Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: W0pt2Fxv0OAvDdyJ8bxL4KxVhO7exwb1rMeINoJah3o=
Subject key identifier: F4:65:0B:8F:52:67:48:D9:5D:47:DE:97:A4:8F:F4:2E:4B:CC:CC:65
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 019D36E52F473C186B1C42B87E3429A04A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 17F5
Signing time: Sun 29 Mar 2026 00:01:22 +0000
Manifest this update: Sun 29 Mar 2026 00:01:22 +0000
Manifest next update: Mon 30 Mar 2026 00:01:22 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: YwjPnjVg7/7eLKbXqgw33TcZIQmeOLb3bzA+RLyaB1Q=)
2: J-Al8qEAjQvOqUSJW7LJw04Fukc.roa (hash: nPb+yknouPfoljMRTiffVRamSXybT5BjPnR3oDRUAko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:2f:47:3c:18:6b:1c:42:b8:7e:34:29:a0:4a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Mar 29 00:01:22 2026 GMT
Not After : Mar 30 00:01:22 2026 GMT
Subject: CN=f4650b8f526748d95d47de97a48ff42e4bcccc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:3a:5a:cd:ad:1d:0f:1c:df:13:78:d3:0e:
f3:1b:9f:df:c2:16:9e:1c:56:f9:ab:f7:11:5f:e2:
f6:ed:28:d2:64:16:fc:de:ad:f0:04:96:24:97:78:
3f:d4:3d:0b:0c:8a:2c:db:be:65:4c:c3:13:22:94:
88:67:05:94:b7:04:fe:4a:a8:80:44:5b:ab:12:2c:
07:f9:81:2b:94:b6:44:c2:db:8f:a8:56:56:ba:d7:
15:d6:21:3f:aa:0d:18:8e:4b:21:6a:7d:7a:a1:15:
c9:6b:b3:5d:82:5f:0e:ea:ce:a2:b5:28:cd:9b:c8:
1c:cb:00:11:f0:3d:96:e1:1e:82:f1:8c:36:58:2c:
5a:eb:39:d6:f4:a5:ca:c5:19:99:45:69:06:68:94:
f0:0a:5e:0b:a9:78:7c:ae:4c:be:84:f2:b3:fc:e5:
e0:f4:23:30:dd:8c:a7:7a:41:e0:6a:4e:78:36:23:
c2:e2:d2:e3:98:7b:37:b8:be:29:56:64:16:a0:b5:
29:92:a3:0f:77:80:bb:bd:c4:16:ea:5c:78:03:d1:
19:34:92:66:a4:87:1d:17:e1:7d:8b:ae:91:ae:97:
b0:7d:e6:20:22:c1:0c:eb:8d:06:41:1e:c4:90:3b:
8f:c5:77:4f:4f:4d:1e:85:48:ce:b6:6f:26:5a:7e:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:0B:8F:52:67:48:D9:5D:47:DE:97:A4:8F:F4:2E:4B:CC:CC:65
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:37:e0:8f:66:1d:52:f8:3f:b6:1b:99:d7:2a:bc:06:db:5a:
69:86:02:a8:53:b6:d6:da:77:c9:a7:64:d3:e1:90:32:7e:45:
f6:08:ee:b0:08:51:57:83:5c:b0:d1:9f:3a:73:52:2c:b7:c9:
a3:03:7b:5d:ef:83:4f:18:f9:61:38:64:2f:2c:74:a5:13:10:
be:8d:ab:a9:26:af:14:a1:b6:b4:67:bf:c2:bc:4e:a7:1c:b1:
bc:de:cf:8d:7f:0d:1b:48:d6:bd:79:11:16:f4:7a:1f:f1:9f:
21:fc:0d:0a:68:e2:af:73:33:4e:c1:05:51:6b:13:c0:59:96:
48:92:dd:01:b5:40:d1:70:03:e7:b7:cf:3e:b0:07:12:4c:7a:
34:4a:26:01:1a:ae:b6:34:c7:28:98:b7:94:33:b7:5e:0e:ea:
28:38:e0:bc:01:ff:e2:f1:dc:3c:42:08:e8:2b:b9:b8:28:a7:
70:d0:b6:f1:78:3e:92:16:99:a0:8d:f8:a9:a0:33:4d:7a:06:
f6:e1:82:36:79:58:33:fc:45:ce:09:81:04:72:e9:63:18:70:
ae:7d:c0:e1:af:5a:42:02:13:fc:7a:3e:86:b8:8a:29:15:70:
e2:5a:9a:6b:96:12:e4:1f:4a:1c:ba:8b:86:a5:cc:d8:b9:3e:
1e:f2:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:43 2026 by rpki-client