Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: Gq6DOh6ujeHBfXCzADAmgvxbo3k55+Gxc5SxuJpjHA4=
Subject key identifier: 2F:52:08:8E:E0:22:88:EF:0A:DC:0F:0B:E4:AC:26:01:1A:7C:50:2C
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019CAED9C2346187FA2AFFD75F736475BC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 1535
Signing time: Mon 02 Mar 2026 14:00:32 +0000
Manifest this update: Mon 02 Mar 2026 14:00:32 +0000
Manifest next update: Tue 03 Mar 2026 14:00:32 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: Eo2tdipLz7tu86HSFZMTpqJd7Va1brIypHW/hRod7k0=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c2:34:61:87:fa:2a:ff:d7:5f:73:64:75:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Mar 2 14:00:32 2026 GMT
Not After : Mar 3 14:00:32 2026 GMT
Subject: CN=2f52088ee02288ef0adc0f0be4ac26011a7c502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:62:28:34:39:9c:45:4e:2e:8b:c1:a8:49:
0f:a4:bc:57:8a:cc:24:b8:2f:cc:07:f8:28:1a:94:
2a:aa:8d:66:f6:5d:d6:3c:89:70:6f:1c:45:c6:d2:
3d:65:4c:2f:80:fd:10:a3:1b:74:66:c5:9c:9e:67:
5f:da:44:45:6e:9d:d1:74:6b:f6:e3:2f:35:50:8e:
f6:7c:93:bf:a3:36:c3:65:bd:5c:ff:46:50:7b:b3:
b1:9f:94:b6:c2:8a:7c:d7:bb:97:8a:68:a6:8e:58:
3d:54:ae:fd:19:9f:26:3a:66:38:19:14:5a:32:1c:
3f:f1:f0:18:4f:29:4a:79:a1:07:b4:29:20:14:51:
86:a3:9a:9c:fe:64:40:7c:6b:86:5f:7b:75:dc:33:
65:61:65:c9:1a:e7:5c:0d:87:8b:60:64:83:48:8b:
5e:6a:4c:c3:30:f3:4c:b1:2b:72:45:4d:cb:be:7e:
22:ac:db:e0:4b:c7:c6:74:96:55:d4:b2:90:e3:82:
9d:00:ba:6a:2e:ab:75:50:c6:68:10:c6:01:3c:91:
e3:65:e7:94:ee:0b:8c:04:0f:da:8e:e5:6c:94:5a:
43:75:f0:08:79:84:53:a2:a2:f3:97:1c:db:4b:15:
a6:d5:f5:02:69:dc:97:19:86:e0:65:f0:52:0f:75:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:08:8E:E0:22:88:EF:0A:DC:0F:0B:E4:AC:26:01:1A:7C:50:2C
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a7:3e:f0:4d:c7:4c:e1:fa:b6:63:b8:59:78:99:57:f4:ef:
20:90:e8:56:82:ce:b2:85:eb:f4:42:6f:e5:ef:ea:19:5e:f2:
85:46:8b:f2:5b:7f:21:3a:6c:34:e0:00:fd:d2:3e:13:c5:f9:
7b:51:c4:d3:11:3e:06:1e:40:4d:1d:f4:a8:a0:dd:82:a6:59:
73:ca:3e:0e:e3:f1:45:ab:75:fd:15:07:fb:cc:ae:5a:69:bb:
5d:d8:0f:85:7a:9c:c3:71:b4:db:af:56:de:41:ec:f0:97:9d:
aa:e0:d5:b9:0e:c5:eb:3e:eb:8a:f4:37:17:1d:43:8a:71:09:
c1:8c:85:19:74:6d:57:b3:22:5d:d3:e7:52:12:a9:79:4e:1c:
ad:1c:97:6f:d9:71:fd:1a:96:50:a8:54:18:3a:5e:a6:16:53:
33:99:5b:4b:51:62:57:79:33:fa:21:b0:1a:62:ea:e3:f0:38:
b8:ec:db:71:b0:41:02:4a:5e:36:8a:49:ee:10:f3:ac:b5:9a:
03:36:df:22:cc:b0:b0:7a:0a:0f:ed:97:8f:28:29:1b:91:50:
d9:c0:c2:e4:e7:69:c2:16:ba:5b:c3:50:32:cd:35:28:ad:c3:
9e:a5:fd:83:6f:42:ec:bb:8b:d2:a5:f6:24:60:39:65:e3:c4:
0b:d4:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:38 2026 by rpki-client