Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier: 73Pxr/3nIINd5R1uGznjxP6uHK82HD/vgIj/8jem7Ks=
Subject key identifier: E3:8E:62:80:31:36:89:9E:80:70:E2:3D:55:C4:3A:19:01:35:BB:49
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial: 019CAB6BBF8E81D45C52424D60E1A634087B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:31 +0000
Manifest this update: Sun 01 Mar 2026 22:01:31 +0000
Manifest next update: Mon 02 Mar 2026 22:01:31 +0000
Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: ywAhIqaqHFtVraLNUBcLhYD3aa9FdKKjquXtPLLtUFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:bf:8e:81:d4:5c:52:42:4d:60:e1:a6:34:08:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
Validity
Not Before: Mar 1 22:01:31 2026 GMT
Not After : Mar 2 22:01:31 2026 GMT
Subject: CN=e38e62803136899e8070e23d55c43a190135bb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:3d:dd:b9:68:e9:0f:0f:66:d2:81:9d:b1:
b6:2b:45:a1:f8:86:0a:73:ab:e9:31:c9:10:3e:f0:
28:c3:87:f4:65:b5:7f:4c:e7:c8:b0:27:dc:4c:a1:
ec:be:8c:9c:bc:f9:74:a7:80:3f:50:98:34:ed:69:
d7:8e:64:a4:75:73:59:50:7b:ad:a2:c6:60:bc:51:
d2:08:07:5c:88:26:39:87:75:f9:35:c0:b4:90:ca:
d7:4c:5f:e3:f2:65:77:3f:01:d8:8d:a3:1b:b9:64:
c5:9c:9b:03:6c:0d:c6:17:17:76:10:0a:df:2e:43:
a8:87:72:a1:99:47:de:74:6f:a6:7e:41:63:71:36:
df:18:e9:27:a3:af:94:64:ed:b1:10:4a:4a:52:e9:
7d:e6:33:12:82:c4:92:62:5b:19:42:ff:22:59:a1:
d9:92:eb:f2:ea:21:b3:a6:fd:f9:51:2b:a1:eb:98:
12:42:5b:27:34:01:ef:8c:f7:a7:3d:f1:48:f7:26:
e5:f7:78:fa:88:8e:cd:d8:ba:6e:0a:55:22:57:19:
42:2c:94:a8:f0:dd:7a:4b:85:bc:c6:a5:4f:a7:cf:
18:85:7c:fd:f8:69:e0:88:22:47:31:f3:c4:2b:d3:
d1:d7:9f:2f:be:94:52:77:64:a6:02:d5:a1:6c:61:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:62:80:31:36:89:9E:80:70:E2:3D:55:C4:3A:19:01:35:BB:49
X509v3 Authority Key Identifier:
keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:73:c5:f7:ab:cf:bb:6b:15:fb:c9:e7:54:a7:d4:2d:32:64:
3a:02:ce:87:3c:f1:7d:49:6b:c9:55:12:5e:b0:72:e3:2a:e1:
b6:7d:99:ce:cd:a0:63:47:06:b5:ed:51:5f:79:98:fb:87:09:
11:bf:4b:e1:d5:a1:5c:0e:66:76:ad:ba:c9:08:54:85:e9:2e:
49:08:a1:2e:bc:0a:fe:10:74:09:dd:78:10:ef:ae:10:01:17:
13:7e:66:ce:12:56:ed:9c:f4:f3:2c:90:90:cf:d6:2f:76:aa:
92:89:96:83:7a:d3:cb:9c:26:54:43:bd:43:38:4a:3c:9b:bf:
eb:00:35:b7:52:68:0e:49:7f:81:f5:68:ba:7c:4f:32:35:98:
7b:92:2d:45:01:5d:69:0a:8f:ec:86:43:50:b6:11:71:82:52:
fc:89:99:d5:b0:1b:55:a9:7e:be:cc:90:01:82:43:e6:85:26:
cb:be:43:1a:93:49:74:67:b3:1a:56:df:2e:b3:5c:fc:f4:6d:
be:87:f0:1e:ef:92:33:44:92:35:e3:05:db:47:d6:36:1f:51:
49:bc:79:89:24:0d:34:0e:71:d0:72:2c:dc:d2:7c:19:1d:c3:
00:f3:43:5b:2d:e4:19:86:cc:69:ff:03:6e:1f:f9:3a:bf:5e:
12:11:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:14 2026 by rpki-client