Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: WeAFvy41Xjial8GZt/i/eCCezgGLljAmy3i5hPcVj+0=
Subject key identifier: 04:71:B2:20:CF:8B:D5:E4:13:25:AB:7D:AF:7C:D1:60:23:61:22:0F
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 019D371B247B3BFBB7D40931D404A012848A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: hEXKRW6C4ZkPkQdzb9TFHHkMHu2YYJYg6fgDcNVB2hQ=)
2: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:24:7b:3b:fb:b7:d4:09:31:d4:04:a0:12:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=0471b220cf8bd5e41325ab7daf7cd1602361220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:ef:c2:38:c5:27:0e:ae:4a:ec:3b:8c:07:
05:17:76:b8:c0:1e:7e:f3:2e:78:2e:0e:b0:f6:dd:
be:0e:56:2e:49:14:8d:ca:6b:66:d5:eb:e6:e4:73:
cf:dd:b7:e1:ab:7d:a3:49:6c:01:d0:e0:7f:ad:09:
10:fa:a8:65:1c:44:4c:05:b9:6e:72:2b:34:5b:43:
1a:3d:6a:dd:72:98:7c:c3:15:89:b6:de:c7:0c:fb:
b5:dd:d4:b0:c6:59:43:61:a2:a3:39:8d:1c:f2:d4:
21:94:3f:55:97:36:9d:f6:a3:ce:14:57:26:34:a8:
3f:b9:b7:bf:44:73:69:9b:25:d9:8c:74:a8:1c:50:
4a:9c:7a:8e:6f:c5:2f:16:1a:d1:b9:92:a7:b8:17:
23:02:0b:25:07:31:bd:0e:b5:2f:15:c8:db:31:83:
7f:2e:1f:44:a7:16:d0:9d:a3:22:d0:06:20:70:41:
34:8b:61:d0:e4:05:a2:a6:49:6a:71:c2:5b:11:50:
4b:60:61:55:8a:78:eb:40:57:84:b1:dd:ee:a1:ca:
b6:01:7b:eb:05:a7:fd:20:e1:61:f1:9c:5e:7f:4a:
0f:63:cb:bf:c3:2d:10:f0:b0:73:64:3e:9e:e9:ee:
90:7e:ac:fc:24:dc:05:cd:1c:44:c5:e9:77:45:5a:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:71:B2:20:CF:8B:D5:E4:13:25:AB:7D:AF:7C:D1:60:23:61:22:0F
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:fb:7e:60:5b:63:cf:d7:e2:11:ff:e9:30:63:8b:98:56:
10:ec:00:1d:e9:9c:92:0c:5c:74:d2:7e:1a:c7:5c:20:34:f7:
b1:6c:8a:5b:3d:33:1c:37:27:75:c4:c1:7e:06:ba:84:45:92:
5a:8b:64:16:a7:9d:d9:be:02:5d:50:ca:ae:89:0e:93:bf:cf:
80:e6:f3:b9:0f:f0:f3:a0:19:a6:93:96:dd:1b:a4:fc:7d:e0:
96:45:fd:2e:af:37:ea:84:74:7c:3e:35:03:d1:fd:f8:61:6f:
3a:f8:a2:0b:5f:40:78:64:34:b3:16:b9:df:00:ab:59:44:d7:
5b:9b:a5:20:4c:c5:6b:8b:34:83:8a:ea:fe:e4:97:d3:dc:4e:
88:b3:ba:bd:34:2b:28:86:52:0b:eb:e6:8a:0f:03:0e:c4:87:
65:97:eb:e0:a7:be:7e:7d:d3:b6:91:67:ab:1a:e4:75:2a:4e:
93:a2:0b:91:01:1a:bc:db:18:d4:ae:ce:40:2d:2e:2c:97:5d:
e0:68:8f:5c:68:d2:ee:ef:03:fd:2d:c2:61:b3:ac:56:38:28:
d6:6d:cb:7e:37:96:b0:84:0f:56:21:38:4f:2d:89:fa:c9:06:
1b:86:ee:91:4c:b6:bb:c1:b7:2b:b3:ff:04:e5:f6:98:5c:c2:
8e:2d:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:15 2026 by rpki-client