Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: pyY2V15/InR3ScidNNcihzDS9SzbCVGwTjN0afR4Ubc=
Subject key identifier: 3E:24:DF:A1:EF:24:66:8E:C3:88:08:9A:12:74:05:66:50:92:0F:C6
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019CAAFCFF7ACDCAE6BEE79C01E259D51A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 1557
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: IngeltVNGIP4kr6rJM2uavdkqSvlr0VzWkZ70RalOtQ=)
2: O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa (hash: 0pQ2h4z2SL8hjYjPnGVnHeMv5KcEmo0XbgSaP9LFvxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ff:7a:cd:ca:e6:be:e7:9c:01:e2:59:d5:1a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=3e24dfa1ef24668ec388089a1274056650920fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:ae:ae:43:e1:ca:0c:1e:a0:57:7d:1c:58:
34:a4:ff:17:ff:1f:63:34:57:ef:88:5b:3e:f1:cb:
20:ef:8f:3c:42:7e:a7:63:dd:4f:ba:80:bd:f8:7d:
5b:fa:df:89:52:35:9b:97:c1:c7:16:26:79:44:4e:
63:88:9f:fa:31:5f:d2:5f:0b:17:37:1a:5c:52:6f:
ab:02:5d:2c:f0:30:14:35:cf:8f:73:02:43:6a:14:
2f:72:07:03:4a:88:bf:e1:95:57:d8:e1:02:9a:3b:
ce:54:57:87:3a:9f:3f:eb:8d:55:ab:b2:62:0e:75:
50:74:97:88:12:54:8e:a5:b2:3d:1a:f0:70:78:02:
a2:5f:e3:ed:1b:99:1d:1a:e5:7e:cf:70:af:45:ce:
b5:f3:7e:4e:14:33:29:9e:aa:0a:56:63:d7:a6:82:
c5:a9:98:53:35:0d:c5:38:3a:eb:99:2b:f7:4c:64:
dc:51:5e:3c:41:53:15:c6:24:d2:70:0e:72:ab:9b:
7b:44:74:1e:2f:f8:b6:a0:da:44:3d:21:26:70:29:
38:2f:58:a7:48:ca:8c:95:05:bf:e6:87:08:bc:3e:
64:07:75:21:cb:0f:2c:87:91:2b:6f:6e:a4:71:66:
9a:05:f0:04:6b:5d:0e:c5:a7:b9:23:5f:75:18:4d:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:DF:A1:EF:24:66:8E:C3:88:08:9A:12:74:05:66:50:92:0F:C6
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:e7:12:73:75:a6:d2:92:05:c5:50:12:89:7d:15:a6:2f:
35:b8:ee:9d:ba:f8:02:f1:48:6e:c6:53:4f:4e:9a:f9:01:1c:
46:86:44:1f:b7:2d:bd:b5:ed:6e:cd:a9:01:8d:89:e1:b6:40:
40:18:ff:8e:63:a7:9f:cf:36:a2:1a:bd:ae:8d:a2:b7:ea:9c:
28:6b:45:8b:ca:ad:58:61:52:c0:df:6f:4d:af:6e:bd:09:80:
bf:0d:81:2d:e1:31:5a:dc:c0:86:85:90:b3:a9:a5:79:cc:05:
1f:ec:11:71:ff:2b:e7:17:7d:a8:c6:f2:10:dd:ce:12:2b:be:
38:2e:35:1e:09:76:8e:9d:62:bc:45:07:a2:8a:3b:dd:af:22:
0f:a7:74:55:42:a1:17:83:78:17:68:ba:af:92:60:3d:62:58:
04:70:cd:b5:51:36:ed:7f:0c:98:3c:e0:a5:3a:4c:c6:69:8c:
23:8e:8d:3c:ee:98:7b:7b:02:1d:7a:8b:a1:cd:b3:6d:de:71:
ea:e6:78:99:b4:40:ca:25:dc:47:30:60:05:07:dd:c4:3c:31:
a8:0f:9b:dd:53:f2:22:01:21:e3:cc:7e:08:63:c7:f3:2e:3b:
5a:63:a5:a4:df:1e:cb:11:fd:6d:c9:9a:0d:7c:54:19:81:fc:
68:f3:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:51 2026 by rpki-client