Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: kiuawVV96yVf5jHivEuMMNVteKvEj/zAcObxzyhIQGI=
Subject key identifier: C0:1F:9C:88:D9:0E:4D:EE:83:3E:8A:C6:92:83:96:17:C4:AC:65:46
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019CA7FCF02BCC85656C89400F671283AD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 13F3
Signing time: Sun 01 Mar 2026 06:01:37 +0000
Manifest this update: Sun 01 Mar 2026 06:01:37 +0000
Manifest next update: Mon 02 Mar 2026 06:01:37 +0000
Files and hashes: 1: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (hash: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=)
2: D-r3D7TjflJW1amM5h7I8MR0oUk.asa (hash: z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=)
3: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: 6tpVv2WMyS7R94XuiqGmp/XQnrX2CO1F4llIJsbqHxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:f0:2b:cc:85:65:6c:89:40:0f:67:12:83:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Mar 1 06:01:37 2026 GMT
Not After : Mar 2 06:01:37 2026 GMT
Subject: CN=c01f9c88d90e4dee833e8ac692839617c4ac6546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:3c:ec:24:ba:46:9e:f8:22:08:90:b3:3f:
10:c5:29:6c:14:99:f1:68:b3:be:66:f5:08:59:20:
4c:9e:bc:ac:20:6d:fb:cc:2c:56:3a:02:75:ad:4f:
f2:e0:76:6b:4b:19:52:4a:a8:cc:c2:c3:85:32:14:
f6:b5:16:24:13:70:07:c3:60:7d:f0:22:6c:53:7d:
78:8f:b6:0b:7c:2c:62:13:fe:5d:e5:61:ed:9b:8c:
3d:69:86:bb:30:b6:fd:ec:8a:16:ec:55:58:21:81:
25:5f:5f:29:1f:1d:61:72:8a:26:39:fc:08:95:b7:
53:59:00:26:19:15:7d:c9:3e:f5:2b:1a:95:d1:88:
07:af:1a:19:c6:85:41:54:7c:c1:80:c4:73:61:87:
38:ee:c2:46:af:69:3c:c4:f6:81:55:bd:06:cb:eb:
aa:c3:d2:17:b1:b5:8d:fe:93:5d:b6:40:6d:ee:5c:
38:ab:0b:b8:31:00:99:73:37:94:68:1d:f6:57:c9:
08:18:d7:ec:4c:9c:58:23:a5:ab:8c:46:ec:12:3a:
7a:fb:a6:52:9a:19:c1:3e:b4:a9:75:cc:ae:a8:4e:
85:3b:3b:22:dc:82:74:4a:63:8d:c6:17:4b:e4:58:
33:f9:26:60:25:ee:39:52:c7:b1:30:96:b4:e4:24:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:9C:88:D9:0E:4D:EE:83:3E:8A:C6:92:83:96:17:C4:AC:65:46
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:14:ba:d3:fa:af:23:20:10:7d:79:8e:59:cd:03:78:4c:
9a:4a:d4:b6:60:69:e2:c5:4b:46:9b:69:31:e9:4c:0d:11:12:
e6:09:2d:24:6e:dc:6d:ca:0d:e6:61:7e:55:b1:ca:3e:23:19:
bd:b6:ae:e6:fd:38:6a:d5:f3:11:39:be:bd:37:a0:fe:34:3d:
eb:81:a6:88:3c:f8:c6:d0:35:3c:7b:8e:a3:59:62:1a:57:0b:
49:b3:c8:87:a6:d2:ba:ed:24:79:29:48:33:38:67:3a:89:52:
f9:ac:74:40:7a:a5:d4:98:42:74:1e:54:51:6d:8e:30:fa:b8:
9e:47:c5:50:f0:d0:e6:50:66:6c:69:9b:14:ba:d3:45:3e:ca:
a2:d3:33:aa:8f:85:9a:4e:04:81:1e:fe:60:19:1d:79:82:9e:
c9:4f:0c:ac:e5:f6:54:c3:55:c5:e0:0c:2d:20:15:9b:a2:18:
48:2b:bf:f0:7a:d0:01:ff:6f:6a:3f:30:01:50:4e:b4:57:20:
29:54:92:3b:b1:11:01:80:ba:ea:f5:95:0b:93:62:74:74:11:
a5:16:a6:f8:05:3b:b7:21:54:57:95:e0:0d:d4:75:08:d4:7c:
db:89:73:8f:1d:24:8e:ff:84:25:a3:59:0a:f2:8a:31:46:b4:
94:a7:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:07 2026 by rpki-client