Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
File: hiGwt9-gp4iPde_yDzIUWgs_DdU.mft (raw, json)
Hash identifier: dds4b0wNPWpEtFap58XnjffbT3ymGRFFahWcja/QBCs=
Subject key identifier: 1C:33:8B:30:1C:21:8F:0F:6B:CE:8A:15:C0:55:1D:68:67:74:CD:4C
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Certificate issuer: /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial: 019CAA58E924716F332954B003351960A0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:19 +0000
Manifest this update: Sun 01 Mar 2026 17:01:19 +0000
Manifest next update: Mon 02 Mar 2026 17:01:19 +0000
Files and hashes: 1: hiGwt9-gp4iPde_yDzIUWgs_DdU.crl (hash: nqd5Ac+wwZoiIp42f0CsV9kwY5aGDazoAWJ5kPA7s3E=)
2: kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa (hash: wZEOFTFIMct/33jsnIoNoec+GVySts9zmn8n8Vg4eB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e9:24:71:6f:33:29:54:b0:03:35:19:60:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Validity
Not Before: Mar 1 17:01:19 2026 GMT
Not After : Mar 2 17:01:19 2026 GMT
Subject: CN=1c338b301c218f0f6bce8a15c0551d686774cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:26:ed:6b:22:a8:7e:9e:c8:f7:8c:31:82:
fe:ec:51:e5:cd:44:f0:88:b7:6a:29:25:d8:03:05:
c6:29:ab:e4:f0:c8:38:00:90:e2:62:86:46:bc:67:
e5:5b:16:60:54:47:dc:f4:20:55:43:b9:e6:53:de:
32:75:03:70:eb:ac:f7:fc:ab:32:2f:96:32:1d:c5:
af:d5:20:e0:ea:cb:e5:cb:d5:99:6e:3c:81:6c:6d:
c9:32:e2:8e:fb:c3:71:a5:d3:80:97:92:25:75:94:
40:32:cd:fe:11:b4:8c:be:95:a5:3f:ae:d1:dd:2c:
8d:f0:20:fc:a6:cb:7f:b0:67:91:82:54:6b:51:94:
28:29:91:26:bc:3d:e9:3d:a1:c0:09:f1:39:42:47:
db:d1:6e:43:66:79:4b:16:73:a4:14:73:32:a1:d3:
6e:88:53:33:fb:c9:d7:4e:aa:ad:c6:d9:bb:bf:e8:
25:7f:64:3b:3f:93:9c:44:cc:05:fa:06:dd:da:05:
92:17:ba:1e:ac:18:70:fd:f5:f2:97:81:5f:96:7c:
cd:f1:9a:ea:47:7d:00:e5:95:9b:ab:18:9d:38:b6:
83:a0:4e:2d:ea:62:03:98:bb:87:38:94:86:f7:c7:
52:c3:84:d6:a9:9f:07:99:b2:d8:72:95:b9:f6:27:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:33:8B:30:1C:21:8F:0F:6B:CE:8A:15:C0:55:1D:68:67:74:CD:4C
X509v3 Authority Key Identifier:
keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:32:73:1a:48:53:d7:1a:46:65:e3:75:9c:43:20:68:5d:bd:
51:f3:2a:14:39:8d:8d:6b:0e:20:41:9b:c6:08:f3:45:f6:84:
2f:7e:14:7c:6a:1a:92:c6:5d:c7:51:41:d1:4a:be:fb:d6:2e:
e8:bf:3c:04:22:ba:09:51:9d:f5:25:28:88:0a:96:e4:19:f5:
a1:e2:0d:11:22:60:0e:5a:25:3a:82:a8:1b:e1:88:e6:e2:a7:
0c:14:86:b0:93:b4:58:5a:06:e9:e4:19:e9:97:ee:d7:f4:8f:
81:af:a3:cf:81:49:4e:c2:c9:e8:ca:7e:42:27:29:d1:7b:8f:
ff:77:9a:8e:ac:86:2b:6a:64:27:0c:10:46:d9:15:a0:43:af:
3c:d7:cf:51:90:d0:51:04:5c:f9:38:72:a5:3a:75:1d:d4:25:
25:24:5b:47:72:9c:0d:a7:7b:7e:78:c6:58:97:90:58:98:b9:
b7:b2:02:e1:aa:f5:0b:f9:eb:fb:dc:20:e1:11:fc:fa:22:98:
04:82:69:7a:ce:11:2f:44:71:84:77:22:77:c0:e4:21:36:c3:
13:dd:4b:b6:0e:24:dd:ff:9c:0b:13:8c:47:1f:0b:a4:97:82:
37:1b:38:8b:d1:c9:25:91:a9:ab:fe:1f:fd:80:12:f0:c1:60:
8d:a5:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:13 2026 by rpki-client