Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: BdUvIeTrezqKWZu4VkDY3jcc//1OzqJ1hTRxhAGc3/k=
Subject key identifier: D4:0A:7F:CA:E5:7A:A1:D8:FD:A2:10:0B:E1:34:FC:E6:E6:4E:B3:B8
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 019D28847734184DD773F6B82F17CBAB6C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 03AA
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: aVlNMyAJbX2i3HApAjfST7KHTifEls/NZCjd/g8mIzg=)
2: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:77:34:18:4d:d7:73:f6:b8:2f:17:cb:ab:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=d40a7fcae57aa1d8fda2100be134fce6e64eb3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:e5:f1:df:48:21:83:31:80:0e:58:89:18:
bc:87:b8:c4:6e:d1:68:b8:4c:18:93:8c:49:ba:3f:
04:1e:d5:34:41:3e:3e:10:e0:83:de:a0:d6:91:69:
86:c5:0c:7b:cb:75:e9:78:bb:34:2c:66:9c:82:2a:
3c:50:1e:55:ca:f7:b8:fe:f9:59:3c:76:ef:01:60:
11:af:53:cf:c3:78:42:96:9f:4f:46:ce:73:4b:7f:
91:3b:3b:49:af:18:16:ed:97:15:14:8c:8c:c5:01:
0a:da:23:b4:be:55:b7:89:cf:76:19:b8:fe:4a:bf:
10:b2:e3:7e:1b:f4:4c:eb:9d:d2:7f:22:58:f8:78:
b5:15:61:20:40:84:5b:34:26:3d:0f:d1:2b:c6:6a:
8e:7f:74:a5:07:a3:14:f0:21:e1:2c:bc:e9:a1:83:
9e:46:c0:2b:8d:10:c6:5f:b5:4b:b6:ae:71:ea:93:
a9:4f:22:44:e9:eb:3c:79:23:61:ef:24:43:3a:83:
39:6c:28:6c:89:59:aa:e4:e7:4d:77:03:46:3f:2d:
4e:2b:51:df:6e:58:fd:aa:9c:01:dd:c4:5b:c9:1c:
2a:35:dc:04:cc:6b:30:38:b7:5c:b9:82:36:08:d6:
4c:2f:aa:e0:0c:9a:d8:b8:37:f3:cb:be:1e:6d:3e:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:7F:CA:E5:7A:A1:D8:FD:A2:10:0B:E1:34:FC:E6:E6:4E:B3:B8
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:f2:17:7b:83:01:eb:17:bb:72:96:b8:ae:bc:8c:cc:e2:
14:98:2b:4d:cd:73:68:28:5e:5c:71:9f:a7:6b:90:3b:ac:d5:
81:3a:7f:2d:d3:9e:e6:86:f4:59:cb:63:d9:f7:df:ce:c3:a1:
9e:87:5c:b6:27:cb:63:f1:9d:48:de:1f:c2:fa:7f:60:a6:f3:
b1:07:28:ff:85:fb:c9:fd:74:46:06:a6:52:fb:ae:c5:e8:dd:
b9:db:95:57:c8:f1:e1:9d:70:17:67:af:bb:9b:6e:8e:ab:1f:
33:66:7e:90:8a:d9:2e:8d:3c:d8:c3:ac:12:b6:0c:cc:f3:c5:
d1:28:56:e0:3e:3b:e5:26:d7:7b:6f:74:5a:1c:af:2f:86:78:
29:f0:d5:39:f9:76:08:e3:10:01:08:23:10:be:79:96:71:fe:
15:56:7d:4e:24:bd:7d:30:59:f3:1c:4b:fd:28:39:5c:ae:01:
d0:70:0f:3a:12:6c:20:11:33:cc:bd:9d:72:0b:7f:ac:dd:1b:
9a:6e:4e:d3:25:27:85:04:97:1f:5a:00:7e:61:c3:28:3c:ce:
22:85:85:ca:b7:1a:46:ea:b4:da:08:82:2d:80:b0:01:4d:be:
c4:a6:53:ce:c3:ec:8f:b3:bd:e1:f1:40:5f:c9:ad:2c:f6:c5:
64:80:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:54 2026 by rpki-client