Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: auG3Hd6SG+pL6X3ZWgAebhi9K1gXRLYXjQMM0yt7vF0=
Subject key identifier: A7:73:83:79:3F:84:9C:CB:24:6B:A4:F2:01:B1:F3:7C:55:90:7C:33
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019D3865A65B0FB9419269F1C2C9AB6DC343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 0563
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: nTlx/dzI1aEaYyx1EPQSJEwIJGYL6ZnRtsdwPqT3zR0=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a6:5b:0f:b9:41:92:69:f1:c2:c9:ab:6d:c3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=a77383793f849ccb246ba4f201b1f37c55907c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:3a:a1:1e:77:2b:38:d2:0c:59:e4:0b:cd:
aa:8c:47:18:c5:45:e7:bc:40:73:87:3a:90:b9:3e:
bb:74:a5:9f:41:6d:b0:2b:24:8f:ff:47:7a:1c:a8:
e1:da:02:f7:22:b3:12:28:22:33:9b:be:57:e1:65:
60:9c:e3:08:bf:4d:3b:0f:ba:61:eb:49:17:c5:1a:
10:f6:cf:91:4a:73:2a:fb:58:a8:76:da:7e:01:73:
81:e3:8e:34:be:9b:64:27:2e:43:3a:25:4e:40:fd:
d3:11:ce:d2:5d:1c:e9:60:9c:e4:e1:f3:f3:03:f9:
85:ec:1c:f9:44:be:59:1b:d0:8d:6e:38:2d:98:38:
9c:d9:c3:36:ec:8b:a0:71:a9:e5:9c:06:fb:fc:75:
e2:ca:e2:70:2e:d8:f6:a3:65:78:73:a7:f0:e0:62:
ff:35:67:fe:92:83:a6:ee:cd:ac:65:39:a4:ad:cc:
96:55:82:e5:a8:0d:ad:90:13:60:18:fe:fc:56:0f:
11:bb:00:eb:30:df:33:1f:15:9b:4e:1a:77:9d:df:
93:d9:be:72:42:c4:f6:d4:cd:e4:44:9c:51:fa:7d:
43:48:e0:78:7d:7a:7f:b5:2f:c6:9d:61:78:42:c9:
34:2f:d8:cb:86:1b:cb:6e:41:bf:ce:5d:b3:6f:ac:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:83:79:3F:84:9C:CB:24:6B:A4:F2:01:B1:F3:7C:55:90:7C:33
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:52:98:30:67:71:15:de:f3:36:e8:1c:b6:de:e8:26:60:
f2:65:17:1f:27:be:55:ac:3a:21:49:02:5a:3a:64:75:51:08:
b7:db:80:44:fc:be:a1:b8:98:01:5c:2e:4c:b3:5e:a9:46:a5:
d5:58:d0:0c:13:a7:8b:14:fe:e4:0b:e6:8f:02:02:15:7f:cd:
5d:59:dc:ba:0f:b0:61:77:51:90:d1:a0:8c:e0:8b:c6:8a:4f:
ef:4e:69:54:3e:83:f9:71:a7:e9:c4:46:73:b3:df:ae:d8:8f:
00:01:a9:de:42:9a:bc:ea:c9:45:4b:8c:b4:97:c5:7e:58:6c:
96:1d:c8:48:97:61:ed:78:51:44:e4:4b:53:93:9d:c4:e7:da:
30:14:0b:82:a0:7d:4b:7f:9c:53:8c:1d:e6:f1:43:cb:d4:b6:
02:2a:e6:5c:e3:09:68:fd:a1:79:ae:52:85:0c:93:79:96:33:
5b:1b:c0:29:27:07:7a:91:27:b2:95:e9:f8:1a:7b:94:25:2c:
6d:40:78:d8:db:1f:a6:6e:db:cd:ae:4c:11:6a:e4:4e:be:19:
58:15:fe:25:9c:0f:78:17:ca:59:6a:44:eb:4d:a6:95:9c:64:
d4:bb:f0:d7:ca:c6:96:ef:c9:af:53:44:1a:75:90:1b:25:eb:
1a:cd:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:51 2026 by rpki-client