Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: lfRVQnam5AE5hJlvt2yQNGNg1Hl/Zg8E574bu2XwdMg=
Subject key identifier: AB:02:45:B9:F4:A5:A6:ED:4B:2D:F5:2B:66:1F:06:59:C7:42:72:33
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 019D3940FC1596D23ED58CCA8C9640BE559B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 10D9
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: +A0rm4PiA/FotxJ78omawF3I+C4gHjAp4gd6NIaYFJs=)
2: TIMsGWxsPv5h2_iID_QQlKqmZYM.roa (hash: OsADRBUZFn2mcORT2OqggIjDRoO4AdiVe59zJET+ub8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fc:15:96:d2:3e:d5:8c:ca:8c:96:40:be:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=ab0245b9f4a5a6ed4b2df52b661f0659c7427233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:5e:d9:e6:49:21:2d:26:e6:26:d9:1f:32:
50:a2:c6:4b:85:54:08:41:6c:04:35:54:a3:9f:51:
35:73:02:d5:7f:2e:0f:c6:fb:0c:09:ad:fb:f9:d0:
06:ab:b3:66:08:0f:ee:23:c9:21:78:d7:9e:ab:a1:
c5:b7:99:99:5a:99:35:d9:3f:bf:c3:a9:e8:6b:eb:
74:de:0b:09:41:49:21:65:13:fc:04:5a:92:c1:3c:
66:0e:38:5b:9d:a5:a6:03:9d:b8:10:b6:76:8d:53:
77:07:a4:82:c3:66:4e:02:ee:ff:1f:11:96:c6:ec:
e7:3e:fd:9e:be:51:76:af:32:e1:4e:f7:7d:5f:4b:
78:ec:6b:d7:e2:22:ec:31:ac:82:b8:8c:14:84:60:
50:3b:4f:e4:a3:9e:84:db:c6:08:27:45:48:c6:cd:
f7:18:d6:58:4b:ab:c2:fd:15:2d:b4:fc:b7:90:f9:
34:48:da:fa:3d:d9:9b:d1:8d:97:a5:38:c8:f6:fb:
86:2b:37:5e:ec:18:1b:32:e3:0c:e3:25:92:84:79:
9e:2e:a1:95:94:2c:c5:ff:b9:2e:fe:9b:01:fa:d0:
3d:46:1f:74:43:11:9b:1f:77:a7:43:bf:20:5a:f2:
d6:d3:aa:d1:c7:6d:c9:19:65:5a:e8:0e:7e:3e:91:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:45:B9:F4:A5:A6:ED:4B:2D:F5:2B:66:1F:06:59:C7:42:72:33
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:5d:6e:e6:9e:f7:93:aa:06:86:47:00:c7:4d:a1:d2:93:
7e:2a:c8:01:87:44:c5:ec:fb:e5:d3:c9:af:cc:90:9c:c4:c2:
2f:ea:9c:7a:18:40:32:bb:2b:ee:df:8b:9f:b9:cb:c6:d7:a8:
c6:5d:de:9a:e4:46:6b:3f:9c:d0:f9:e0:cb:c4:1d:66:f8:a5:
7f:6f:b3:c0:96:f7:9c:c5:53:dc:ff:33:dc:64:b8:29:26:f5:
f8:f7:fd:f5:d6:76:24:80:82:ff:45:5c:6f:e1:00:43:7c:9d:
49:af:b6:bb:f9:63:71:bd:81:a1:12:be:e1:8b:83:b1:ad:19:
1d:3d:da:a3:44:5e:a7:65:09:b3:ef:cd:7b:0b:a7:0c:fe:c1:
3d:13:74:d2:8c:74:8a:2b:1c:61:a4:15:79:09:ea:70:d4:b6:
b1:ec:a7:e2:33:18:c2:f8:0b:17:41:87:fb:40:f3:8c:45:c1:
7b:c8:1e:9a:37:f8:de:5e:0e:31:23:6c:da:ea:f2:84:cf:de:
07:3d:d9:18:43:e6:02:4d:17:d4:96:64:81:99:bc:fb:95:e3:
5a:5a:42:10:c5:45:05:c4:31:86:a8:e5:70:ac:1a:0a:04:79:
10:25:25:0d:c5:3a:81:62:3a:ec:65:94:ec:7c:24:45:ee:8f:
08:c5:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:30 2026 by rpki-client