Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: yfm0tWtinPIQV8IbDoPuZ5XjWNXWqBfYi16DR3KdhNg=
Subject key identifier: 4A:D8:86:65:54:01:35:0D:11:A9:16:71:A4:E5:DA:84:4F:9E:4D:BA
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019D37C06AF2B6BFC8DD687EC71FEDFC4DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 0147
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: w7s4CU7wx044zBTDm1irAqSpJ77pLzUh+KAYXxgN0hE=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6a:f2:b6:bf:c8:dd:68:7e:c7:1f:ed:fc:4d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=4ad886655401350d11a91671a4e5da844f9e4dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:c4:02:af:0c:24:8a:00:83:13:77:91:6c:
99:62:c7:df:e0:7d:21:29:ef:25:97:2e:28:4c:c0:
08:27:2b:53:c5:02:be:fb:de:2c:7d:59:b6:43:be:
c2:88:82:a0:4f:b9:91:c7:c5:34:02:1f:fd:e2:3f:
13:f2:94:16:a2:87:93:69:a2:b0:12:b6:40:b8:0b:
32:77:3c:17:a7:3f:7b:a8:5c:f3:24:d9:90:99:d7:
06:d0:a6:52:bb:b7:22:66:05:2b:d5:5a:72:50:ef:
56:9f:fb:66:43:55:c2:e2:2c:1a:93:7b:4f:ad:9a:
f1:24:f6:6c:5d:d9:0f:36:f4:88:d0:b2:cb:66:f6:
e1:1d:52:c0:d7:60:14:f6:a2:66:ae:a8:11:95:4d:
45:ea:9c:5f:a9:43:76:77:74:c9:0f:1b:10:65:2b:
36:d3:0e:f1:a8:4e:84:7f:a8:79:c8:be:aa:7c:62:
96:dd:78:c3:59:e7:49:7d:d5:a2:9d:95:c9:d0:01:
43:bd:bb:68:df:db:ad:ae:1b:0b:d7:58:ff:2c:68:
ef:21:c7:ec:cf:77:f6:34:2c:28:c1:e9:40:13:ec:
0c:e8:ca:68:14:e8:7e:68:c3:3e:46:e0:4c:c1:19:
59:7a:01:7f:19:15:c3:31:d8:41:01:c2:5e:81:07:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:86:65:54:01:35:0D:11:A9:16:71:A4:E5:DA:84:4F:9E:4D:BA
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cb:b4:24:e5:58:69:c6:bc:6c:93:73:82:43:69:81:83:7d:
01:40:86:af:3e:96:1f:b4:0d:a8:69:a4:85:db:c4:69:42:7d:
1a:2f:79:95:1b:09:99:a4:e3:47:04:25:8a:68:de:53:c6:14:
eb:a1:60:3c:1d:d5:72:5f:88:43:4b:e5:e3:4a:32:7e:80:e3:
2e:fa:27:eb:8b:75:fd:28:9f:44:8e:ae:10:ae:95:6a:7b:fe:
4c:6e:8b:5d:d9:f6:6e:c8:96:92:48:0c:df:22:81:9d:c4:bc:
42:90:31:ba:b7:e8:ef:3d:d7:c2:df:f1:81:d7:99:a3:be:57:
4c:bc:26:e0:d6:cf:2b:77:bb:d8:47:10:95:58:a2:1f:29:72:
d5:11:df:85:c5:c8:02:c0:60:d6:2f:f4:c6:78:0f:30:e2:40:
1d:8f:25:42:8c:00:84:4b:e7:04:fe:73:89:f5:fe:45:5e:77:
25:99:cb:dc:8a:fd:93:bb:59:bb:68:34:ad:89:de:36:c7:db:
3b:a2:b6:71:a8:12:b4:8d:93:d5:2f:b5:b4:55:28:67:3e:16:
4a:72:5c:05:b8:e0:7a:55:84:33:ab:3b:6d:5d:47:a5:25:2b:
e9:b4:d5:a9:f4:61:88:9b:aa:53:22:39:42:ff:e0:6e:b1:9b:
10:c6:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:19 2026 by rpki-client