
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: sviqYzhoC2m0SdJCUDx6TpKqbu3xO50XiWXzyIkcutc=
Subject key identifier: 7F:D4:62:D3:01:4B:20:48:C5:CB:12:85:D7:74:BD:9B:5C:88:22:6E
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 019D39AF5DF9788DF38449054EDB6B3DCB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:01:27 +0000
Manifest this update: Sun 29 Mar 2026 13:01:27 +0000
Manifest next update: Mon 30 Mar 2026 13:01:27 +0000
Files and hashes: 1: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: hiLm91IxI+t7RW5qCEViZO32B2/eC26+TpFSQq89kUQ=)
2: ywg7v4iBU0yIbUtglY4SRtwYiqQ.roa (hash: TUFNnELLTk5SmjwLZeWsU1OrlDE0M2b/yRf/bTeimQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:5d:f9:78:8d:f3:84:49:05:4e:db:6b:3d:cb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Mar 29 13:01:27 2026 GMT
Not After : Mar 30 13:01:27 2026 GMT
Subject: CN=7fd462d3014b2048c5cb1285d774bd9b5c88226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:56:30:fb:1d:d7:88:bc:0d:49:82:3c:5d:
6c:04:cb:ab:0d:32:43:d7:20:fc:47:41:b8:10:86:
52:0e:ae:14:6d:00:59:3c:91:7e:4c:c3:62:e4:46:
a7:2e:7f:de:f9:4d:c8:de:06:cb:70:59:24:ef:12:
60:66:94:be:56:32:74:e0:b5:2f:e1:a3:4a:3b:86:
00:e9:76:5d:52:ca:7b:31:5a:2f:1b:ef:4d:92:3a:
c0:f4:aa:cd:65:ba:25:e6:47:27:46:65:b4:95:bd:
20:c6:34:cf:7c:db:c4:d4:7b:34:80:83:e0:3a:73:
31:c0:3b:f1:97:86:0d:5c:12:0a:f9:75:63:0f:86:
c7:72:89:09:f7:8f:93:8a:b2:cd:07:c4:9b:f4:bc:
7b:a0:86:bf:60:a3:e2:b4:1b:44:76:28:b1:7a:de:
36:62:f7:0e:b1:34:23:26:90:96:bc:47:bf:30:0f:
6c:59:95:d9:1d:27:fc:a2:a8:e9:72:74:1a:59:68:
67:9b:07:b7:3b:a3:e5:95:fa:af:7a:72:96:aa:e7:
b3:13:38:13:7a:03:00:d5:40:fa:df:c8:66:60:01:
7d:49:72:d0:e2:a3:9e:c7:63:97:73:11:33:9b:ae:
6f:29:d4:83:ca:92:63:b2:fc:82:ea:78:50:f3:c3:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:62:D3:01:4B:20:48:C5:CB:12:85:D7:74:BD:9B:5C:88:22:6E
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c8:19:26:dc:de:ac:01:a2:5c:e1:a8:71:f0:af:fc:c8:31:
cf:3b:06:f9:03:18:5f:7d:5a:6c:df:cd:1a:67:55:62:44:3c:
46:37:59:1c:c4:be:25:3f:93:d2:9c:2f:96:6b:f0:b1:62:e2:
80:df:76:1d:31:97:15:f8:3e:9d:4a:30:10:c7:17:10:5f:f5:
8e:44:cd:d6:1b:da:3c:5c:2d:36:6a:57:cb:32:d2:fe:d6:3b:
f8:95:36:a4:6c:9f:5e:ed:e0:2a:88:d4:fc:b8:a1:e3:b9:73:
71:da:04:54:3f:65:11:16:39:fb:4e:05:f1:b2:13:01:6f:39:
c6:a1:4d:c3:56:4c:9a:23:c7:03:be:5e:96:e0:a6:e9:41:e2:
65:ff:99:39:46:88:e9:7e:05:36:38:e9:da:b8:85:d5:13:1a:
1b:0f:26:ff:28:20:26:84:ff:66:89:92:76:21:07:2b:c2:d5:
ed:96:b9:73:06:58:cc:38:d1:89:55:8d:f1:f1:38:05:71:e8:
6e:d1:6f:fc:9d:dd:d7:84:8a:40:5b:7c:6e:85:80:f4:ec:f9:
19:08:e4:3a:46:98:d3:5d:de:78:62:55:1e:a5:d3:26:d5:5e:
cc:b7:8a:47:48:81:58:c4:5e:bd:f0:7c:27:42:7f:37:2d:80:
bc:90:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:16 2026 by rpki-client