Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: kGkP9glLtveQYfw311XbF3TCTwWlUbynWPSh4Wwz8V0=
Subject key identifier: 0B:AE:7F:9B:BF:BB:03:BC:09:DE:58:9B:04:CF:5F:E0:4F:5F:D3:24
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 019D390A7430EAD6852AA99D89252381E200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 1828
Signing time: Sun 29 Mar 2026 10:01:19 +0000
Manifest this update: Sun 29 Mar 2026 10:01:19 +0000
Manifest next update: Mon 30 Mar 2026 10:01:19 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: 6It3qgxd5CRZSObNer5nN9NsttpEVJpu2CYyL87YM9A=)
2: tlD44Wx1jNalDCHqe8b7_I-CeqY.roa (hash: CC0WAHVS98jNAUQJOBCkbiv7wZ63BOatDHNReSwvX5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:74:30:ea:d6:85:2a:a9:9d:89:25:23:81:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Mar 29 10:01:19 2026 GMT
Not After : Mar 30 10:01:19 2026 GMT
Subject: CN=0bae7f9bbfbb03bc09de589b04cf5fe04f5fd324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:b8:33:2e:49:95:87:cc:bc:3a:76:1a:66:
90:c6:5f:99:90:2b:25:f9:6c:95:73:be:cb:69:50:
03:53:b6:a9:a8:c2:0e:f0:4a:3e:a9:e2:17:e6:1c:
13:d8:e5:3f:4a:ce:e6:6c:c3:d1:87:c6:c8:37:63:
69:b4:e8:31:5f:58:bc:f8:32:41:24:a4:2a:1b:c9:
5a:e6:e6:95:04:d8:9d:24:8a:96:7f:f0:d4:89:1e:
34:a2:b6:27:a7:cb:98:c2:3c:5d:74:a8:ae:d1:42:
23:a8:3d:97:6b:d1:1f:8c:72:0d:8f:6d:b9:c8:90:
70:b4:91:01:32:be:7c:8a:25:d2:e6:2e:88:b3:98:
53:7a:c2:56:1c:00:89:28:9f:a3:b7:65:d3:22:1d:
e7:99:85:57:46:0c:0a:b7:d1:64:85:8f:a3:a3:f5:
06:4d:bc:e8:7d:2f:9a:a0:86:41:0a:a7:9c:75:6c:
b8:a2:02:8a:c1:eb:78:60:f1:f0:de:8c:0c:24:4e:
11:64:2d:1e:e2:4d:ce:ca:fb:38:7e:b3:ff:b9:bd:
86:62:b1:d5:7f:f7:e7:89:90:19:87:3c:5f:fb:fd:
ff:d2:43:32:78:87:77:1d:16:61:6e:a1:8a:70:c0:
d1:74:18:5e:70:d5:24:a7:b3:02:ea:59:d0:cc:54:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:7F:9B:BF:BB:03:BC:09:DE:58:9B:04:CF:5F:E0:4F:5F:D3:24
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:90:95:33:b5:a3:0f:90:3c:67:f6:b2:ef:0b:ce:52:b2:4f:
c3:4d:d1:a2:9d:4e:d1:31:0f:56:2e:d7:7f:73:8d:14:9e:22:
fe:5c:81:a7:db:32:ff:e2:8e:50:f6:83:7b:b7:26:21:fe:6d:
30:7d:47:89:bf:12:15:b9:42:2f:a3:29:ba:d7:1f:22:5c:45:
a6:bc:38:01:c8:33:ba:73:78:a0:42:ea:29:ee:7a:74:45:a5:
e8:51:2d:da:e2:a1:1b:0b:94:70:58:3d:77:70:b1:ff:84:fa:
3b:e1:8d:de:1f:e7:a9:98:3e:8f:3d:44:2b:9c:0e:cc:da:0e:
4c:f5:cd:89:5e:07:53:ce:2d:49:c6:00:c9:e9:a4:28:bd:a6:
42:80:fd:d6:0b:00:b4:f2:e5:51:01:f2:3a:7c:81:7b:33:b4:
1e:93:91:49:19:ec:ae:90:67:ef:03:2e:63:62:06:54:87:13:
bd:60:4d:b8:b5:b3:a9:df:8b:74:69:eb:9b:4f:5f:d8:a8:35:
bd:32:56:1c:9d:1e:97:94:53:67:6a:74:dc:51:f4:db:54:2d:
ed:43:ce:2a:4c:29:f8:af:00:2c:54:2b:c1:8a:48:56:89:58:
3c:48:73:22:19:8b:e8:21:d8:f9:66:f3:9f:72:96:f8:cd:d4:
ad:c2:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:13 2026 by rpki-client