Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: Lks3Nyi8a/e6CRsgRM/lQwWUVPdj1iu+7CBA2+KLUWs=
Subject key identifier: F0:B4:5B:6D:64:FD:02:05:24:B9:C7:60:3F:FC:80:60:C0:9A:78:D4
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019CAA21FE5FB3B270C622A434F1F90CAFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:01:20 +0000
Manifest this update: Sun 01 Mar 2026 16:01:20 +0000
Manifest next update: Mon 02 Mar 2026 16:01:20 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: hIp4n1bFIHkv4KkpJvg9cGLm4nP5MPnQawjXIGRG+CY=)
2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:fe:5f:b3:b2:70:c6:22:a4:34:f1:f9:0c:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Mar 1 16:01:20 2026 GMT
Not After : Mar 2 16:01:20 2026 GMT
Subject: CN=f0b45b6d64fd020524b9c7603ffc8060c09a78d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:c7:c9:dd:dc:ae:fc:57:6e:54:c7:c6:4a:
c9:4d:83:ec:55:82:50:fc:82:bb:48:44:a8:c8:46:
64:ec:cc:79:28:2b:d7:d0:80:c5:9b:9c:da:98:4c:
9a:b2:55:ea:9d:12:3c:25:8b:be:7e:ef:bf:d1:73:
f1:3a:6e:40:bc:7b:89:9c:d5:38:af:f2:02:68:fd:
d0:70:60:e1:64:64:ea:1c:42:71:86:5b:fa:b1:67:
1d:ee:99:35:66:bd:1e:11:43:05:ed:e3:9c:da:b0:
60:a2:a2:49:68:de:11:f1:fd:f6:e5:aa:3b:49:65:
9c:b2:6f:45:c6:e7:02:5f:c0:fc:a1:5e:94:9b:a4:
ec:60:71:a7:a3:3b:21:9f:4f:5c:e4:be:86:d9:3c:
5d:b3:12:b8:17:4d:f4:7a:8e:41:72:2c:c5:6c:64:
ba:7a:9f:f4:4e:7e:28:4e:b1:fd:19:52:f8:49:c7:
ba:fa:66:7a:86:38:c9:cb:0b:4b:15:91:db:22:ae:
13:f7:02:08:51:4a:24:3e:94:d9:ff:19:68:0b:72:
e1:d2:71:e2:29:24:3e:57:be:33:67:8c:52:56:d8:
6b:43:a1:48:ad:85:0a:3d:69:56:5c:0a:c4:d1:e1:
1e:3c:6a:d6:b7:de:64:0c:7f:b5:9a:cb:7f:fa:a2:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:5B:6D:64:FD:02:05:24:B9:C7:60:3F:FC:80:60:C0:9A:78:D4
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:0b:e4:4b:bc:0e:c3:36:74:08:05:a5:7c:cc:9e:a7:1f:
5a:18:1b:1c:25:df:e8:60:37:63:25:3f:01:47:e1:52:6a:35:
4a:80:ce:50:2b:36:26:dc:6c:27:0e:87:93:54:41:12:ba:20:
1a:52:ed:c3:7d:54:90:a1:f8:10:f3:a8:a0:bd:74:08:0a:c9:
04:a2:c3:41:95:47:7a:58:62:93:b2:19:53:e5:00:03:45:b8:
60:28:0d:30:1c:46:ed:c8:b0:ae:87:67:49:9a:e6:cf:78:aa:
0d:16:90:d4:e9:37:06:f2:73:25:eb:9a:13:79:bf:cd:20:e7:
26:ba:1b:38:4a:28:fe:f2:b1:a9:32:b5:f3:d4:e4:57:15:85:
a1:f6:92:ed:02:7b:34:a8:a3:58:09:61:9a:88:71:1c:d9:82:
e3:57:23:df:b9:1a:9d:2c:2a:cc:66:ed:35:36:0d:b6:a6:1a:
f6:c8:82:92:3a:ad:6a:01:4e:23:92:cf:20:a5:2d:fc:66:f3:
33:f7:7d:a4:49:1b:5a:6b:e5:8e:28:dd:60:44:d7:28:55:30:
d5:46:d7:33:04:11:9c:29:2a:b9:c2:da:ab:24:0e:3e:dd:19:
09:67:4c:2f:ff:b2:30:b4:6e:14:64:b2:91:56:2a:60:87:4d:
54:28:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:42 2026 by rpki-client