Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: uualhUMoaqJDpqUB/BsJdTnPz9dmtQHjkx3y0xlEseU=
Subject key identifier: DC:C3:E1:EB:06:F6:B0:D6:FC:8F:77:83:41:98:0A:89:7B:C2:2A:FE
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019D9B509E641A3A6F236597636DA060F9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 154F
Signing time: Fri 17 Apr 2026 12:00:44 +0000
Manifest this update: Fri 17 Apr 2026 12:00:44 +0000
Manifest next update: Sat 18 Apr 2026 12:00:44 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: K5IIzH+gvMTX4UomuD64/ANypVSVRDRZZNUCjo1WZo8=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:9e:64:1a:3a:6f:23:65:97:63:6d:a0:60:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Apr 17 12:00:44 2026 GMT
Not After : Apr 18 12:00:44 2026 GMT
Subject: CN=dcc3e1eb06f6b0d6fc8f778341980a897bc22afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:e9:49:70:54:93:d2:9b:61:e4:f5:05:38:
f2:2e:72:f2:97:ae:77:41:ea:ad:d4:13:a3:37:ca:
99:0d:e6:f6:6b:94:58:87:8d:6c:35:fe:d3:87:ea:
ac:05:3c:c5:af:13:30:bc:a1:d5:5d:8e:f1:a2:29:
43:82:2f:76:35:db:2a:ac:9c:b6:be:8a:b0:75:e1:
a4:1f:ad:e9:5b:42:63:4e:29:a2:dd:c4:c1:2a:dc:
cf:5e:8e:41:0f:92:31:65:80:30:00:29:ce:cb:ff:
f1:1c:61:22:a9:46:19:53:47:20:78:4c:a8:01:e7:
00:73:a3:4b:4c:3c:de:9f:6d:ed:ff:79:f5:f2:81:
fd:05:a9:30:2c:95:d9:a2:4c:7f:90:15:52:b8:1a:
b0:65:94:2a:61:bc:d1:24:07:1b:e6:0a:84:b9:dc:
f7:18:6b:c0:21:8c:d1:1a:b2:29:aa:7f:a3:82:27:
fb:17:06:f9:55:a5:e7:4a:a7:50:a6:e3:71:e2:04:
12:4f:ea:dd:87:65:6b:c5:00:13:1e:0c:25:15:7a:
45:85:8a:65:ca:8f:19:ea:5a:6c:ff:57:92:27:b5:
45:6a:c5:ed:03:ef:34:b1:28:6e:31:91:d4:a2:e5:
91:f1:73:96:72:49:db:27:0b:0a:fd:e9:11:24:97:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:E1:EB:06:F6:B0:D6:FC:8F:77:83:41:98:0A:89:7B:C2:2A:FE
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a4:df:96:e0:fe:98:b9:dd:f8:0f:fd:62:7b:49:25:9b:80:
ec:f2:bc:68:07:45:ed:a2:82:af:63:23:d0:56:98:d0:5b:04:
74:94:52:39:67:e8:82:cb:96:50:00:21:22:e3:29:0f:38:09:
6a:a6:47:0f:8e:ef:93:23:1c:d9:2f:50:e6:45:db:be:8f:a4:
a4:69:d3:3a:51:ea:2e:2c:e6:f4:b2:34:3e:e6:ad:cb:df:77:
eb:87:0f:52:22:1f:63:8c:4c:f5:1e:1d:1b:fa:cb:11:5e:fb:
cb:29:c8:03:12:65:49:86:07:1c:93:1e:9a:3c:bb:66:59:64:
c8:93:23:df:67:41:be:84:fd:88:bd:3b:45:eb:5b:11:98:94:
df:49:97:9c:69:90:9f:60:95:37:d7:6f:5b:a7:dd:45:d2:86:
62:1c:ac:9c:e7:fe:79:69:54:37:c6:1c:af:fe:eb:90:fd:4a:
93:1e:48:10:84:7d:e5:65:ab:db:95:22:61:90:68:48:21:5c:
c9:80:c5:a1:cf:21:fd:6b:f0:1c:e8:0c:34:25:b5:63:38:e4:
92:fa:5c:7d:7f:86:a7:28:10:51:7f:c6:22:22:42:e7:11:b8:
8d:d8:29:be:3f:96:19:64:9a:01:6d:a3:56:d6:be:e2:27:5c:
56:ec:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:51 2026 by rpki-client