Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: aTE36ZbrSTgCb+KjjARq4P3rzRy5nTt1TKcDUe6Ptco=
Subject key identifier: 3F:8D:6C:DC:93:30:F0:5E:D7:F9:4A:FE:C1:C5:7C:FC:EC:93:90:55
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019D37F758E967A6E98CE81CEBD0FC5BAFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 11FC
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: vpe4BmeNIAMPkTlRPQMjaU1a9ChlPGDdcq1Dri4owbM=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:58:e9:67:a6:e9:8c:e8:1c:eb:d0:fc:5b:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=3f8d6cdc9330f05ed7f94afec1c57cfcec939055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:88:8b:a8:86:62:26:e9:65:0e:21:39:d8:
10:1d:1d:d6:f9:22:f8:8c:18:05:8a:8d:b9:a3:a0:
a8:7a:b5:57:4e:fd:6c:86:eb:ff:71:47:55:bc:29:
1a:47:54:ce:16:3b:8d:23:b7:7f:cc:c9:5f:16:52:
68:f8:88:a0:36:c9:1c:47:64:7d:e5:29:d9:fd:86:
6f:90:c2:fe:b0:77:d5:4a:4c:2a:26:00:82:12:39:
d2:7e:50:bf:08:09:eb:ba:84:65:78:8a:4b:7c:30:
ed:b7:7a:40:66:24:c7:30:66:2e:75:09:d0:7c:60:
c2:23:0f:3f:bd:5e:1e:04:bd:29:88:bf:04:12:a2:
be:26:0f:24:ae:55:15:5c:77:4b:93:02:17:7d:67:
f1:04:f1:ac:bc:ba:09:3e:15:b2:a7:bc:e4:73:29:
7e:ef:2f:cc:1b:5d:86:c9:f3:fb:7b:d3:d5:a3:de:
60:93:ce:87:3e:2c:3f:4a:40:4b:12:26:fa:89:3b:
3e:79:91:e2:1c:57:fe:39:ba:2c:ae:0c:9b:78:f1:
7e:f9:6e:75:55:57:84:c2:5a:2d:7b:00:06:2a:4a:
d0:4f:2f:d4:20:12:56:82:85:03:52:b1:00:89:bd:
35:62:37:53:b1:22:e9:76:3e:37:f1:05:fe:39:73:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:6C:DC:93:30:F0:5E:D7:F9:4A:FE:C1:C5:7C:FC:EC:93:90:55
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c7:e2:f9:99:02:46:79:aa:c7:6c:75:6a:cf:9b:24:d7:e0:
88:f6:04:2e:a5:74:99:5d:01:70:6d:81:3d:4b:fd:8d:fa:9b:
0c:0b:e9:88:6f:03:18:20:73:22:8c:51:24:ce:a0:57:9d:54:
65:dc:6f:f3:35:bc:01:c9:4c:fa:6e:76:b3:61:b7:09:54:72:
3d:9a:3a:22:25:4b:3c:55:28:81:20:33:dc:c6:d0:e9:01:9e:
57:59:cf:90:e8:31:50:8e:d4:84:68:cd:6b:d9:34:c2:ca:db:
d6:73:12:76:63:0f:4b:de:92:06:9b:1d:df:95:a8:f8:e9:30:
51:18:9e:0b:e6:7b:72:cf:e3:f2:84:1a:0e:11:41:97:a9:8c:
88:a6:99:19:3d:60:6d:c0:4a:2b:0b:00:11:4c:f8:f0:96:f5:
47:dd:f8:44:f7:11:5d:37:c9:b8:03:a2:8d:79:d7:cc:3e:f8:
8c:b9:fb:7f:dc:22:03:08:65:f3:23:7c:8e:d5:d2:2c:89:3c:
af:cc:91:33:f6:12:7f:e5:bb:e4:96:a0:77:5a:c2:df:60:05:
c9:fc:99:79:13:2c:d4:e2:dd:fb:07:9f:93:b1:f9:ab:18:19:
1a:1b:02:0f:f3:39:d4:93:42:24:b6:fd:f0:c2:4f:a8:82:57:
f1:95:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:32 2026 by rpki-client