Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: /VSMnlzg39F+MfsuZKsgpgtDSrQFBRaGcG3sDTGRXuQ=
Subject key identifier: 88:AD:FB:33:62:9C:D7:03:32:A9:C2:B5:4C:34:55:97:A6:C0:AA:4D
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 019D999975271529A82E280746FCA625D0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 1635
Signing time: Fri 17 Apr 2026 04:01:04 +0000
Manifest this update: Fri 17 Apr 2026 04:01:04 +0000
Manifest next update: Sat 18 Apr 2026 04:01:04 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: 9vP3cOeI1aGYAiout0F9FI0yAPru87BZZ2MupAG8t/o=)
2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:75:27:15:29:a8:2e:28:07:46:fc:a6:25:d0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Apr 17 04:01:04 2026 GMT
Not After : Apr 18 04:01:04 2026 GMT
Subject: CN=88adfb33629cd70332a9c2b54c345597a6c0aa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:4d:8a:b8:53:9a:ca:73:db:14:b9:81:07:
66:d7:da:7f:1d:02:67:ed:a5:16:8e:93:46:32:24:
4a:03:51:d0:78:15:a8:33:48:ad:95:98:f7:ea:e3:
41:bb:17:59:8e:be:27:59:7f:ce:47:96:ae:e7:e5:
f1:d1:06:22:7b:cd:f3:df:aa:61:b5:30:54:37:60:
2a:38:91:12:e5:d4:ff:69:e3:dd:83:46:3f:b0:e7:
2a:23:1d:8d:68:d1:7f:65:b5:ad:2e:81:79:22:50:
d3:b2:c1:03:07:7d:2f:a7:35:a3:f1:ef:90:86:6a:
89:dc:30:b9:bf:63:d4:a0:29:1e:bb:19:85:c9:c9:
1a:88:b0:b1:bf:0e:60:11:27:f1:67:fb:31:bb:2f:
c6:97:59:cd:b4:b3:83:9f:de:e6:aa:43:fb:4e:82:
ec:60:c4:fe:8b:7a:23:ad:20:0c:d8:3e:03:e4:e7:
e1:67:1d:65:94:97:02:8b:8b:e9:f7:47:51:16:50:
91:57:7a:b3:11:40:6f:09:49:44:d9:40:45:8f:48:
da:c4:60:8e:e3:ca:f2:41:59:f0:10:88:d2:42:26:
27:66:00:65:03:71:8f:5f:bd:e4:37:0a:b2:21:61:
fa:2a:47:45:e0:3a:b6:93:84:13:e4:39:e7:02:c3:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AD:FB:33:62:9C:D7:03:32:A9:C2:B5:4C:34:55:97:A6:C0:AA:4D
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:27:fa:ed:5a:98:b4:56:26:e4:7a:ce:89:00:39:d2:ca:
9b:80:2d:5c:9c:a4:d7:92:84:1e:72:c4:c7:e1:6b:22:16:26:
14:5e:69:45:0d:52:22:3c:e7:a4:0b:20:03:3e:0d:9c:71:b6:
8a:98:dc:96:9a:3e:de:13:60:70:49:72:df:b2:8d:5d:00:b2:
bc:a7:dd:a0:56:7f:16:a8:e2:a7:72:56:98:69:eb:85:c0:f4:
bb:b2:8a:1f:27:0b:fd:21:f6:29:cc:c0:64:d3:51:23:91:1a:
48:91:c2:29:a3:65:25:54:89:a2:1a:de:0c:23:12:b2:5d:01:
ae:11:70:4e:3a:78:f4:83:f3:fc:31:56:1b:38:e3:41:99:0c:
19:a4:10:6c:cd:3c:45:f1:73:e1:64:77:2f:1b:ef:6d:82:f3:
95:13:e2:3c:96:04:1d:d4:aa:37:8e:1f:57:6b:7a:fb:df:34:
18:0f:8c:46:dc:7b:e0:86:1b:52:e7:61:0e:a1:64:c9:d9:68:
40:67:e7:9b:f7:41:99:20:f4:ec:8c:01:f6:43:e3:9d:c1:79:
c2:71:1e:11:10:34:42:95:32:d1:c1:ca:97:c2:a9:97:30:5d:
f1:42:2a:3b:f3:7b:c8:3d:56:33:55:e8:e6:35:4e:fe:26:ac:
85:d1:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:15 2026 by rpki-client