Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: IEPF1dWDCXnkKpJLO/kE3N1X2ehBCi+Wu1M2HPDTRzs=
Subject key identifier: B2:5B:35:24:5D:FD:E5:F7:35:6A:BD:9C:17:A4:47:DC:9F:2F:7A:4E
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019CADFEA9A01AD2D2ACBE99D67E54315E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 167E
Signing time: Mon 02 Mar 2026 10:01:13 +0000
Manifest this update: Mon 02 Mar 2026 10:01:13 +0000
Manifest next update: Tue 03 Mar 2026 10:01:13 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: /OLLWNa3Y/y8rd5IeJSJRixeqXU1LcSBDtSMff9gzww=)
2: InHyWEjEiyh7nEE2TIiuq0-_-Cc.roa (hash: X+4z9Y0iJ1TRnqAnnq28KCv6J+YQ5AkdpPJ2iZvV3CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a9:a0:1a:d2:d2:ac:be:99:d6:7e:54:31:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Mar 2 10:01:13 2026 GMT
Not After : Mar 3 10:01:13 2026 GMT
Subject: CN=b25b35245dfde5f7356abd9c17a447dc9f2f7a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8f:55:fe:d6:01:86:29:8c:95:04:e3:f6:21:
d7:11:41:fc:70:62:c0:a2:a0:38:bb:66:45:66:73:
fa:13:61:c6:4c:21:60:d5:8e:f4:f0:29:db:b6:c0:
d0:5d:7c:02:59:59:2f:76:d3:93:c6:f6:76:c1:6a:
47:82:1b:4f:6b:1b:9f:7d:45:7d:86:e6:bf:22:e9:
bb:cd:ed:13:32:ff:22:10:30:f1:33:a8:63:38:4d:
96:a9:13:0f:68:67:50:bc:95:1e:8a:f6:25:ac:8e:
d6:17:b0:bc:92:da:84:c9:c5:14:c5:df:01:54:40:
cb:a8:94:60:ab:ce:9f:26:8c:1a:81:5b:bd:41:bd:
15:0a:71:48:6c:e9:5b:d9:fb:5a:6e:c5:ae:1c:d9:
22:74:7a:fa:b8:cc:ec:85:48:ef:55:6e:9f:50:80:
81:3f:fe:5a:3d:61:50:1f:36:e5:0b:ed:14:e3:99:
3b:b7:fa:55:b4:97:3b:4e:b6:94:4b:50:0b:ba:94:
06:5a:a9:0a:ef:1c:17:b2:28:ae:a0:47:39:32:05:
d7:d3:17:66:04:71:00:f9:96:dd:d0:76:da:f8:7b:
48:da:c6:40:12:88:ca:95:d8:d7:3a:db:47:a8:0a:
f8:48:94:1d:db:f0:7e:75:a7:61:e4:c3:0f:83:0b:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:35:24:5D:FD:E5:F7:35:6A:BD:9C:17:A4:47:DC:9F:2F:7A:4E
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:be:af:a8:02:dd:09:5c:08:86:90:4b:f5:e1:86:25:00:91:
f6:d0:fb:b8:dd:9f:7f:2e:91:27:c2:84:f9:74:6b:55:25:cf:
41:51:ba:c8:53:3d:bf:87:28:a0:8b:4a:36:a9:48:16:7f:73:
0d:e7:91:95:cf:aa:a4:ad:a9:2f:ff:71:e4:3d:9a:23:57:c8:
99:f5:8f:aa:29:2d:a3:8b:6a:1f:7b:4a:ce:a2:b5:99:51:27:
55:0e:d8:89:82:cb:70:6e:fd:56:1e:4d:66:0c:c3:38:2a:ac:
13:fc:ff:4f:3c:e5:dd:a4:08:34:67:22:5c:03:6c:c6:d9:de:
e9:f7:96:6b:67:bb:83:7f:4e:c0:6a:05:2f:08:51:93:08:23:
18:a5:df:ac:0e:dd:ea:a1:d5:06:a3:c7:31:ff:56:72:d5:01:
b2:8d:57:a3:b7:4d:06:2a:a2:5d:80:0d:e3:2f:38:c5:9d:20:
0a:94:95:56:af:10:7e:bb:f8:90:4b:82:17:ff:a6:a8:86:82:
4f:4f:e3:65:53:a9:28:cd:6b:4b:c9:a9:6b:11:c1:30:8a:30:
d7:2e:40:4e:21:3d:52:e4:ae:ab:0a:42:6d:12:32:c9:76:30:
2b:95:54:6e:d8:93:83:91:d6:dc:42:c5:c4:ed:e4:91:19:a8:
1e:e9:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:49 2026 by rpki-client