Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: iQfC5iAxJh5kJucQgNIJt1NVdI7i4CflUuk8PRtxnqs=
Subject key identifier: 21:FA:1C:B3:6A:EC:56:10:03:6A:05:3F:A4:AE:88:0C:C0:35:6E:F0
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 019CAC7E04BE75FD6214E906A76695E19385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0BA5
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: nq9VSNaF16N3zFTE0TUa8VGDz6S0+chS0NnGRTqgMiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:04:be:75:fd:62:14:e9:06:a7:66:95:e1:93:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=21fa1cb36aec5610036a053fa4ae880cc0356ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:22:04:8e:2f:c0:db:dc:10:3d:44:ed:54:
de:8f:8c:1c:83:0b:4b:f7:5f:62:27:93:20:11:70:
09:1d:77:7e:96:2c:8f:c2:5c:31:52:98:8c:b7:90:
59:2a:d7:ad:bc:a3:6e:c0:d4:f3:32:9e:c9:92:2f:
9b:16:a3:b1:5b:73:bd:08:a9:6c:c0:0a:4f:92:c8:
4e:e5:aa:dc:c4:88:cb:93:c1:5a:da:77:de:7a:59:
95:c0:54:c8:19:c6:c6:f0:2c:c8:4a:0f:c7:8f:71:
36:1c:6c:bd:b5:76:41:df:59:f8:27:b3:17:6b:da:
59:33:4e:27:d7:4f:6f:1f:39:c7:f3:19:48:0b:05:
9e:c5:de:b9:c7:01:37:40:47:93:b8:98:3f:d2:6b:
ac:0a:57:88:4e:75:e7:02:d9:da:d9:ac:98:14:eb:
62:22:c6:52:d6:4b:d6:6d:0a:ef:ca:85:dd:1c:77:
0e:ed:ff:9f:99:75:82:03:dd:18:4b:ab:8e:e6:e6:
f2:e8:4f:ee:5e:c7:bd:7c:b0:26:dc:ac:48:a4:ec:
7d:81:cf:20:38:b5:5c:2d:24:9a:48:f9:d9:2a:74:
8d:8d:76:5d:ba:4b:5d:10:67:74:d6:96:37:8f:23:
c0:6b:fe:4e:d9:05:89:d7:54:ac:23:c4:95:1c:09:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FA:1C:B3:6A:EC:56:10:03:6A:05:3F:A4:AE:88:0C:C0:35:6E:F0
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9e:d3:c8:18:8a:92:4c:cf:38:a7:dc:ef:75:b8:86:e5:6f:
d9:3d:91:41:3d:7d:43:3c:57:0d:95:46:6e:95:e8:66:4c:25:
89:23:51:47:02:1a:77:2f:02:0f:7b:52:03:e2:ff:60:c4:2b:
63:71:c9:3a:4e:78:54:c0:85:9f:d6:91:9a:a8:a4:89:c6:56:
09:9a:40:46:56:e1:5f:af:1e:81:89:89:e4:2c:52:3f:b4:99:
85:9f:64:0a:31:6e:75:3d:98:09:af:a9:57:3c:81:03:31:57:
93:f6:56:b1:b1:21:98:1b:cc:4e:f0:76:6c:35:b2:96:cd:9d:
b4:e1:39:a4:78:5f:fb:92:2f:56:6e:9b:12:c7:f8:4a:11:92:
2f:5f:e3:cb:35:f4:aa:50:3d:f9:f3:8b:c1:60:11:f2:e7:d6:
68:ad:48:ee:30:8f:5a:0e:dc:1b:9f:e3:0e:db:96:53:c9:db:
d7:21:18:14:29:7a:75:69:29:55:da:e6:08:f9:66:5e:62:46:
08:42:8b:ca:28:fc:ef:6e:73:06:81:5c:db:d7:b7:71:ce:92:
44:08:2d:3f:61:b0:76:a9:db:21:cc:a7:94:bb:8c:95:83:e6:
97:a1:82:66:b7:68:a9:69:cb:ce:c9:9a:03:f1:bb:c1:9d:03:
1b:c8:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:53 2026 by rpki-client