Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: F54ad5qym28DMcJ00YGCEhHTVq8kYtE1S7K7MwjwZrg=
Subject key identifier: 0A:86:F9:69:FC:E3:78:CC:E7:3B:62:B3:6C:C3:A6:F3:76:65:8B:7C
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019CAD597870CF9B464BDEE63ED07D369AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 0227
Signing time: Mon 02 Mar 2026 07:00:47 +0000
Manifest this update: Mon 02 Mar 2026 07:00:47 +0000
Manifest next update: Tue 03 Mar 2026 07:00:47 +0000
Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: 0a2O2DRqbyb2dRi9aoMtkLh5ExjUpR4LutNVNyFxJcA=)
2: P1rq--wiDi76LUxjVzXH29sgybw.roa (hash: SPvPSEDad4qsS0oBYZ6qjYjCdcZiG9BnjnuYqxJo1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:78:70:cf:9b:46:4b:de:e6:3e:d0:7d:36:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Mar 2 07:00:47 2026 GMT
Not After : Mar 3 07:00:47 2026 GMT
Subject: CN=0a86f969fce378cce73b62b36cc3a6f376658b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:34:64:74:4d:05:5b:fb:aa:9c:14:c5:0c:
00:2b:d4:74:0d:c2:1e:4e:c7:45:dd:8b:24:eb:a7:
18:9c:14:95:7a:28:7a:a7:0c:98:9f:06:d5:1a:71:
70:11:1f:39:5c:51:cd:eb:7a:4e:fe:e7:54:c4:dc:
a2:5d:01:8d:86:54:6f:d7:2a:14:2c:bc:33:d5:1c:
2e:16:0a:ce:19:01:a3:b4:17:89:17:e5:2e:37:c9:
03:c7:a9:54:dd:d9:b8:ff:3c:cc:16:5d:d5:b9:ac:
0a:62:71:56:6b:47:a6:16:33:f9:ad:50:e8:c8:16:
68:d1:08:59:92:a5:b2:44:43:2e:9d:01:30:c8:16:
fb:06:56:94:1c:a4:ab:72:bd:cb:4f:88:4a:36:56:
19:d6:16:eb:cf:24:60:c8:49:e9:84:5f:0f:50:98:
a5:3f:a8:47:6e:f6:cf:a8:5e:d9:ad:72:a9:19:dd:
c7:ee:01:a5:ed:4e:01:06:e7:95:d1:99:77:4b:66:
81:14:d5:d7:74:2a:fd:e2:4b:3e:13:ed:46:8c:fd:
0f:c1:09:9f:b1:ba:18:7a:b3:c1:80:66:a1:70:c2:
1b:9a:bf:81:b3:58:85:d6:4c:be:10:9b:0e:c5:a8:
a0:80:4e:b2:21:7c:15:fc:ab:95:ce:1e:73:79:70:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:F9:69:FC:E3:78:CC:E7:3B:62:B3:6C:C3:A6:F3:76:65:8B:7C
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a9:06:20:76:a5:f5:dc:2a:69:a2:c6:83:9f:e6:0b:74:29:
3c:f3:9f:67:7d:6e:c4:f9:01:cf:34:97:52:7d:09:57:3c:3a:
6c:9c:9f:f8:ed:54:ef:f2:a9:f0:18:c2:3a:c1:c1:4b:d4:ea:
b6:a4:b2:79:56:d3:1b:7a:d3:b2:d1:bd:b3:d3:96:87:64:cf:
08:3c:ac:f5:87:00:49:c3:b0:c1:b4:e1:e6:15:41:b7:86:51:
23:7f:28:d6:cf:1d:cd:65:ed:7d:ac:36:b3:77:40:72:84:54:
f3:28:68:d7:03:9e:df:75:20:f3:f1:62:5d:72:a4:9d:8b:72:
16:65:dc:55:69:0b:8d:e3:1c:a0:ba:c1:06:90:61:21:5a:44:
60:02:cf:07:05:02:04:8e:3b:3a:07:fe:37:b8:6f:8b:d1:98:
4b:38:14:09:b2:bc:49:6e:07:6e:e2:31:ad:6e:42:d2:4d:8d:
7c:2b:a4:bd:d7:95:da:97:65:77:ba:0e:e0:8e:5c:66:a1:97:
f7:f7:a6:18:bc:8c:7c:ff:34:5d:ba:ce:95:c2:d2:4c:f6:91:
e1:57:06:10:c7:89:0c:d9:a8:aa:8d:34:a3:02:91:51:d2:74:
97:a0:36:8b:0d:3e:07:57:b1:51:a5:3a:b4:99:5c:48:43:55:
c7:12:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:24 2026 by rpki-client