Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: FKJuCzSRa12+mHRCAur1XFWVLYdUlbAZX7UAN5CojvQ=
Subject key identifier: DA:70:AA:83:A8:A6:7C:DB:D7:5E:02:A3:C6:A6:CB:B3:8F:B2:F1:5F
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019D3909FBFC2F579E6C9C2CA93BFD24B49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 16C6
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: NgLp7kUE711dtkXC9svpfhWCS9f8K0NhPvRVhp+vO7U=)
2: InHyWEjEiyh7nEE2TIiuq0-_-Cc.roa (hash: X+4z9Y0iJ1TRnqAnnq28KCv6J+YQ5AkdpPJ2iZvV3CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fb:fc:2f:57:9e:6c:9c:2c:a9:3b:fd:24:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=da70aa83a8a67cdbd75e02a3c6a6cbb38fb2f15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:10:22:ff:ee:2d:d0:d0:49:e0:70:e3:04:
18:61:de:aa:6e:2a:89:70:2d:24:fb:68:78:19:24:
6a:d5:46:ba:a0:58:39:a0:d4:38:93:11:bd:94:84:
04:09:72:95:9e:61:e9:11:44:1f:6d:fb:56:ee:7a:
e3:ae:47:28:4b:ce:b5:00:1a:38:7d:54:a4:3c:1e:
c7:d4:de:59:bb:41:ab:1a:52:38:fb:e0:9c:80:ff:
49:2a:fa:1a:34:a3:ff:a5:2c:53:36:9c:65:cc:88:
7d:7b:23:c7:19:f2:a7:3b:fc:02:7c:9c:4e:9c:db:
6c:98:20:9f:71:00:ce:a0:fc:35:92:1f:32:26:cd:
c5:6d:97:e8:97:84:dc:71:e2:d1:c5:12:6b:06:f2:
b3:d8:f1:05:7e:6f:4c:39:ca:b4:ae:16:9c:6c:45:
98:af:78:7a:db:cf:e0:4a:94:17:bf:c1:26:4d:d9:
bf:ca:fa:af:f1:ab:25:35:f5:c0:79:56:fe:ac:4a:
4b:ac:7e:eb:b4:5c:1c:4c:ff:b1:2d:f0:08:28:75:
95:9d:c2:79:22:67:a8:65:6b:ba:dc:15:63:ed:25:
7b:a8:c7:93:77:dd:62:e4:79:73:d3:dd:2e:9f:a1:
39:e8:07:81:85:a2:bd:fa:eb:cd:6b:67:dd:d2:8e:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:AA:83:A8:A6:7C:DB:D7:5E:02:A3:C6:A6:CB:B3:8F:B2:F1:5F
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:e0:67:2c:b2:01:7d:83:69:74:c2:11:d8:04:b9:7f:74:
5d:76:91:76:d0:8d:73:71:31:b1:c0:3a:f7:1b:c1:82:c1:b3:
1e:47:d6:a3:9f:10:02:62:d6:59:53:a0:32:3c:25:c2:31:3e:
f8:4f:b5:ad:1f:6f:5f:be:94:9e:de:75:6a:3d:c9:c4:1f:12:
d0:c1:33:0d:12:d7:a4:f2:43:6d:b7:6b:e0:18:c2:3d:bd:33:
5c:ee:f6:2c:cb:b3:72:de:2c:3e:f8:ea:bf:eb:fd:10:48:3e:
be:56:50:43:b2:60:3f:e0:77:e8:79:9c:29:b4:c6:54:6b:9e:
d2:ef:cb:79:a5:b9:36:a4:1c:ff:46:e8:24:f5:52:cb:96:91:
f8:fd:56:f4:4a:73:e8:e5:93:d2:11:93:4b:89:f9:ef:c6:eb:
03:d2:b2:23:52:91:e0:73:0d:1d:f2:1b:49:21:09:f6:09:bc:
17:64:f5:70:f4:32:22:bb:9c:4a:c3:e8:f4:fe:f0:11:8b:44:
09:2c:e9:bb:6e:e1:70:e7:a2:25:24:d9:fd:50:4a:42:cf:69:
c9:dc:31:3e:ea:63:f3:44:33:4d:e9:ff:b1:61:b7:6a:e9:81:
86:bb:e5:9d:e9:4f:90:ce:41:31:f3:6a:2c:2e:64:a0:e7:af:
91:8b:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:42 2026 by rpki-client