Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: Tm8s/KpTmfxxJVQyrFgctkbY12ux5GVveLEKBOjEdwE=
Subject key identifier: 29:03:F0:3C:6B:D6:1C:E0:5B:D9:D0:BB:8B:B9:F0:C4:55:1A:37:3F
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 019D390A3877164E9A5C7306E0DE9D288B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 17F5
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: EoqHHndWscrrE3zlAICWZZVdTk918JU4JvOGB4heH7E=)
2: MaG66KPENn9bx0eAYChp8R8dAs4.roa (hash: 593eGOu2FOVFWhkjJjWzF/kjBgyQkqsd6b/vqPJ4bN4=)
3: st6PpxNzc658VtFlT-Zn2lQC-m4.roa (hash: W95r/R+SgURS888l3lfH6YKShbzwq5+KfmT/KdREE+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:38:77:16:4e:9a:5c:73:06:e0:de:9d:28:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=2903f03c6bd61ce05bd9d0bb8bb9f0c4551a373f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:75:b0:20:19:87:bb:16:d5:81:f7:de:1a:
18:8c:d3:ff:9a:ff:3f:61:aa:4a:fc:ed:16:1e:1a:
d8:d8:34:7d:77:62:e0:f7:72:7a:37:af:b3:d1:77:
6b:f5:2f:bf:41:22:df:38:79:6b:63:cf:5a:01:aa:
ec:99:9a:d9:3a:92:0d:d4:ce:8b:7a:7b:71:40:6e:
2b:67:15:cb:2e:cc:16:d9:cc:8f:38:99:89:36:1c:
6d:8b:dd:5f:fd:cc:a3:6d:c9:f4:a8:e0:63:ed:39:
d7:1b:48:1b:ee:5f:63:94:87:1a:80:81:81:fc:1d:
cf:0e:a4:3c:13:90:33:3b:64:87:f8:b4:b6:02:88:
79:33:d1:0d:09:17:47:d1:29:d0:68:3b:8a:69:ef:
e3:82:6d:f5:ac:a5:c9:75:46:ec:18:e0:eb:dd:7a:
74:29:e0:e1:7a:0d:fa:e9:53:f5:ea:0d:4f:75:a0:
89:cd:db:ff:53:8a:ff:89:0b:29:09:92:d6:34:c8:
6a:f7:d2:ea:7b:d9:ea:25:84:68:10:e6:c7:de:f4:
ed:53:e4:f9:a7:8b:04:18:f8:95:27:12:7c:db:54:
8e:a9:a1:f3:a7:d6:0c:a7:de:64:22:05:63:17:67:
52:b9:fb:3d:14:bd:48:c4:3b:ca:17:2d:96:f1:91:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:03:F0:3C:6B:D6:1C:E0:5B:D9:D0:BB:8B:B9:F0:C4:55:1A:37:3F
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:2e:a6:b8:38:6e:60:b3:bf:8a:d5:0e:07:e2:de:50:32:
33:36:b4:16:4b:17:d4:d0:7e:d6:2b:f4:a9:7e:b3:0b:16:c0:
67:26:16:ab:8b:d9:c9:4d:9f:59:66:03:7c:de:67:65:10:d1:
e6:6c:16:8f:86:db:4c:43:63:3c:d1:67:9a:67:58:2f:b3:89:
00:db:40:8d:18:26:ab:7c:f6:e9:e2:8b:c4:45:c8:6d:aa:a5:
72:27:05:4b:14:ff:c2:a7:e7:db:fa:4d:09:94:51:fa:54:13:
6a:3b:e9:e1:36:4e:f6:5e:0c:83:45:f9:ad:70:8a:f7:4b:57:
cb:8f:62:e8:b6:21:ac:11:86:fd:fc:03:94:d9:9b:bc:64:de:
3c:ec:5f:7b:79:6b:1a:e5:90:bc:1e:41:db:25:86:ac:ed:14:
2c:58:a4:62:6a:f2:51:53:c7:0c:a5:4a:0e:ca:4c:f4:4a:c7:
92:4e:02:74:f8:f7:e5:80:ef:9f:4a:37:f7:e7:21:7c:d2:1b:
95:c7:55:7e:9b:3b:78:bd:d4:d8:e5:ef:0a:8e:c1:fb:80:11:
ca:9e:3f:d6:2c:64:47:b9:9b:ae:e3:fb:e4:17:f0:96:6f:59:
55:b2:66:f5:64:a5:12:bb:d5:f0:1a:c6:fa:28:cf:27:07:70:
63:0d:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:24 2026 by rpki-client