Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
File: HnUTyzn7z_6kHtLNaff0DoEaKo0.mft (raw, json)
Hash identifier: bn8DhOwAM/Ncwt9jLjCH7O5eRMLFlfsKY1a5v+UmYmc=
Subject key identifier: BF:82:A1:96:CD:09:F6:EB:69:9F:F2:CF:7C:49:65:32:5A:24:01:60
Authority key identifier: 1E:75:13:CB:39:FB:CF:FE:A4:1E:D2:CD:69:F7:F4:0E:81:1A:2A:8D
Certificate issuer: /CN=1e7513cb39fbcffea41ed2cd69f7f40e811a2a8d
Certificate serial: 019D38D31856E7E7E3D281B8818021C210CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
Manifest number: 4A
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: HnUTyzn7z_6kHtLNaff0DoEaKo0.crl (hash: Ilz+KM3pqmSzlHeHPl/88cF4O47L6s54ys1fT9Zl1Vk=)
2: RVnMU5m2oFIkKnMiJVgkrlYB4GU.roa (hash: es4ZKZpOuiFuvFze9C2AINJukfvzpjuf2MSdmtD/880=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:18:56:e7:e7:e3:d2:81:b8:81:80:21:c2:10:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7513cb39fbcffea41ed2cd69f7f40e811a2a8d
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=bf82a196cd09f6eb699ff2cf7c4965325a240160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:90:78:95:24:9d:fd:1a:7a:4c:86:1c:d5:
c1:c8:ac:98:4f:16:ec:cf:b2:87:4f:db:5a:b4:6b:
38:f3:b0:95:d0:b3:49:4f:48:ed:b2:4e:29:ff:22:
b8:7d:1a:98:90:5e:82:00:3d:d9:61:41:81:24:77:
af:65:9a:4d:58:f5:95:a7:f0:df:09:cf:43:16:2c:
13:16:cd:b6:f5:e3:8c:4c:d6:14:0a:13:4e:3c:94:
d2:56:cc:08:ed:a4:cc:d6:f1:3a:38:24:58:f0:9f:
ed:d0:f0:b0:63:fc:9d:eb:c8:af:df:54:58:14:e7:
b2:9f:95:57:2e:95:95:81:3f:2e:56:a9:fe:21:bf:
17:67:db:e7:c7:35:e8:93:ec:f1:d8:00:84:be:81:
c3:e8:e3:08:ab:fd:29:e7:44:d4:3a:62:64:03:78:
25:b3:88:3d:8e:f1:97:11:85:dc:e0:8f:6a:ff:61:
70:15:ed:5d:af:45:9c:ff:7c:0b:bf:46:c0:b9:a5:
68:08:c5:a7:c4:01:94:f1:37:5b:0d:ad:4d:f4:62:
31:84:0d:73:de:c9:a5:ee:80:89:1f:52:5e:bd:83:
89:8e:f8:c5:cb:ee:56:31:a5:84:36:ba:37:66:bb:
91:6a:a8:4e:1a:4d:6c:4b:ab:53:60:da:09:84:3f:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:A1:96:CD:09:F6:EB:69:9F:F2:CF:7C:49:65:32:5A:24:01:60
X509v3 Authority Key Identifier:
keyid:1E:75:13:CB:39:FB:CF:FE:A4:1E:D2:CD:69:F7:F4:0E:81:1A:2A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:89:61:96:a3:59:8c:63:b9:c2:7d:19:10:c0:4e:4a:eb:
1e:10:14:b0:d9:b9:ff:41:60:b0:cf:92:05:c5:7d:ba:31:07:
f8:e5:33:82:d5:10:47:ca:13:b9:60:e7:c6:a2:37:ce:15:94:
bf:9e:31:12:19:3f:ba:50:50:4d:41:68:95:cd:b3:3c:ff:14:
25:03:c0:18:6a:4d:3e:63:82:b0:e8:ce:45:65:e8:cb:dc:fb:
b8:15:85:5d:ab:a8:00:f6:42:cc:23:b5:60:10:4d:bf:ae:50:
8d:b5:8d:18:43:66:8a:33:33:17:28:a2:40:27:bd:72:ce:02:
51:c4:48:a9:c5:ed:74:64:9b:95:fd:aa:1f:bf:fe:55:a0:05:
f7:05:90:42:3b:47:57:0f:78:2d:c2:38:fd:be:49:3d:92:be:
7c:d5:75:a5:9f:08:00:36:30:e6:74:c9:cf:ef:95:81:31:ca:
01:be:c6:81:88:46:8f:df:42:74:07:4a:75:7e:74:56:88:e0:
0d:6f:e0:2e:9a:b5:bd:9b:68:7a:c0:c4:34:69:ca:e6:d3:7c:
42:65:00:02:32:16:46:d5:a8:80:b2:4b:08:c9:1a:5f:0d:58:
d1:26:4d:a4:2b:a3:60:65:d5:89:ce:65:1a:96:ac:3e:24:44:
69:bd:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:23 2026 by rpki-client