Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: VGPs8WDfrYcdRDoGkVnuFA1uGkYvreZlVEsNFOI2ZvM=
Subject key identifier: B0:FE:5B:71:04:1D:C1:9D:1B:DD:16:DF:88:C2:DF:84:EE:FD:AD:29
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 019D3752F170F25D0A6E6D0A8181ECDEB64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0C2E
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: 6y7FXEhZGkjThO3qHQbyWf09VOZA3KPufyBIscFlnM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f1:70:f2:5d:0a:6e:6d:0a:81:81:ec:de:b6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=b0fe5b71041dc19d1bdd16df88c2df84eefdad29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:2e:95:21:11:c2:24:be:4b:5b:5d:f4:b6:
82:41:c2:d4:dc:81:bc:f9:10:ad:0c:15:20:ac:3e:
a2:68:3a:f5:ff:b6:23:fd:ab:b1:9a:fb:12:1d:9a:
6c:4e:b8:36:cb:54:4c:05:61:91:76:1c:2c:3c:ef:
b4:61:0e:e2:ea:90:ff:f4:9f:6a:af:22:73:f4:5a:
42:66:b6:e2:83:93:bf:40:07:ec:8d:52:80:91:8c:
70:16:46:15:1e:1d:96:19:16:5a:3a:cd:32:bb:28:
26:37:bd:60:a5:27:ed:ec:23:60:db:61:88:72:d7:
23:05:d8:92:b2:74:dd:b9:3f:8e:d9:38:38:23:25:
8a:12:2f:2e:58:e6:ba:06:1f:c9:de:0a:7d:8d:b8:
dd:4d:4e:28:eb:48:1d:f0:4a:0d:78:3e:ab:1f:ac:
25:57:e6:5f:97:5d:35:0c:25:9e:84:b5:0f:06:9a:
ee:ee:e2:8e:28:4b:13:7d:74:d0:ab:bf:cf:8e:20:
8a:0e:28:2d:36:4b:7d:0b:36:44:3f:d2:04:5e:94:
db:7d:c4:8a:db:a4:65:9f:c2:51:18:d7:0d:50:33:
6e:66:47:53:5c:85:23:04:bc:5a:7d:20:90:27:d4:
39:5c:0b:1b:24:f4:2e:f9:16:a8:5c:d4:ac:d6:52:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:5B:71:04:1D:C1:9D:1B:DD:16:DF:88:C2:DF:84:EE:FD:AD:29
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ad:4c:51:29:98:78:77:ed:de:55:b8:a9:7b:b5:73:47:6a:
29:2f:1b:ad:9c:fa:69:cb:1b:2c:62:1b:3e:e3:60:4a:cb:63:
5f:05:5e:c7:49:24:22:f5:13:c5:1a:d8:90:66:2d:fe:be:bf:
8e:7b:ba:8e:c0:0f:56:df:c1:46:8f:df:1c:48:11:6b:18:e9:
7f:df:14:11:71:9a:c5:0d:62:14:ff:26:b0:d0:8b:4c:8b:ff:
04:d4:a7:c2:24:eb:65:f8:97:a5:75:16:b4:86:32:f8:5b:55:
99:e5:76:2d:e2:d2:3c:f0:d7:10:43:9a:44:c8:ff:bd:41:34:
d1:1e:b9:f7:80:e0:65:3c:7f:1d:66:db:37:0f:37:35:df:5f:
1e:69:d6:1f:ff:84:d8:7f:ff:3b:4f:4f:2b:ba:be:3a:93:02:
0b:bd:8c:07:19:13:c8:d1:97:c7:50:d9:c4:c5:4a:8d:04:88:
77:a4:e1:37:a2:59:24:a0:34:31:31:27:4a:72:3f:dc:a4:8c:
23:74:b4:5b:15:66:c3:fe:8a:93:d1:b1:eb:d0:37:75:24:39:
f6:b9:43:8c:96:58:c9:8a:f0:31:9e:0a:09:8d:e6:eb:18:72:
71:4a:31:77:e1:03:8e:88:4d:16:51:f6:f5:ed:8a:35:27:b4:
44:1f:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client