Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: yZgZ1R4+FDW/oz4a/iGetG1DgZqYYP/oG6jQiNgod9Y=
Subject key identifier: C7:72:AB:F2:3C:D0:7F:75:AA:DF:9C:8E:8A:F0:BC:0C:3F:21:A7:69
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 019D26CD8390D5990B0D773D6A12C423FC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 14AA
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: GyiGa0UAj6SGS7BLg8/sgQZmkeUzz+c/2QqrJEy1MpE=)
5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:83:90:d5:99:0b:0d:77:3d:6a:12:c4:23:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=c772abf23cd07f75aadf9c8e8af0bc0c3f21a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:be:df:d2:2f:41:d8:62:85:44:62:0c:79:
35:19:22:d8:a4:22:cf:23:36:fe:b1:13:8e:ce:1a:
f2:a0:2a:d7:5d:d0:a6:37:2c:42:a6:b7:63:dc:1a:
8f:9a:b0:1a:fe:c3:95:8b:b9:db:ed:fd:51:0a:1c:
a1:72:9a:3e:fc:a1:b8:98:80:00:7e:e6:b7:28:32:
ae:c2:99:e1:38:73:d7:3f:db:56:81:fc:3c:df:fa:
60:ba:49:16:26:d5:04:b2:e5:e8:80:e5:2b:3f:cb:
39:66:ab:61:7b:0b:0b:dc:46:b9:f1:97:08:a2:2c:
16:e5:0c:61:f0:43:96:95:d5:bd:da:a4:08:df:4c:
00:ab:e4:16:fd:bb:a9:96:2f:5d:43:4f:78:d1:fc:
67:5c:74:21:82:da:a7:79:d7:45:1a:12:62:db:c8:
59:b9:0f:56:21:cf:98:f8:ca:55:e7:c9:e2:a1:0c:
2c:e8:73:5c:89:9c:2d:9b:75:79:ba:71:07:18:ef:
cf:bd:67:8e:c0:7e:d2:35:f9:10:7d:2f:f8:69:2d:
67:bb:e4:7c:07:f2:86:2b:97:9d:11:97:9e:c1:40:
02:50:57:9a:e4:cd:56:74:29:eb:d3:3d:b3:e4:0f:
1a:bc:de:22:c1:78:ea:ca:a6:bb:db:3a:fe:dd:74:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:AB:F2:3C:D0:7F:75:AA:DF:9C:8E:8A:F0:BC:0C:3F:21:A7:69
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:5f:f8:c8:e9:a0:24:b9:a4:c6:77:11:2b:70:69:51:79:
81:95:85:82:2b:67:b8:24:12:55:a4:f3:23:b6:a5:5c:37:d7:
ed:d0:b1:7e:ee:a5:68:c6:c4:42:5a:bd:03:c0:0b:a0:69:c1:
06:63:d7:a6:4c:e9:2d:1f:d2:b1:21:17:99:ea:5c:ef:9b:c5:
31:33:a6:56:78:04:bc:77:5d:11:a1:f3:ca:b3:24:1d:37:04:
f0:69:23:fa:0d:7d:5e:06:f7:24:a5:38:99:35:ed:46:30:df:
dd:0f:4d:74:2c:7f:c8:b8:60:4e:72:e1:f4:42:c9:7a:c1:25:
b8:d2:74:aa:d4:7c:8e:d0:1b:9c:cf:3a:53:d4:1f:a2:00:a7:
06:6f:56:8f:aa:15:c5:02:00:85:a6:25:28:c7:a0:09:81:49:
c1:f6:91:bc:e0:b6:9a:0a:f9:41:fb:2a:20:ab:9a:d3:a1:63:
1a:51:52:62:ba:61:10:27:48:85:ff:6c:52:44:34:69:c1:14:
23:72:6a:69:71:c6:86:59:b3:60:e3:ba:3a:a6:b9:a6:24:e7:
1c:01:d6:17:99:17:bf:43:c6:9b:71:38:af:9a:6c:92:24:77:
51:18:02:28:7c:a7:09:ff:35:57:2e:85:de:64:80:ce:a3:96:
31:8e:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:40 2026 by rpki-client