Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: ZSkf3DIzfqxOfDRo97NQCDFrOXz2d5ci7z9+6F/Z69Y=
Subject key identifier: 0F:84:E2:01:12:2C:B7:EB:86:FA:FD:9F:51:B8:25:07:C8:8C:91:C7
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019CAAC62193468C4789581DD43A9C6DA309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1760
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: LXQ4GmXYhXvFesAyccU3Dds8P3c2dNycMwlLEVQAzfQ=)
2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:21:93:46:8c:47:89:58:1d:d4:3a:9c:6d:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=0f84e201122cb7eb86fafd9f51b82507c88c91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:ea:67:d6:af:2e:29:7c:f2:fa:7d:97:9f:
5e:54:59:2a:34:91:10:d8:b1:40:87:65:c7:20:71:
2c:ac:c9:49:ab:f5:d0:d8:34:01:1a:6c:36:14:cb:
7e:90:d4:62:a8:9f:df:e7:3a:f6:bb:d1:ed:00:01:
47:eb:44:4a:a8:13:f3:35:1e:8b:f9:19:96:47:d1:
95:63:ea:a2:7c:5c:92:eb:12:a3:e2:62:c2:a9:f9:
d4:61:11:f9:9b:7c:ef:da:ce:93:0e:d3:f8:cc:8e:
4a:55:1b:8c:07:66:83:ac:f6:17:e2:11:2f:85:e2:
e9:a2:50:2a:79:e0:e1:88:d6:91:d2:40:73:7e:6f:
51:68:fe:d1:6c:4f:dc:d2:1a:b1:c3:89:12:e5:ec:
dd:ab:a5:dd:5f:86:1a:db:fb:ce:72:db:63:d1:b0:
69:84:72:2e:67:52:64:cb:4a:69:87:35:dc:e6:4d:
8c:8c:75:2d:a0:17:7f:50:c2:66:f0:fb:ad:b0:85:
b8:62:20:6c:fb:ef:e1:85:70:4d:07:52:12:a9:ba:
79:3e:3a:b0:5b:ff:5a:e2:4c:ec:ae:a1:7e:0e:b1:
51:56:c8:60:69:45:a8:d5:32:35:c5:d2:27:04:26:
44:dc:3b:2b:94:7f:1c:de:0a:dc:5f:42:23:35:23:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:E2:01:12:2C:B7:EB:86:FA:FD:9F:51:B8:25:07:C8:8C:91:C7
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0f:7e:ec:d5:11:85:f3:09:b7:f3:d4:6c:5b:e0:92:c6:bf:
d2:42:4e:c0:c2:be:c6:84:75:a5:64:c7:84:5e:d6:28:e8:11:
79:7a:d3:67:bc:e7:19:81:8f:b4:71:8b:ab:65:61:20:be:c5:
6b:cd:6c:4d:63:42:69:0c:4c:63:a3:75:20:67:5f:f9:23:b1:
8b:32:81:0b:6d:7c:07:5b:1a:2e:77:d5:92:2a:21:93:67:d5:
52:5b:cf:cf:da:e4:bd:d3:2b:5e:a4:27:1c:40:55:de:e8:54:
ed:2f:52:c1:8a:e2:79:1f:a6:ab:07:c4:07:4c:ba:90:c5:5d:
d9:0e:6a:48:49:59:8f:d6:2f:5c:b3:03:9b:82:60:0f:d9:a8:
a8:89:b4:24:5b:25:64:e5:15:6e:64:9b:5e:ed:ce:5b:66:b5:
b1:53:c6:0b:41:92:01:c5:60:f5:05:e3:fa:ad:be:c3:48:0c:
ad:5e:5c:98:c3:d8:a9:1a:dc:87:08:e1:93:00:1a:23:2d:ee:
00:9b:89:45:dd:5e:0f:1e:9f:3b:8a:b2:32:86:cc:00:94:fa:
c2:d0:ce:d7:d1:b2:40:25:0f:0c:5e:65:ea:9d:40:9f:a9:56:
1a:74:57:15:6d:5c:81:c4:eb:6d:74:49:35:32:2a:ee:d3:bb:
11:fe:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:23 2026 by rpki-client