Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: xhYHarEonfRRqXM9KcuOgzWxc/+5XM3ELJrtWfwiVjc=
Subject key identifier: 7A:3C:8F:05:BC:DE:C7:B1:F3:90:DC:D5:3A:EA:43:14:83:DE:FD:27
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019D288422D21E0B78EC934A294C962D59F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0E59
Signing time: Thu 26 Mar 2026 05:00:41 +0000
Manifest this update: Thu 26 Mar 2026 05:00:41 +0000
Manifest next update: Fri 27 Mar 2026 05:00:41 +0000
Files and hashes: 1: PPitSZuRvTIuYET2fTr2uybz-Tg.roa (hash: 3kuiLKHDLxUf6+yboDVRpg9YOVajrkYmPy+E5r4q0G0=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: HRkRJTa7e+sefybDLw/5YSzL301a+nwgol0ZmEcT1DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:22:d2:1e:0b:78:ec:93:4a:29:4c:96:2d:59:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Mar 26 05:00:41 2026 GMT
Not After : Mar 27 05:00:41 2026 GMT
Subject: CN=7a3c8f05bcdec7b1f390dcd53aea431483defd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:16:f1:69:5f:20:93:1f:9a:ee:ed:92:4b:
01:9f:ff:7f:df:a2:f6:f5:32:ad:39:95:a0:d2:d0:
33:6f:79:cb:5c:3a:d1:03:36:60:91:a9:9e:9a:ee:
8b:3c:6d:3d:79:50:2a:c6:ea:fb:e4:78:1d:d8:de:
15:97:b1:28:75:95:21:67:bb:04:36:ed:a0:a3:fb:
05:44:bc:18:59:82:73:42:9a:f2:c4:ea:18:e5:3d:
81:f7:98:bd:52:dc:7d:ee:ff:db:c1:23:fa:0f:62:
2f:9f:f9:57:3a:47:91:5a:97:30:5c:25:1e:35:ba:
64:e5:ab:fd:97:5c:66:ae:86:ff:52:05:89:18:96:
e8:b0:85:34:cd:bc:9d:34:50:ac:b9:59:7a:d5:1b:
23:79:ea:ea:be:43:65:85:51:7b:56:1e:67:18:a5:
04:40:91:64:b5:79:67:cb:58:73:2f:ee:57:b5:bc:
f3:4f:a5:2b:2a:c6:45:b5:07:1c:db:6a:d7:87:b6:
1a:84:55:da:49:dd:7c:11:fa:d2:85:8c:91:ad:3b:
c3:04:e5:56:46:e5:59:bd:6d:ba:f8:10:d1:f9:af:
4b:e0:ac:f7:e7:fa:50:dc:d1:85:19:5b:86:47:ee:
61:b7:cd:3b:4e:67:2b:f9:05:85:9b:90:d9:81:7c:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:8F:05:BC:DE:C7:B1:F3:90:DC:D5:3A:EA:43:14:83:DE:FD:27
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:71:8d:7f:18:36:77:52:b2:5f:84:8d:71:40:8a:a9:5b:dc:
95:96:8b:6a:53:42:99:21:78:5d:cc:bb:9d:3b:1d:7d:5b:44:
33:47:0e:a1:89:00:f0:04:a3:0e:2b:54:81:0e:61:36:d4:94:
a6:f8:d9:ae:ac:44:7b:d2:1b:8c:7b:66:04:18:ee:f7:56:38:
b5:d4:ec:4c:72:38:bf:ff:93:29:ca:b8:97:85:78:64:da:94:
da:e6:2e:ec:a0:44:8d:3a:e7:36:0e:e7:1d:cb:1e:72:8c:8d:
1c:c3:6c:5e:36:91:5e:da:35:bd:b8:23:94:6c:3c:12:ab:ef:
f3:9e:0c:eb:85:d9:eb:04:7c:d7:2d:66:f9:7f:4f:a4:8e:e7:
02:28:39:aa:93:18:c8:5e:cd:07:c7:46:b2:21:74:01:2d:c6:
d4:a2:2f:c5:9f:70:e0:d4:3b:fa:f2:56:f2:0f:18:0f:f5:8f:
52:5f:15:f2:86:0b:47:51:d0:8f:46:8d:a3:a3:6b:ce:09:cf:
a8:95:0e:02:db:53:8a:41:24:6b:1b:8a:5d:33:c4:8d:67:ad:
e4:1b:76:e1:d7:38:c9:34:ae:14:8d:9d:e1:ee:35:3f:7b:e8:
30:18:05:0a:72:b7:f0:11:97:68:1d:21:b7:ad:9d:dc:e0:b4:
44:a3:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:26 2026 by rpki-client