Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: wWMfldN9F97tnNes7qIV3JIo1dGPf9QHECD2JoxKDCE=
Subject key identifier: 7F:3D:BB:31:E3:04:42:02:4B:79:13:3F:0B:7B:2F:43:19:00:05:37
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019CAAC609AC406CC30D33BC33313AFFA129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:31 +0000
Manifest this update: Sun 01 Mar 2026 19:00:31 +0000
Manifest next update: Mon 02 Mar 2026 19:00:31 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: no8IndUrWsBylxQiFlQZFUW6iC+NFcLMURWXYBwWyAw=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:09:ac:40:6c:c3:0d:33:bc:33:31:3a:ff:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Mar 1 19:00:31 2026 GMT
Not After : Mar 2 19:00:31 2026 GMT
Subject: CN=7f3dbb31e30442024b79133f0b7b2f4319000537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:74:0e:a5:bd:78:61:c7:af:be:bb:8f:ca:
4b:fe:5e:4f:f4:48:68:d9:80:28:f4:b8:19:73:e4:
c0:37:2a:a2:8f:56:bf:83:8e:88:4f:ae:e7:61:00:
d1:ab:ed:06:6f:6f:5a:8e:51:3a:ee:9d:1f:7b:f6:
e5:2c:64:fa:0f:4c:08:9d:d5:60:11:07:47:62:b9:
0b:b5:a6:82:e4:53:99:cc:4a:dc:09:bb:08:69:0d:
f0:55:7a:2a:46:8a:ff:c5:f9:30:0f:2b:c2:7d:da:
d7:fe:58:cf:dc:d1:5b:d6:68:d4:b6:bf:6f:04:f0:
3e:5a:6b:41:d0:ba:ea:d6:c9:b1:f5:a9:39:9d:f8:
dd:e8:65:da:80:fe:63:25:b2:80:69:df:27:aa:6c:
0f:7a:ea:5e:95:70:93:10:41:11:2f:c4:10:f3:2a:
11:86:b4:83:b1:95:64:de:df:de:3a:67:cf:cd:ba:
44:31:aa:56:5d:68:92:cf:92:0b:72:97:1b:ac:25:
ab:a2:80:87:e5:93:7e:41:d2:66:2e:e6:ad:95:1e:
06:b4:29:88:55:11:5f:b2:39:d1:88:a3:bc:88:fc:
bb:28:46:8d:0c:44:8d:cf:c6:ff:c3:6b:b2:36:b0:
2c:6a:da:2f:f6:83:77:49:fd:65:62:46:52:b4:fe:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:BB:31:E3:04:42:02:4B:79:13:3F:0B:7B:2F:43:19:00:05:37
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:b9:88:ee:6f:c3:8a:0c:eb:b8:20:b3:04:fd:67:90:b3:
8b:0c:76:73:cb:65:37:3e:d2:c6:24:18:7c:84:67:14:85:86:
88:fe:bb:85:ef:12:82:b9:a6:a3:0b:6c:50:7c:fd:e9:cd:ff:
a1:0e:3c:a4:27:69:ec:00:26:f3:45:45:59:d7:fc:d3:cb:0c:
ca:59:e6:9b:06:38:ab:64:a0:31:fe:a6:34:41:ed:e6:01:e7:
05:ef:9c:cc:13:47:b8:10:cf:45:95:c7:2f:3a:82:d9:84:f6:
29:d2:9f:45:63:f2:d7:86:62:17:5b:6e:62:d3:b5:31:df:5a:
e9:90:68:db:5a:4a:8b:42:0e:75:16:f5:be:ec:bd:6d:e7:9b:
a0:82:fd:9d:95:44:01:09:17:99:16:e2:5d:c4:40:d2:e8:2b:
5c:a7:bf:1e:b9:e9:3e:1b:ef:ab:ab:bd:47:9e:46:15:5d:33:
83:29:b2:50:21:95:af:05:2d:07:dd:20:d7:b1:3e:4a:85:99:
8f:52:ea:f4:5d:34:88:9b:b2:b2:26:fe:da:62:7f:a9:be:9a:
e6:b8:73:25:66:fd:28:5f:0a:73:16:3c:e2:3a:16:1b:48:0e:
02:42:da:63:ba:8e:c5:16:1b:48:ae:77:5e:27:07:9e:32:1a:
b3:3d:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:42 2026 by rpki-client