Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: y/c+P5w2cGtDJDWqXUr4hQvvY9bZKQG7gbVRE7PN7I0=
Subject key identifier: A5:5A:0C:52:65:32:0C:B2:A3:A3:2B:A3:61:DB:37:0B:1C:AB:D2:B6
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 019D2627DFA3D82E472826523C490AFADCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 06CC
Signing time: Wed 25 Mar 2026 18:00:40 +0000
Manifest this update: Wed 25 Mar 2026 18:00:40 +0000
Manifest next update: Thu 26 Mar 2026 18:00:40 +0000
Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: peqITUYQsPic4zeddN0SirC6FlTrXcUhXr8uON01LGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:df:a3:d8:2e:47:28:26:52:3c:49:0a:fa:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Mar 25 18:00:40 2026 GMT
Not After : Mar 26 18:00:40 2026 GMT
Subject: CN=a55a0c5265320cb2a3a32ba361db370b1cabd2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:b2:9c:f0:08:13:b2:c4:52:46:26:3b:ea:
a2:00:18:24:39:7d:e7:50:c1:1a:27:55:e7:50:a3:
cb:77:23:a9:0c:fb:b3:f6:37:d8:d4:df:b3:d3:7f:
23:bc:ad:7f:ff:6f:f3:f2:3d:00:d8:3c:a0:1f:08:
85:a9:c4:57:48:77:b5:12:e3:b1:ff:bd:be:60:89:
7b:4e:c9:c6:57:ea:7a:f3:c7:dd:bf:75:32:72:24:
01:2d:c8:51:20:14:05:f8:2d:be:71:57:66:d9:38:
18:b9:26:f3:39:45:ba:8c:f7:8f:9a:f9:54:0e:73:
c1:33:ce:a7:99:19:08:c5:31:27:5d:75:49:ba:b5:
b1:74:47:d6:48:bf:3c:08:31:15:cb:3d:fa:99:1c:
e1:3e:4b:1a:6d:4e:d7:51:51:1c:08:16:fd:b5:20:
b4:e1:56:b9:8b:90:07:56:de:e0:7e:3a:b8:72:0f:
7e:16:d3:68:1c:3f:08:8a:2d:82:c0:d8:48:3b:99:
5d:24:c2:04:6d:43:73:4c:85:4b:26:5d:a1:e6:78:
64:f1:ff:9f:69:97:82:82:dc:00:e9:d8:8f:37:a5:
30:d2:67:6b:6b:94:bf:34:ca:45:ae:e0:44:94:bf:
c6:ac:98:da:68:6c:3a:a7:b5:c2:32:67:07:0f:86:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:0C:52:65:32:0C:B2:A3:A3:2B:A3:61:DB:37:0B:1C:AB:D2:B6
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:ca:69:b3:04:f0:43:5c:2c:9d:c0:7a:3b:12:b1:8b:91:
ee:d1:fa:96:a4:76:fe:47:03:1a:7d:55:6a:86:de:1f:89:f3:
0e:b8:0a:76:ef:17:00:90:75:ed:93:9e:61:91:58:54:13:5a:
84:e2:c1:4f:5b:f8:b0:9f:98:8d:07:e8:bb:4f:a3:1b:ab:4a:
ea:5a:b4:4d:af:e6:98:4c:c2:4d:76:22:80:f4:00:ab:48:41:
6e:b9:18:38:03:d4:98:61:12:85:98:a7:09:b5:5f:e6:ea:7b:
a4:70:58:c3:c4:f9:ea:cb:cf:50:e7:f9:05:8d:43:84:f3:37:
28:6d:4e:ae:97:df:26:1b:d1:6f:a3:cc:73:bb:90:1e:0a:ba:
0f:0d:fb:ee:6c:c3:b3:d3:d4:b3:c4:56:bb:f9:30:be:76:17:
5c:4f:f9:7a:96:2c:cd:ca:5a:02:6b:70:5d:55:3a:6f:88:7f:
b0:e3:f2:db:25:48:8c:86:50:ab:2c:9f:3d:57:f4:1a:71:b8:
42:7a:75:ac:a1:e3:37:dc:c7:04:94:b0:d1:5a:cf:59:59:5e:
0e:6c:22:d6:d9:af:88:6c:f7:4e:48:e2:a7:75:ff:fa:db:d3:
36:be:de:8b:d5:b5:8a:d5:1f:3b:ac:e2:88:4b:a0:90:44:d2:
20:1e:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:40 2026 by rpki-client