Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: KbDFK7ADFvY9NWtdl+v+vqVThnmSVPsAH2Sa5EeI0Sw=
Subject key identifier: AC:26:5D:F8:0C:A7:73:16:58:EF:3C:4C:8D:F4:C2:45:96:78:A3:33
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019D390A35BEC90D7D8E3F5C454E664857CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: 0hxpuIK8Xk-q0BTmptbEA31tBQM.roa (hash: F/+sSqgxCKBUwr4EismpQjVJRCU5s8RFO6y5G1id7CM=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: CceJWmaWaJsdd/xH6WUn0Ju97J1GUmUnq6FS09DCwsE=)
3: mJI9sTFN4UGhJtiQDPusSm1Vr68.roa (hash: wLOIgdPRaxsc7dyazG8dcE1RzCgvcxysuqvRPBkd3XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:35:be:c9:0d:7d:8e:3f:5c:45:4e:66:48:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=ac265df80ca7731658ef3c4c8df4c2459678a333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:99:a7:61:0f:9d:ec:e0:aa:e1:18:87:8d:
9e:31:66:30:c6:e2:4b:32:de:9b:48:88:cb:89:46:
eb:f3:00:2d:58:e3:4e:28:b7:a6:17:5d:ef:cd:be:
f5:94:9b:47:af:f2:30:cb:e3:f3:4d:29:73:d4:53:
17:69:07:af:20:26:76:8b:e9:1a:34:38:95:87:be:
c7:1e:78:82:31:5b:c0:72:e8:34:e4:65:81:4d:f1:
13:24:17:13:d5:9b:3d:e5:f6:88:4f:49:6d:cf:94:
e1:0a:94:b8:f0:cd:ce:94:8c:c3:44:57:e3:c6:df:
3d:ea:f8:74:1e:fe:55:b6:fe:9c:4a:02:f5:e6:ee:
00:81:05:31:b5:96:f3:d9:56:59:06:5d:d5:40:af:
da:27:b7:6b:11:95:b4:8c:8e:58:f1:17:fd:68:84:
98:9c:5d:6d:ed:fb:9f:3c:ae:bf:a2:fa:47:5b:a3:
73:ad:09:0f:21:6d:d8:47:a9:8d:34:9e:e0:cb:67:
41:3c:dc:59:92:a9:23:2e:9e:bf:72:ef:bb:64:09:
b8:df:15:82:4e:77:2a:36:db:ab:03:5f:f8:eb:63:
e8:97:e9:76:03:81:0b:24:56:56:04:14:e1:75:e6:
09:87:23:71:4a:17:83:5d:60:49:1c:30:71:e1:82:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:5D:F8:0C:A7:73:16:58:EF:3C:4C:8D:F4:C2:45:96:78:A3:33
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:02:82:ce:9c:f3:49:0e:cf:be:88:6d:60:98:91:39:9f:
da:4a:07:91:e3:66:95:9b:81:3f:a7:4e:ce:c4:7b:ab:fc:1d:
2d:c7:7f:82:a0:9c:f0:2e:6a:c2:60:2a:d4:db:7c:30:54:09:
66:f7:30:9b:b9:c3:a9:c0:f0:d6:dd:f0:7f:a6:df:28:be:23:
a6:d7:e7:49:f5:6e:5f:7a:1f:03:0d:55:28:0c:f9:be:c3:69:
02:1e:cb:41:e2:24:8e:aa:14:49:28:88:05:42:09:61:18:26:
28:7a:8a:f7:08:d8:e7:3c:be:47:d4:5b:2e:48:01:67:3a:a7:
24:89:c0:34:64:21:76:4c:63:13:ca:b7:3c:68:b5:dd:dd:f6:
5d:c3:39:cd:70:54:6a:59:48:84:ec:5a:05:f9:71:9f:da:85:
db:2e:3b:83:e9:31:a3:26:50:db:23:58:3b:0d:87:1d:fa:aa:
0f:81:f9:0d:a7:01:d5:d4:18:16:42:65:95:9c:a4:9c:2b:a9:
37:8a:f3:bd:8c:b7:7a:19:76:93:d2:2c:4a:b5:8f:44:0e:db:
79:e4:7c:28:eb:66:c1:6f:d7:c6:46:35:fc:1c:8b:11:b9:9a:
21:23:0f:fe:dc:fe:30:16:bf:95:86:13:aa:9a:ae:8c:35:e1:
ab:73:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:57 2026 by rpki-client