Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: +xnVQ3KR1bzrpvbYPLz0NO5f0ZrjhanPj5rFLWluNW0=
Subject key identifier: DF:B8:92:9C:6E:77:73:6B:30:7D:1B:48:57:BB:A8:37:9A:0F:8F:65
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019D254CC167455C95023BB206AE9C57184B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 14:01:20 +0000
Manifest this update: Wed 25 Mar 2026 14:01:20 +0000
Manifest next update: Thu 26 Mar 2026 14:01:20 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: aGrbsC5V7TYQrGuVPoYVZSDjyIzpmug+W6OSlaVykWk=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:c1:67:45:5c:95:02:3b:b2:06:ae:9c:57:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Mar 25 14:01:20 2026 GMT
Not After : Mar 26 14:01:20 2026 GMT
Subject: CN=dfb8929c6e77736b307d1b4857bba8379a0f8f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:00:49:44:00:2f:e0:4f:e7:b5:11:9f:86:
f5:50:f7:24:50:c3:09:dc:2e:62:89:02:b4:bb:a5:
52:94:c8:c8:2b:d6:0f:5f:b5:73:f3:92:31:75:de:
8c:07:79:9b:38:fb:d1:65:51:fa:06:b0:ff:c8:20:
eb:5c:a6:73:b7:98:99:1f:02:c4:27:0a:b3:c0:9e:
59:9a:38:cc:d0:77:8b:bc:7e:82:af:ca:9c:fd:77:
24:16:c9:10:d4:be:60:d2:83:6b:9e:89:4e:77:19:
c7:2e:a1:09:2a:07:45:96:db:13:c6:51:7a:03:f5:
bd:69:46:73:13:72:34:76:43:eb:ae:a8:df:68:11:
aa:4c:f0:47:27:76:9b:33:b2:4c:a6:9b:96:1a:6e:
24:2e:31:fb:38:e4:08:71:30:d2:0d:45:31:c8:b6:
c0:2a:df:bb:a0:59:90:a1:9e:44:aa:32:3b:68:78:
1a:76:9e:f7:71:db:66:a1:fe:4a:50:1b:9a:c1:29:
59:6a:b0:d7:75:16:b7:da:6a:d6:38:61:9c:f2:46:
52:8c:a2:4e:60:47:95:b6:1e:d4:b6:96:9d:71:2a:
8b:4c:4d:2a:c4:76:52:56:07:29:d6:22:fe:3d:49:
53:a9:ec:0d:0b:6e:2b:f0:e4:31:68:c1:d9:ab:9b:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B8:92:9C:6E:77:73:6B:30:7D:1B:48:57:BB:A8:37:9A:0F:8F:65
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:dc:cc:b1:61:40:c3:4e:84:dc:3f:48:71:a4:7f:d7:26:
6e:7b:86:98:93:8a:77:95:62:e1:75:2a:a6:43:77:7d:11:12:
93:b6:bf:b8:66:79:e8:93:e3:a8:0a:25:89:77:7f:f4:e1:c1:
9e:50:27:a1:0b:0e:15:53:67:26:3b:f6:0d:28:fb:52:17:ca:
f8:1a:55:8a:c3:78:81:6d:20:ba:0e:58:bd:d4:91:e6:e8:22:
cb:ac:48:02:34:43:fb:6d:97:6e:73:c3:84:6e:35:29:73:db:
1a:6e:1f:64:31:92:1b:f4:98:39:ad:ea:a8:03:ea:9f:a9:c9:
ce:56:5c:c4:eb:3b:a7:a7:04:c9:11:51:b9:49:71:9a:92:51:
f1:c6:bf:d5:27:3f:1e:8f:dd:30:0a:d1:15:00:97:fb:48:d2:
33:53:41:93:fd:4e:b0:3b:ed:59:84:ff:97:93:75:91:41:fd:
6d:87:f9:1c:a1:5d:6c:2d:89:f0:b8:b0:32:5d:fb:13:54:e3:
5d:74:0b:13:6d:75:92:11:bb:5c:3a:e1:45:6a:f2:25:4f:7d:
86:7b:1a:df:d1:a8:ce:ac:28:a5:a6:46:31:49:bf:10:4b:d2:
ae:4f:01:52:bd:eb:d6:17:c4:8f:94:5c:a7:0e:21:ca:a9:2f:
d6:a4:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:33 2026 by rpki-client