Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: +E21Yv3W+QKsDn9xbCWhEd0W8KDQRHSyb7Ef3dmrjWs=
Subject key identifier: 33:63:55:FC:94:09:A0:A0:FE:78:41:EC:B6:9B:FB:CC:E6:7C:81:C5
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019D37C01265804E694BEE1F43F83ABD17A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 119C
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: 39EuenJu3kWrnDwjwNW2FkO26PbgxYoWvDD+tmlNBxo=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:12:65:80:4e:69:4b:ee:1f:43:f8:3a:bd:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=336355fc9409a0a0fe7841ecb69bfbcce67c81c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:03:57:32:64:39:04:3b:b7:26:ac:2c:32:
17:b3:17:00:6d:00:ee:e8:33:e9:93:90:7b:1f:29:
a2:44:4b:01:a7:b9:d0:aa:c8:b6:68:12:3e:79:76:
4f:90:f6:58:75:28:9a:8e:b0:f0:02:4a:bf:aa:1a:
ca:cf:75:f6:88:2b:69:d6:3b:25:15:1d:36:32:d7:
e1:a2:cb:d4:b3:76:e3:94:f3:0c:48:dd:00:d5:1e:
12:fe:a5:48:07:09:34:29:a6:f2:9a:3b:37:39:50:
92:84:61:02:77:17:75:cd:94:b4:4e:85:57:76:4c:
33:48:30:61:ff:e9:d3:ed:8a:53:58:7d:4e:85:3f:
34:cf:7f:42:2d:bc:eb:24:9d:cd:c9:89:e9:75:95:
b6:a4:03:c6:54:c2:91:f0:7a:86:4f:f9:43:a9:af:
a5:8d:7f:c5:88:40:81:c6:62:a7:36:b9:f5:64:c3:
09:46:95:e3:c7:0b:d7:01:df:24:6d:89:03:24:c4:
e4:5d:07:8e:d1:fd:44:f2:8e:88:35:1b:aa:6a:d3:
7e:7b:fe:93:97:5f:01:04:4a:bd:b3:30:c5:27:d1:
7f:0d:a3:40:11:20:7d:69:33:5e:d5:1b:26:22:0b:
d4:25:91:8f:8c:12:e5:5c:d9:e6:c3:1b:2f:ad:bd:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:55:FC:94:09:A0:A0:FE:78:41:EC:B6:9B:FB:CC:E6:7C:81:C5
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:26:41:1d:33:54:2d:6c:4d:fa:5f:36:9c:9a:36:dc:ac:
e6:eb:0e:86:c9:22:2e:22:25:e6:db:21:2a:e3:9a:9f:a2:70:
cd:ae:ca:7c:24:0a:85:6c:ca:b6:bb:30:6b:e0:aa:b9:7d:e1:
c4:3e:ea:e2:06:6c:f7:26:0f:b5:18:4f:42:4e:41:15:94:1a:
13:dc:3d:ac:3a:31:9e:5b:9b:39:28:ad:e4:90:e6:11:74:6f:
8b:0a:9e:e6:71:13:2e:78:95:d2:1e:2b:af:eb:3e:41:0f:77:
f2:bd:fd:ab:fa:41:0f:e4:97:eb:a5:fd:06:fd:eb:b5:7d:7d:
9a:7b:46:e9:57:28:69:ea:2c:f6:62:b8:2a:cc:84:2d:26:cb:
ee:f3:ba:81:57:97:12:1a:25:d8:af:61:85:20:aa:25:51:c3:
44:e6:70:ad:2a:9e:b2:a1:99:02:e4:44:f8:30:8b:ad:e2:03:
ec:95:46:d3:72:e8:f3:3a:e8:44:0a:54:f5:05:95:65:c1:de:
45:c1:1a:e0:57:31:53:a9:b4:3a:02:0b:21:56:fc:ea:d3:ae:
89:61:9e:8c:ad:7d:56:62:e8:86:ab:e0:2a:f8:80:bb:a4:25:
d9:3e:f5:67:ed:83:47:d7:4c:7e:3b:72:3d:b3:6d:dd:78:34:
b2:93:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client