Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: bOIBIbttl2SYpPa5QP2XVhl01SiufMuR2IIqt38A5L8=
Subject key identifier: 10:AE:32:FC:A3:75:B4:90:42:41:D0:62:B5:E3:F1:CA:0E:C5:43:75
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 019D3865EC795A6F3D0D82360005BDE94022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: 0516
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: RurIpDKW9VN1DBSvZ/0OGAhQwln6URNGkaTmy5PvDIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ec:79:5a:6f:3d:0d:82:36:00:05:bd:e9:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=10ae32fca375b4904241d062b5e3f1ca0ec54375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:88:f9:64:ee:f9:68:3c:52:9d:7b:18:a8:
96:54:cf:78:1d:c6:6c:a3:b2:e1:af:c9:af:26:86:
80:a0:ab:7b:01:a7:10:3c:05:ab:d7:ae:57:f2:66:
2e:cb:b9:b2:1d:49:cd:65:ab:39:03:f5:b6:2a:83:
d5:0c:f8:fa:9a:23:9e:8a:8d:6e:9c:df:a6:3c:0f:
0c:a4:53:d7:48:70:e9:32:e1:5c:1d:c2:6f:8c:20:
c7:74:d7:71:77:95:59:fa:07:46:54:9a:90:0b:3f:
66:32:9c:5b:47:f7:89:04:1f:e6:6e:9d:3a:72:10:
03:e6:48:a8:51:c6:4e:f8:e3:7a:19:ba:78:b1:c7:
8d:b7:3e:49:0b:09:0a:a6:ee:71:a6:c5:4b:23:cc:
7d:c6:6c:af:f0:0e:ef:19:4c:bf:44:40:02:f8:7d:
78:5f:b3:a1:ea:52:d0:0e:2e:14:5f:0e:0f:24:25:
5d:6c:61:75:30:c7:6c:3e:49:99:4f:c3:de:eb:be:
21:83:3f:cd:84:12:22:f2:e0:f2:7f:21:06:15:8b:
6c:46:a3:df:08:14:39:2b:03:44:2e:20:18:21:d0:
a5:75:aa:de:6c:0f:1e:b5:43:96:84:d3:56:e9:1b:
10:23:b0:a0:94:df:f5:f1:68:10:a4:72:41:95:64:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:32:FC:A3:75:B4:90:42:41:D0:62:B5:E3:F1:CA:0E:C5:43:75
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:7e:27:20:c0:03:12:84:f0:6d:4d:45:0f:4c:1a:85:6e:
5d:70:6a:17:c6:6b:e0:59:d7:a9:11:81:ae:79:81:85:47:9a:
62:22:f0:bc:82:fd:c6:4f:06:18:6e:1f:50:f4:fc:e4:07:34:
b7:fc:38:27:0a:68:52:0c:9f:0d:42:f0:e0:0b:ff:81:84:02:
91:ba:5c:58:d3:48:49:b1:36:01:5e:ed:a0:94:f6:9c:ae:cf:
e2:0b:e0:9a:e9:04:b2:0b:f2:9d:2d:d8:60:9a:e9:a4:3b:03:
64:49:16:d4:c8:42:15:2a:bd:a6:59:ef:9a:4b:fb:d1:7e:6e:
8f:cc:4a:f1:72:12:ad:3e:f0:77:ec:97:83:ef:e5:d6:29:81:
ce:2e:00:1a:68:e9:87:52:b2:63:f0:26:b9:b6:4d:83:e1:91:
e0:3f:a3:9f:04:ea:bb:0f:cc:99:18:e9:4b:ef:f2:2e:43:8a:
b9:16:5d:0a:79:ab:94:c9:19:a9:5b:f6:66:98:a9:bb:39:63:
d5:ac:1e:94:47:f7:0f:49:3e:0d:6a:be:60:90:31:9a:fa:a2:
46:6c:3d:ab:ae:56:53:77:48:50:c3:21:d9:4b:8e:b7:d8:b5:
f0:8a:42:9f:36:2f:cb:4e:33:e1:58:49:1c:c1:dd:3f:77:f4:
8a:f4:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:39 2026 by rpki-client