Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: cwdE4Gt/WJcgWXmdOwYx7XXGZv6dWdglTCVC9GtLuVE=
Subject key identifier: B9:62:52:43:FB:D1:77:BB:79:BC:B4:0F:13:DE:40:C6:6C:A0:9D:98
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 019D37F6F7C57908EA15A1D6E901F65B64EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 1475
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: ISpwDvRRloZ+wDHuNfuybiBlYeoi9RJieFvSEpCHY5o=)
2: kgXtGX7XX872ZBmOaDQBG_SxnRk.roa (hash: +MHedL/253Pk+HAeX+TuqGjfyagOjaX7b4uRsR/dtbs=)
3: l8bTPf1K3Wz0ZzSyAeVgoKWs9x4.roa (hash: ysJ6WNI/AvY+WY1s/27Bn0HCO1zRM3PLaycskEsYrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f7:c5:79:08:ea:15:a1:d6:e9:01:f6:5b:64:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=b9625243fbd177bb79bcb40f13de40c66ca09d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:e4:83:3b:e8:cd:e1:bd:8f:3b:3a:92:0c:
78:be:bd:d0:c4:35:5e:5c:73:43:99:9d:a1:71:85:
6c:aa:22:39:01:bc:04:9f:96:3a:5f:4d:1b:d1:cd:
be:d8:ee:e6:fe:86:d4:bb:db:f9:01:ee:90:06:61:
41:02:49:5b:6b:2e:07:d1:2d:79:0e:90:ed:8b:2a:
a8:34:b0:c4:31:56:bc:9c:c7:31:bc:51:bf:3d:43:
4c:f1:f3:c9:3a:35:71:a3:8a:98:69:bf:e3:0d:df:
5e:9d:37:8f:86:38:d7:93:c5:59:1d:32:ee:e9:40:
41:bb:35:1b:82:8b:5b:92:e7:7b:7e:92:82:57:eb:
e0:c3:7d:68:4e:d5:86:57:9b:f0:7d:ed:5a:d2:53:
e3:46:a7:a1:38:f9:be:c3:1b:8e:17:74:41:57:9e:
e4:d1:a0:e6:3b:bb:32:6b:94:11:44:78:25:71:5b:
6b:3a:6f:22:52:95:c8:e2:e5:56:94:9b:8a:81:02:
e0:ac:8e:cb:97:5f:02:ec:19:f1:80:75:12:f5:1b:
b8:d0:a7:a9:37:bb:96:9f:ae:2f:af:c1:c1:c7:67:
e3:e2:ef:ba:eb:70:90:f2:e0:ca:0c:db:b1:d5:a0:
63:34:1e:88:b3:0c:65:e0:7c:5c:47:bf:be:1f:45:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:52:43:FB:D1:77:BB:79:BC:B4:0F:13:DE:40:C6:6C:A0:9D:98
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5f:7d:69:4b:22:2b:ce:9c:f8:53:49:b6:e3:de:9e:28:66:
c0:9b:d4:ae:0f:8a:a4:58:de:1a:c4:e6:76:a4:0f:cf:bd:34:
0f:c1:a6:57:7e:08:04:37:91:43:fb:a4:ca:6e:45:1a:3a:6f:
53:5c:fb:cc:d7:a2:26:ab:a3:26:64:86:c7:3d:05:3d:be:6e:
3f:d8:91:bc:7e:85:3b:d6:ac:21:79:b9:d2:99:70:a0:c1:ac:
20:e3:9c:e9:bf:89:6a:9d:0f:b3:e4:29:6a:2e:56:a2:08:99:
91:5a:bf:ea:8d:62:68:ce:4d:09:d9:60:d2:f1:1e:7c:23:19:
92:65:4b:74:e1:9e:0c:90:a3:50:c3:c4:93:1e:a4:24:fc:71:
99:df:26:9a:ef:e2:5f:65:36:8d:d3:5b:60:7a:25:7d:51:9c:
2f:d9:9d:36:10:53:2a:8f:55:51:ce:da:f1:94:be:c8:e0:75:
3c:8e:ff:5f:cc:04:cf:bd:51:8e:dd:5e:86:c1:e8:4f:03:ee:
7f:a7:f6:24:c8:0f:9b:9b:ab:3a:76:68:39:63:9d:5f:3c:18:
16:86:61:da:ab:3f:96:9e:a7:74:95:d6:02:8e:6c:f9:50:24:
f1:75:12:05:ac:2d:c5:b3:07:70:55:c0:61:53:2d:62:92:3d:
c1:1b:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:36 2026 by rpki-client