Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: HfQcxpksxA3Rz658l5ZVGCr89C76Q4r9dWclbKilxRA=
Subject key identifier: A4:92:E7:68:E4:F8:A8:2B:7D:D6:A5:A8:06:70:A4:5A:FE:D8:F5:EE
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 019CAB349B8E8DA570D75D86AD3CCF73D095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0D3B
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: gJ/nK9h87qHu43bE87OVKrigAcZwgvno825qYeesu+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9b:8e:8d:a5:70:d7:5d:86:ad:3c:cf:73:d0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=a492e768e4f8a82b7dd6a5a80670a45afed8f5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:67:d5:83:cb:a6:48:4c:a4:ef:b0:e2:72:
6b:a0:07:fd:39:28:16:10:e6:58:24:1f:1d:15:96:
63:af:88:7a:f6:e1:f2:8c:0b:ae:1d:6f:d2:20:72:
af:dd:26:13:18:b6:33:a5:28:79:6c:04:32:b0:a9:
5a:d4:e8:49:63:64:1d:ca:38:02:d4:47:ee:f0:91:
dd:83:71:bd:df:d9:6e:88:f4:b6:c9:a4:26:8d:36:
66:55:1d:d8:4e:c8:30:8a:aa:73:47:79:d1:f4:be:
5a:f7:11:f5:29:cb:90:a4:bf:8c:e2:af:43:6c:d8:
57:cb:91:33:f8:83:84:6c:90:22:5d:8e:1d:63:d8:
9a:5a:ac:6a:dd:ec:dc:b8:75:d1:70:55:11:87:d5:
39:1c:83:53:b8:c6:06:31:82:bd:13:85:d5:98:de:
e0:93:6b:88:ed:4a:58:35:67:fd:96:ea:4e:6c:e2:
e7:5c:25:81:e2:61:74:50:45:55:f3:63:ba:1f:35:
ea:3e:bf:bd:63:de:ae:78:bd:d9:14:af:8d:ea:55:
d4:2f:fd:bf:b7:39:14:f4:86:0a:57:6b:ec:cb:7f:
ba:a7:4a:d9:ae:48:e8:d0:74:8e:d2:32:0f:95:af:
d8:58:6e:69:26:53:50:0f:f8:d6:c7:6d:b6:3c:da:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:E7:68:E4:F8:A8:2B:7D:D6:A5:A8:06:70:A4:5A:FE:D8:F5:EE
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:52:08:e0:9a:ff:20:92:3e:7f:de:63:1c:7e:1b:71:e9:fc:
ea:28:75:34:9e:6f:fd:21:e4:e8:0f:d3:78:7f:17:bd:f4:28:
ed:6d:a5:4b:88:23:b5:7a:4f:8f:6c:67:c3:ad:fa:ab:56:d6:
90:bc:32:93:b1:05:2a:fd:f4:75:6d:4e:f1:f4:5a:3b:60:11:
a6:6f:37:1b:06:cc:0d:58:74:ee:f4:16:6e:c4:50:8b:90:45:
ba:00:94:bc:3b:68:25:2b:6e:d9:41:cf:42:f7:e3:d8:0a:35:
6b:3b:ab:85:74:3d:98:9b:dd:e4:b8:30:2f:6b:ce:73:12:77:
eb:9e:fe:55:f4:61:f1:aa:d5:21:48:8f:2d:69:14:97:19:ab:
f8:0b:3f:71:94:50:fc:12:bf:88:a7:ef:36:fe:59:08:08:e5:
71:67:b1:be:61:16:23:29:37:c2:57:e6:92:f7:e3:74:8e:63:
8a:58:f0:47:82:c3:54:4f:fd:5e:a3:b1:3a:83:da:3b:6e:a4:
da:31:6f:33:db:87:97:b9:be:3d:57:4e:f1:7c:3e:ce:7b:43:
2f:bb:37:9b:33:81:e4:fe:b4:0e:c0:26:41:47:28:8a:f7:2d:
33:8e:aa:9e:33:1b:21:5f:ab:d0:df:71:19:72:67:a3:7a:d0:
b7:1a:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:55 2026 by rpki-client