Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File: aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier: 60M5QTHMUSHBFXSdpxdyOOxO28KO6Qk5rh0Gb7LKQkg=
Subject key identifier: D6:0C:E7:9D:0A:6D:56:04:55:9C:14:87:75:8D:91:05:22:BF:35:83
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 019D2704D088063D8C3A564E4AF5BEA7BCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number: 13B9
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=)
2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=)
3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=)
4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=)
5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: VmgsZn/pZNAGEwhyKrkOVg/6RPsnhW1LajLDT0C2FWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d0:88:06:3d:8c:3a:56:4e:4a:f5:be:a7:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=d60ce79d0a6d5604559c1487758d910522bf3583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:4d:a4:88:03:42:c1:ed:44:6d:22:dc:04:
d8:a3:e8:ca:67:72:e2:be:8c:57:e5:3b:ca:5b:67:
b3:8c:dc:3b:60:c2:3c:cd:da:ff:bc:91:43:b0:b8:
ef:cd:61:86:4e:df:87:5f:8b:93:ea:19:53:3e:a6:
b2:fb:2f:47:94:b3:d7:af:bb:88:cd:cd:de:51:99:
f4:90:b6:e7:b2:a5:35:2a:d8:0f:0e:a2:35:39:0e:
82:a7:75:8e:78:93:18:96:2b:14:b7:18:d1:03:cf:
7c:33:bf:e3:27:be:07:ae:9c:66:7e:ae:c9:1d:eb:
cc:e1:17:32:bc:06:93:67:33:9a:cb:43:84:16:a6:
26:ba:05:57:17:af:1e:43:48:52:10:8c:90:8b:39:
ec:41:a9:80:dc:ba:79:1e:8d:5d:cf:f2:2b:f0:5e:
48:5d:af:27:5e:b7:c6:19:4c:59:46:c3:ff:fb:44:
76:b0:51:d9:28:2e:54:69:ff:e7:4b:bf:ba:b1:9b:
1e:c5:60:6d:0b:5b:18:35:26:90:03:ca:64:19:cd:
53:eb:8c:6c:ac:8c:82:f5:ed:f0:4c:1c:d9:97:60:
32:a1:92:94:03:24:21:b8:da:2e:0c:54:55:66:b7:
f2:08:ca:de:62:1f:f4:49:b8:a0:a6:3f:4f:35:77:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0C:E7:9D:0A:6D:56:04:55:9C:14:87:75:8D:91:05:22:BF:35:83
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ce:de:28:d7:a0:23:a4:01:6a:b1:1f:8c:04:5a:10:bd:c6:
43:01:d7:5e:e5:65:00:18:d2:ab:b4:fd:51:09:0c:9d:38:b3:
a2:53:01:e9:bb:55:c9:06:0a:00:5b:c0:5a:2c:2f:39:1a:3f:
10:b0:0e:50:34:3e:f5:6a:be:e1:d8:9e:98:21:f7:2c:e1:f3:
48:01:63:9f:ce:8f:97:09:a2:64:75:49:65:e0:f0:5a:98:e0:
51:30:05:28:e0:57:84:40:71:d9:58:b9:12:29:2e:66:bf:58:
2b:5e:40:28:85:5e:ea:89:f0:a1:9b:88:3c:69:38:61:ec:1e:
86:a2:93:a0:a7:22:ce:21:cb:ea:a8:39:84:78:19:43:8e:9a:
b6:39:1b:78:7e:a6:ab:36:18:d0:91:37:11:71:a5:6e:98:74:
fb:bb:be:9b:f2:6e:8d:20:69:60:51:3b:31:b3:07:f1:74:4d:
fc:3f:87:8e:21:e7:75:27:95:68:7d:3e:55:20:d9:d3:ae:93:
4d:7a:e2:35:12:a4:e6:15:6b:ee:6f:1e:52:aa:48:b3:70:e1:
0a:80:b1:8d:b3:98:1d:b9:31:ce:e9:0a:be:d6:8e:70:03:a9:
95:28:0e:5b:7f:56:42:a4:6d:43:7e:90:0a:2d:a8:ea:12:d6:
7c:5e:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:00 2026 by rpki-client