Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: Rzz0qPS0ksWQPhmPN7V/PMPTMjcAHBW/GI+Bz5IJac4=
Subject key identifier: 9A:F7:F5:A0:E0:BD:87:46:C6:CE:22:85:4C:96:8C:A0:8A:CC:4E:88
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 019D284DA178959C1DEB9AB0B1932CFCD423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 1086
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: mSJ8iHCWoz5BPEancR7v/15Z/ZCPxLZBp/1rs5JhHc0=)
2: uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa (hash: QxKS8bSN/E8e24rYpMJlqnlvbfWN9J/AEQcwrR8l3P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a1:78:95:9c:1d:eb:9a:b0:b1:93:2c:fc:d4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=9af7f5a0e0bd8746c6ce22854c968ca08acc4e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:d3:11:38:74:48:e4:18:90:5a:ee:67:f2:
12:f1:74:7b:76:44:7c:18:aa:2e:42:36:73:50:4d:
11:9a:80:83:39:b3:59:cd:9d:de:52:16:7b:56:81:
d3:41:8f:6e:a7:c0:7b:93:0b:b4:30:39:30:85:91:
3f:e4:b9:ef:d9:71:db:59:30:1d:c1:13:8b:3c:32:
59:12:9c:00:9a:fa:2f:be:a8:e7:bc:79:8b:3a:9e:
b9:db:a0:c0:52:00:16:89:ec:05:95:64:c7:b8:ae:
8e:28:15:73:a2:5b:79:bd:53:27:6a:e8:77:67:0b:
00:1b:17:34:e8:54:15:dd:7c:55:4d:7c:d7:24:e4:
7d:6c:98:70:15:77:cf:4b:7a:69:fd:36:5c:bc:0c:
01:85:33:eb:a2:77:5c:5e:14:74:8e:b7:77:73:a3:
ed:2a:fd:e2:e7:d5:bb:76:c7:b4:8e:9d:a6:a8:2a:
0e:25:df:98:16:43:66:db:15:e2:20:39:90:55:bd:
0b:b6:3d:ab:51:6a:a6:a2:75:a7:b0:22:c6:ec:dd:
30:4b:f5:af:ea:6b:7c:e5:59:8d:7a:6e:e4:10:26:
28:02:6a:a4:d7:b5:01:21:39:84:d5:f5:c0:04:9a:
ac:b8:0e:69:f4:9a:3c:62:32:94:36:f9:8d:64:ca:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:F5:A0:E0:BD:87:46:C6:CE:22:85:4C:96:8C:A0:8A:CC:4E:88
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e6:2d:58:85:05:99:39:10:80:2a:9c:52:58:7c:49:80:57:
20:62:f6:be:14:51:99:49:45:54:7a:f8:06:aa:87:09:78:17:
bf:5d:b9:21:2d:ac:03:e6:7f:48:79:53:d1:74:c5:ce:29:47:
19:b4:94:d6:94:ce:a1:8d:0f:d6:4b:7a:c0:d2:fc:31:55:c1:
6f:d0:7e:6a:29:f6:a5:db:6f:34:dd:1c:d6:3f:1d:e4:32:7b:
aa:2b:c5:19:1d:39:c9:bf:c2:51:0d:48:b3:98:33:dd:9f:f9:
cc:55:04:74:82:1f:58:34:4e:69:e1:f3:66:ad:a8:00:ab:da:
2e:09:59:7d:2e:ac:2d:46:1a:73:a6:8c:14:a3:72:32:29:2d:
46:2f:ab:7c:c5:4c:c6:58:57:5c:82:90:e2:31:1b:b3:2d:66:
81:61:b5:53:d5:13:ae:34:83:61:1b:60:26:42:dc:54:ec:bd:
b0:06:6d:3e:56:f4:8d:80:81:62:46:41:33:a1:bf:cc:6a:ed:
01:db:ae:3e:95:20:15:e5:af:9e:b1:31:aa:12:e3:95:e0:5b:
26:b5:d2:4c:5b:c3:17:5b:0a:b7:df:fc:db:56:e4:85:69:a4:
6e:29:6c:af:d1:d7:97:70:74:ca:36:82:a7:90:74:99:7f:a3:
24:88:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:17 2026 by rpki-client