Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: u40GBg4rgWJr49Zbqnt/ObMF6rhlfEVbrad7kPB/yD4=
Subject key identifier: 50:A8:97:38:B2:36:C2:87:BB:A6:9E:27:B4:17:05:EA:3D:3F:CA:38
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019D38659CB6149CF96F816CDD14F09C43A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 115F
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: MPXpGEBgqk/8/XvMc8abXn0miO7Uggh5QVQPirB5qVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9c:b6:14:9c:f9:6f:81:6c:dd:14:f0:9c:43:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=50a89738b236c287bba69e27b41705ea3d3fca38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:b7:78:35:a6:53:2a:b3:3d:9d:8a:b1:e2:
cb:b6:f1:89:2d:e1:ae:b3:c5:d0:e6:b9:ee:80:20:
a5:f4:ed:92:1a:f6:76:c1:ac:fb:ca:33:41:09:b6:
bc:44:8c:d5:6c:b3:ab:cd:d1:5d:f9:26:65:f3:78:
7a:97:4d:5d:60:ed:fa:be:80:97:70:49:0b:40:b3:
af:27:fe:c5:92:e5:8b:76:cc:63:2f:3f:5b:07:8b:
30:10:4a:86:71:09:81:b8:c1:39:e6:34:bd:74:4c:
32:fd:e2:1f:d9:b3:7f:f2:40:09:36:01:7d:79:ca:
80:ce:af:c6:ca:95:ce:9a:18:e0:e4:dc:bf:56:be:
2f:65:32:59:c2:83:4e:17:c2:f4:06:48:61:d8:6d:
98:c2:74:9a:fd:34:d0:e1:36:a8:34:2b:fd:21:be:
8e:69:90:e3:79:8f:cc:32:42:79:ee:94:59:7e:d3:
ac:f6:e9:3d:a6:23:1d:72:96:b9:60:2d:cc:5c:7c:
7b:c6:fe:f1:b4:b7:f8:db:f5:b4:9b:f0:87:ad:78:
41:30:bf:fa:17:b9:82:bf:12:7e:07:ba:bd:66:86:
99:63:a9:8e:35:2e:fc:36:38:fc:24:4d:a1:4a:2b:
fa:08:bd:a8:57:89:45:03:10:b6:a7:13:6c:6b:14:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:97:38:B2:36:C2:87:BB:A6:9E:27:B4:17:05:EA:3D:3F:CA:38
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:65:2e:e7:f4:0e:66:14:d5:bd:89:ad:12:cb:fa:c4:7d:c1:
1f:1a:7b:e1:f8:71:92:ad:e9:de:78:de:5c:dc:d4:0c:46:f8:
9b:26:57:42:52:98:8a:36:e5:9d:6b:ea:67:82:81:12:04:81:
d2:2e:29:1f:fc:11:24:88:c8:38:b3:ce:dd:a8:36:e4:50:1f:
d4:17:3f:2a:cd:1d:06:bf:b8:fb:5e:f0:59:7c:de:69:0e:6a:
d5:56:e5:30:9e:d3:c0:15:81:8d:b4:0c:48:4f:3d:e1:26:5d:
2e:0f:06:77:7a:2b:dc:72:6d:fe:b5:c1:d1:d2:32:8b:cc:66:
f3:f1:6e:94:ea:8d:15:0c:ad:87:ea:52:2b:1b:dc:4b:3d:30:
f0:bc:26:bb:8b:07:12:9b:f2:9d:76:d6:73:7d:ee:02:da:50:
06:23:b9:32:60:ef:bc:1a:3a:29:1f:cc:2b:61:ca:18:31:23:
11:e2:a9:db:51:d8:9d:81:b8:97:56:78:94:c0:36:5b:be:cc:
2f:fe:43:72:8a:6f:ca:03:f1:0a:7b:f4:eb:c5:7c:ea:1a:6b:
dd:6d:42:78:85:e3:b2:bb:e1:89:f0:6e:2d:4a:00:a6:c4:51:
e7:dc:57:80:59:e6:74:93:57:69:ca:3d:6d:5b:4c:f0:c7:b3:
32:dc:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client