Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: lydCj9OYO5Fm+mTNTUzdsst31iiMv2LqMTuCU+xJA6s=
Subject key identifier: 97:B6:0A:85:F5:62:CB:DA:12:78:6C:A5:84:73:4A:83:E7:C8:9D:6E
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019D2771EB761AD6A77CA22287F25915C083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 070B
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: L7s0ED57mNbRMv5scEab-MWU-0g.roa (hash: UTR/1aEsEtkTlQxKjpcPzSUv65QlBCtFASF3Ua17FGM=)
2: RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa (hash: YHl21kGfBScrHLWB8nH7LfwSKrFDkFd1MvbGkxb2nBQ=)
3: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: sb8X0umvNdWx8xoSMivMVJeKoOIMCHsVp+bWSLzfVAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:eb:76:1a:d6:a7:7c:a2:22:87:f2:59:15:c0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=97b60a85f562cbda12786ca584734a83e7c89d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:5d:e0:d5:cc:60:57:53:5a:04:0e:2a:17:
c8:3c:9f:0f:25:77:78:1b:8b:ba:37:de:75:a0:a3:
f2:c2:84:98:15:5e:46:19:b0:20:d7:3f:58:01:2e:
51:a4:9b:99:50:a7:0e:32:ed:3d:76:98:3f:2f:2c:
44:a5:f9:2d:c1:b1:24:3d:28:10:27:c3:7b:30:27:
4d:06:93:4f:9b:0b:f4:7a:25:34:86:7b:57:b6:bd:
35:62:03:57:59:db:cf:6b:b9:80:e1:6c:8a:6e:3b:
46:36:42:b5:76:1d:26:cb:e7:48:27:82:1c:bc:f7:
05:ad:f7:24:0f:2c:6d:34:49:1a:22:27:41:1b:07:
1d:bf:dd:5e:56:ee:d4:34:9e:99:ce:4b:3b:d6:53:
65:69:09:e1:39:ff:6d:d9:eb:c8:b9:cc:a5:24:2e:
e9:ea:99:df:97:08:88:7c:5c:6e:3d:08:7a:5c:c2:
5d:12:ee:51:a0:f2:11:73:eb:64:c9:d9:0c:2a:c6:
79:2a:46:d1:d6:90:48:95:6f:02:18:cb:9e:38:ff:
7c:9f:1b:35:9e:9d:2c:8d:b0:d5:91:b6:04:d6:1b:
92:7b:66:af:06:cd:4f:3a:d0:c9:0e:e1:28:72:d3:
50:20:83:3c:52:ac:b1:b1:90:6d:d3:55:e2:30:d7:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:0A:85:F5:62:CB:DA:12:78:6C:A5:84:73:4A:83:E7:C8:9D:6E
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c8:b6:89:6e:f2:9b:a3:c5:7b:25:e7:3f:f8:b8:b8:f3:70:
f8:ac:8d:ec:04:67:28:c3:83:22:81:52:5e:b9:e8:e0:76:2a:
c6:1a:f2:c1:e5:65:fa:1f:7d:eb:e1:ca:45:b6:3d:d0:7d:9a:
a7:a8:ec:07:0e:9a:4c:57:18:88:f3:55:84:76:5f:fa:b8:78:
7d:1e:5a:66:11:d7:e5:94:6e:aa:32:37:65:51:0d:cd:1c:82:
ed:55:0f:8a:98:fa:91:a5:3d:c2:07:ce:54:e8:10:b0:bc:1d:
54:df:de:90:71:7c:03:45:49:af:bf:0f:6e:0c:7e:6c:07:ab:
2b:b3:bb:b3:37:30:b9:27:61:ac:4a:77:03:15:16:82:03:5d:
f0:20:3f:20:a9:f6:69:34:ff:e0:3d:f5:4b:58:45:92:24:7a:
dd:98:b7:41:80:06:00:6d:2a:84:3f:2a:02:98:6f:07:fe:1b:
c1:3d:4c:45:af:e0:8c:4e:2d:15:f8:16:49:03:e7:5e:51:1b:
37:b7:7b:85:f8:c8:3a:3b:a9:b7:b0:de:1b:20:ae:ca:88:c7:
df:50:27:74:dc:88:38:02:a4:4f:95:1a:d1:18:54:3b:ff:43:
5f:3d:e9:02:46:7b:cb:ad:25:1f:fe:d9:b0:3a:bc:e0:fc:45:
62:fe:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:33 2026 by rpki-client