Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: Yl6hHFgJqk0gQcca9YxoKjLClgoUjrQW5xDxuVfcCgc=
Subject key identifier: 3F:CB:73:E2:BC:EE:65:36:08:3C:B2:51:A6:02:E9:02:61:36:10:54
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019D37C041DF0573D67E5E338F01747328EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:39 +0000
Manifest this update: Sun 29 Mar 2026 04:00:39 +0000
Manifest next update: Mon 30 Mar 2026 04:00:39 +0000
Files and hashes: 1: F2tzVDQBbkmIrf7Rzc0Z1mCkiic.roa (hash: 9oOlsoWuljVApYdk+dHkE0uI0xd3Y1H6oZJ44vPob6Y=)
2: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: JGAIsirj+PxKCnqQUfIAUqqNQIvaFMDZQ/TE4PYFQjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:41:df:05:73:d6:7e:5e:33:8f:01:74:73:28:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Mar 29 04:00:39 2026 GMT
Not After : Mar 30 04:00:39 2026 GMT
Subject: CN=3fcb73e2bcee6536083cb251a602e90261361054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:20:d2:b6:b1:e3:c5:a2:0f:87:db:1f:1c:
1c:90:e0:0a:4c:2c:f7:64:61:32:8d:27:10:75:49:
94:38:e0:1a:c5:dd:9b:8f:cf:ee:b6:13:71:b9:e7:
ba:5c:24:03:94:be:92:0a:ce:66:33:7e:36:7f:d2:
a0:8a:27:86:6b:59:b1:2f:05:03:d2:a8:b7:bf:44:
93:06:4b:be:09:3a:92:7b:90:e5:e7:bf:8a:c0:00:
51:85:d4:13:bf:86:e0:57:55:e6:d2:35:c1:85:c1:
45:3c:aa:bd:fb:0f:cc:67:26:51:0c:a0:aa:b6:14:
89:f1:34:a9:12:cb:b6:d6:94:81:a4:0d:3f:85:81:
41:2e:52:1a:32:2e:24:20:44:1c:1f:8b:c2:e2:10:
e5:d6:b4:a1:a2:eb:73:f4:f9:6a:d8:48:c2:9e:b6:
1a:dd:b3:b3:81:2a:28:de:c5:52:6e:73:3b:2b:ad:
b1:27:e1:52:23:6a:c8:bc:b0:88:05:6c:1c:2e:22:
d9:d2:24:40:d6:25:31:47:82:0d:88:5d:02:30:4c:
22:04:d3:9c:c4:29:90:b8:06:dd:8c:aa:98:df:b0:
4e:cf:24:cb:b8:d2:11:49:ed:c9:5e:af:0d:63:d5:
08:57:be:76:7d:e6:c5:87:77:f0:ac:c6:ad:c7:e2:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:73:E2:BC:EE:65:36:08:3C:B2:51:A6:02:E9:02:61:36:10:54
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:a1:a8:28:65:f8:b5:ae:a7:7e:69:c7:1c:52:c4:03:76:
09:74:c4:83:27:b8:4e:e6:93:1c:dd:af:44:a1:84:71:c6:37:
62:ac:af:8a:9d:a5:0f:d2:fa:64:83:2f:22:82:4f:dc:7f:f9:
ce:1d:c1:73:2f:0d:c0:91:ba:58:40:5d:d5:ad:ed:7f:ad:6f:
3d:6c:d7:44:b8:51:f7:a7:e2:23:e9:b3:88:bc:fd:94:5f:8c:
24:25:c2:88:fd:94:68:4f:bb:5a:64:ce:8e:6a:bc:85:5f:4f:
42:6c:72:48:36:32:26:4e:c4:14:cf:23:fe:a3:76:a5:91:7c:
c2:a8:e8:bc:6f:f1:4a:da:43:0d:0b:13:de:53:fd:8a:2c:d5:
e9:52:70:c8:31:be:ec:d1:d4:9f:ea:84:56:34:d3:2d:e6:0f:
5e:c3:f5:81:77:9b:84:23:64:4f:47:d8:d0:9d:66:65:4d:10:
c9:aa:a3:e9:55:84:f3:9b:97:de:4d:a1:8a:f1:07:a6:4b:1c:
05:70:35:86:60:9b:0d:53:de:85:06:f8:7c:5b:76:0e:d2:47:
67:e5:d3:ea:1a:66:b5:b6:ac:28:6f:2c:5a:db:33:5e:a2:08:
8f:a0:ea:fa:e8:68:9d:6f:93:20:c8:14:64:85:9a:70:0d:e0:
50:c9:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:41 2026 by rpki-client