Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: Uf3Ep5qwvH80JV4Pcfi+J88eruk6/x7VAO551tKkiKA=
Subject key identifier: C3:63:6F:36:CD:E8:15:CE:D5:09:30:34:85:92:4A:A4:93:D5:6D:7F
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 019CACB4DAE02DBBCC50FBFE5652328AE0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 04:00:59 +0000
Manifest this update: Mon 02 Mar 2026 04:00:59 +0000
Manifest next update: Tue 03 Mar 2026 04:00:59 +0000
Files and hashes: 1: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: kqVdZlpRTuRnNXXrE1/zuX3pK+zQZFSxrfeYHpV4dws=)
2: ywg7v4iBU0yIbUtglY4SRtwYiqQ.roa (hash: TUFNnELLTk5SmjwLZeWsU1OrlDE0M2b/yRf/bTeimQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:da:e0:2d:bb:cc:50:fb:fe:56:52:32:8a:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Mar 2 04:00:59 2026 GMT
Not After : Mar 3 04:00:59 2026 GMT
Subject: CN=c3636f36cde815ced509303485924aa493d56d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:9b:97:93:b4:91:24:d2:08:c2:5e:4c:b5:
f0:84:aa:98:63:e2:74:f2:a9:5b:69:93:79:39:5d:
0d:5a:23:f4:23:ed:41:48:28:c1:e4:7d:da:42:80:
fc:16:56:6f:16:34:77:6c:5b:8c:00:13:26:0c:06:
f1:79:07:3b:c6:99:f6:32:5e:d6:af:92:5f:4f:b7:
4e:ff:f9:13:55:dd:44:78:59:1e:68:1b:9b:42:5b:
48:a4:4a:f0:af:cb:e0:dd:86:51:8a:f8:00:72:c3:
65:24:e7:72:6c:5f:4a:01:2b:8a:cd:ce:84:53:c1:
bb:5d:32:a4:96:46:4d:98:e3:9f:98:7b:50:86:4e:
0c:d7:37:49:35:9d:6f:3a:ce:30:9e:96:83:e5:6f:
bf:36:de:18:2f:e8:86:57:09:31:9e:7a:db:cf:48:
e0:46:81:9a:1f:ae:8f:28:6a:f8:5f:82:1b:72:7c:
71:bb:0a:59:5e:56:c4:b3:dd:07:1a:ca:2f:df:d9:
25:33:73:19:37:63:11:71:d9:ad:1e:d4:f7:8a:ce:
f5:33:24:f2:f3:ab:62:0b:4f:7f:e7:5c:fd:13:41:
ad:31:51:4a:91:2a:34:2c:0b:28:1a:fa:03:96:72:
16:70:23:7c:f2:38:e6:a4:a3:11:f9:7a:8b:44:5e:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:6F:36:CD:E8:15:CE:D5:09:30:34:85:92:4A:A4:93:D5:6D:7F
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:cd:fd:65:1f:a0:0b:b2:ca:2b:27:39:5f:7d:5f:05:f2:
fe:32:8d:ea:ad:7f:0c:86:63:31:d1:a7:7e:a6:db:76:95:b6:
97:b1:af:b7:a5:d5:56:f3:c4:f1:b6:a2:5b:68:db:0d:58:3d:
7f:9e:32:cf:05:7d:d7:96:af:cc:21:1d:66:17:7f:01:64:91:
e0:cc:f4:32:6c:f8:cf:03:ef:f2:a3:e9:ed:49:e6:73:54:2b:
dc:49:09:69:93:7c:a1:06:5a:8e:eb:74:68:a4:80:4a:55:9e:
56:ec:4f:0e:03:73:82:b3:4f:5c:2d:d2:d8:4f:f2:da:18:c9:
88:60:ca:c1:e1:ce:86:7e:5b:a8:aa:23:05:d5:8a:5a:22:77:
f1:c1:e0:bb:51:11:60:70:24:6b:de:02:1c:82:51:f8:8e:f2:
af:fa:f0:a0:20:11:d0:95:29:01:ec:14:2b:ef:17:8d:42:5b:
7c:73:90:ba:1e:76:05:f9:cb:c8:19:ac:ed:e8:15:c6:69:cb:
e7:84:62:0e:10:be:31:d4:db:c9:95:6e:0d:dc:1b:30:ba:ed:
f2:07:9d:52:92:4f:df:74:ac:c6:b1:fb:85:50:94:0d:19:09:
60:b2:42:e1:5d:22:a7:d5:13:ec:cc:ae:8e:37:91:66:c8:b1:
15:c1:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:32 2026 by rpki-client