Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: XSNQ93rQiKTbFiDM/qM81K1VrpqDOK/Bunicut4VXbs=
Subject key identifier: CF:E6:3A:A4:59:D7:7A:AA:DC:81:3D:E8:12:9F:7B:C7:4F:4A:90:2B
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019CAAFD3C4C270C69BF46FEEDB30ED6C41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0D0A
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: jqbbWb95QNgJ1DKdDKlDJusiKo/9oepiwEsvBbxIQyg=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3c:4c:27:0c:69:bf:46:fe:ed:b3:0e:d6:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=cfe63aa459d77aaadc813de8129f7bc74f4a902b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:31:94:7b:b9:0f:23:22:d5:0f:f4:a5:9b:
c2:f8:ce:64:7e:ec:70:b8:9d:df:cf:df:84:d2:e6:
ae:22:65:58:dd:bd:ec:ef:75:03:af:ff:d4:fc:0c:
ef:72:28:4c:07:0f:72:30:49:60:ca:7c:a3:05:5a:
30:97:b7:ae:02:da:db:fa:80:88:9d:39:a4:cc:c3:
8a:13:91:66:c6:6c:69:39:7a:48:7b:92:db:16:8b:
78:d6:a1:4e:30:6d:89:ad:4b:0c:19:e4:b2:14:94:
cc:b7:0b:0c:7c:3a:3b:34:eb:3a:ce:05:9a:87:39:
39:06:74:bd:fe:50:25:82:9e:31:12:79:51:88:00:
0f:06:ee:68:db:0f:ce:3f:6d:a3:39:51:5e:fb:71:
3a:80:68:fa:3d:63:79:43:dd:ad:18:2b:ce:2a:ca:
4c:79:6e:00:2d:08:1d:b0:e3:aa:c7:c8:c6:47:ca:
17:40:15:55:2a:aa:1d:8a:4a:76:80:71:b1:81:48:
ba:dd:26:98:64:a6:c6:7a:b3:0d:98:13:98:3f:50:
a1:e8:68:e5:53:d5:99:12:8a:23:dd:78:f5:10:3d:
a6:51:3b:69:e6:a3:5b:3d:18:a0:40:21:27:d2:78:
77:11:a3:59:8c:58:02:8e:b3:03:71:0e:ff:d2:75:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:3A:A4:59:D7:7A:AA:DC:81:3D:E8:12:9F:7B:C7:4F:4A:90:2B
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:35:2b:7d:60:39:41:59:d8:f1:8d:26:b2:2c:88:a1:d3:
b6:0c:78:b2:ae:c6:4f:ce:36:e5:f4:37:0d:54:d2:ac:6c:e4:
ab:28:7f:87:f7:72:3b:ca:3b:a4:2a:9a:96:dc:74:c8:12:91:
26:d0:c7:8c:42:a4:e2:ab:d5:46:7d:25:3e:f2:77:1f:75:23:
9b:e9:b5:f7:9a:73:e7:9b:01:c2:34:d7:8b:b1:db:73:31:c7:
33:d5:ae:c6:f0:e5:31:fc:2d:a7:33:25:83:3d:c9:44:4b:57:
09:9f:b1:bc:10:ed:c1:2c:17:70:e6:4a:71:71:9c:e7:b6:c3:
65:49:39:6e:fe:e2:ea:d2:5d:97:bd:6a:84:5e:0a:03:b4:4b:
1c:cd:ab:4e:6b:11:8e:70:16:17:f2:4a:70:e2:fa:57:6e:df:
65:df:b9:e8:b8:92:5c:34:22:cf:a0:c7:39:f7:5f:1c:7e:9e:
9a:5c:60:3c:0b:57:49:e3:62:5f:b6:cf:b2:2e:0b:c9:6b:3a:
c8:cc:77:19:a7:20:36:80:22:d4:06:97:b9:ff:3d:84:ae:0a:
ef:76:73:0b:f4:60:42:2d:47:9e:80:38:08:94:53:60:9a:f9:
bd:a0:90:26:56:86:cc:ae:10:f4:bc:bd:e0:4f:73:f1:7e:18:
2d:20:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:15 2026 by rpki-client