Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: rJfzgh0JhBO7VqUK1Y4lHlSj8o2jnmAgTxFm0nijP2I=
Subject key identifier: 2D:FC:E3:38:8D:DE:E5:F0:7A:18:88:51:49:E1:32:84:06:AB:F1:E4
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 019CAC7DE9542006210DEAC02C31FC04D901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: KirmQlcCDUgdDMVvTz413VidpjL27IXXE5DytYGnedw=)
2: zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa (hash: AKFEqvG1w5Wb8V0Q0PMXn0i+G8aiBs1A75NxMO1M+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e9:54:20:06:21:0d:ea:c0:2c:31:fc:04:d9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=2dfce3388ddee5f07a18885149e1328406abf1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:78:11:63:fd:9e:f9:3e:aa:d7:60:1c:60:
2f:9c:cd:9c:78:fc:a7:15:66:4f:88:15:5b:23:06:
6c:10:d4:be:e4:6a:db:15:7e:4c:7a:e4:b5:16:16:
08:a3:eb:f1:b7:35:57:06:71:c9:e4:84:14:4f:46:
02:42:7f:4e:39:13:a6:cb:eb:ec:94:8b:76:da:fb:
0c:17:7f:51:d3:f8:b3:60:78:11:32:bb:04:ae:cc:
6b:64:11:4f:b7:df:ab:79:3b:f0:5e:75:82:a7:f1:
c3:0a:45:76:93:0f:47:6e:4e:26:fa:cf:df:05:c2:
a9:69:e2:e3:4e:27:21:d3:33:43:51:8b:ae:02:01:
9d:0a:af:e6:d4:6c:c8:05:96:76:0b:1c:3a:1d:76:
20:aa:d9:e9:d2:3e:51:98:86:fd:60:3b:c8:89:6f:
fc:07:e2:1a:1a:33:b1:8d:71:ef:2f:7c:6b:5f:b2:
88:77:cf:bc:9e:36:83:18:df:0f:29:fb:21:23:9c:
2d:a0:3b:ea:82:b8:bf:75:4f:e2:e8:eb:99:b9:c7:
06:ac:a3:71:0f:16:2d:33:89:e7:02:04:35:1e:c5:
db:7d:a3:ed:6a:59:aa:31:68:cc:ad:6d:c6:c9:fd:
83:cb:56:0f:27:ee:cc:fb:f9:05:14:d9:1b:2b:6f:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:E3:38:8D:DE:E5:F0:7A:18:88:51:49:E1:32:84:06:AB:F1:E4
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:89:f0:d8:76:a2:d8:c1:b3:6c:e7:03:2e:24:8a:f4:f4:3d:
10:f4:dd:a1:e2:70:92:f9:0b:32:68:6a:b7:ad:d5:1d:62:91:
50:20:16:3d:97:a3:ae:e1:fb:17:09:ef:ec:5a:bb:ff:e6:39:
64:4a:01:89:a7:da:d6:ef:01:2b:d3:8a:1d:d8:78:55:e1:30:
eb:83:70:9c:57:f6:1f:4d:8e:62:55:38:3a:3b:01:8f:43:1f:
bb:99:98:0e:0b:18:ac:66:e5:96:d6:bd:3e:c6:65:b2:d0:5b:
01:75:90:e9:25:69:d6:ff:99:4c:d4:39:3f:eb:00:db:94:87:
ef:66:ea:17:0a:4f:2b:4a:15:3c:a8:0e:dd:27:f5:6e:82:a5:
77:47:25:17:5d:65:74:7b:7c:02:12:43:18:f3:c8:f1:db:91:
b6:9f:4a:14:0c:53:04:8c:40:b3:24:12:ac:e1:4c:6d:18:10:
4c:fa:74:b3:55:09:c1:41:cb:33:d0:c2:67:ae:60:35:5e:84:
75:64:a4:5c:46:58:ae:22:54:5b:05:ab:f3:63:6f:d9:a7:71:
75:53:c7:3e:c9:a5:ae:fe:16:09:dd:27:43:a6:52:7c:a6:93:
8c:0b:d8:b3:c3:a5:1c:b5:a1:10:04:fe:b7:a8:e2:b5:97:56:
d5:83:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:37 2026 by rpki-client