ec:77:ec:7c:ad:ef:29:d8:
6f:97:9f:5e:d6:d8:9d:13:18:c5:c3:f4:7f:6d:52:
66:9c:02:a1:5a:e8:57:18:c7:52:b3:96:ff:79:9f:
0e:cc:ce:20:ac:5f:f2:40:4c:92:cc:a8:5f:77:c0:
45:03:86:86:b9:64:0c:63:05:55:7d:23:7c:1e:4a:
5f:5b:79:9a:fe:1b:54:be:b8:9f:4a:f5:07:2b:b8:
cf:19:6a:ac:38:81:ca:fe:43:40:52:a1:4a:23:80:
39:d4:3b:f7:a4:67:6f:0c:70:27:8a:ef:85:bc:3e:
58:b5:e2:d1:5e:17:bd:f5:b9:75:43:77:c2:a7:27:
85:52:5d:25:d6:0b:20:99:5a:e5:4c:cc:3d:6e:ea:
e7:0c:b6:6d:8f:f9:d3:f0:33:48:dd:82:3e:83:88:
a0:1f:2b:bd:71:d9:c2:84:7a:1b:7f:a5:86:a1:44:
ec:c4:66:cd:d6:b4:84:b6:7f:3a:da:94:69:7f:00:
ed:c3:12:4d:7c:45:80:eb:da:27:22:2f:05:45:af:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:93:67:47:7A:2C:ED:80:D4:0B:D6:7F:E2:A7:5C:C9:F4:D4:3D
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:f3:85:0e:9e:0a:d7:5e:3b:eb:0b:19:af:a3:2c:38:2a:
99:b1:e8:85:64:99:93:26:ec:52:70:5c:f2:f8:cf:ef:7d:eb:
93:85:22:df:d2:eb:04:23:c4:c3:98:a0:40:6f:12:2e:f0:50:
66:68:83:44:3c:b2:9c:94:8c:bf:c7:a4:1e:72:5a:7e:ea:32:
fd:cf:5f:fe:e8:fb:bc:85:a6:ae:3c:03:d9:32:26:35:d7:eb:
95:69:69:42:09:a2:84:a5:7f:5c:40:20:f3:40:bf:4c:86:71:
be:3e:76:81:ee:20:58:15:04:7d:80:f2:5c:85:54:b9:cb:15:
d8:d0:56:bb:d6:03:12:7c:08:c5:3d:4b:6d:24:44:ba:a5:c7:
d5:4a:ea:5f:f9:3e:79:d9:ec:29:5e:e0:db:c8:5b:c9:5e:85:
59:fe:e1:20:ca:8e:82:00:ba:45:0f:72:4c:0b:9e:c4:2b:01:
b0:5c:0e:d2:dd:3c:00:b1:22:34:97:a6:75:df:b9:4f:af:ce:
77:c2:4d:d2:9f:c3:63:9b:c7:b6:3e:b7:ee:c9:32:fd:5e:86:
64:40:e1:5d:f9:4e:85:3d:02:86:99:d3:13:5d:7e:1e:db:53:
68:ca:26:9a:9b:a5:97:c4:53:71:05:ee:0e:82:49:47:a5:27:
5e:b2:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:34 2026 by rpki-client