Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: hs+D/8JD8Q5voMLDhPFJed5+txsZjVJKSrTiF7eVXIM=
Subject key identifier: 42:10:23:FF:03:44:BD:3B:57:2A:AC:8B:4A:16:FD:43:3A:94:50:B2
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 019D29976425D2451068CD840CB1EFAB2E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 06D3
Signing time: Thu 26 Mar 2026 10:01:20 +0000
Manifest this update: Thu 26 Mar 2026 10:01:20 +0000
Manifest next update: Fri 27 Mar 2026 10:01:20 +0000
Files and hashes: 1: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (hash: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY=)
2: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: Kmini8yxa0G05KCMzfUC53pdJd3fxiYeM1rOZWwlpCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:64:25:d2:45:10:68:cd:84:0c:b1:ef:ab:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Mar 26 10:01:20 2026 GMT
Not After : Mar 27 10:01:20 2026 GMT
Subject: CN=421023ff0344bd3b572aac8b4a16fd433a9450b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:bd:b2:c4:17:b1:7a:22:45:9d:6c:88:45:
e6:ff:35:0c:e6:4d:e0:21:9d:93:bf:0f:f6:45:5f:
f3:b4:68:43:23:58:31:98:53:59:4b:01:93:15:7f:
88:ae:8a:b5:5f:b2:0c:33:03:43:ba:0d:d9:bd:b2:
34:14:7f:f8:ca:2c:09:4b:8f:84:f6:97:7f:10:0b:
ee:97:0a:fb:24:41:b0:71:7a:04:51:4d:1c:38:de:
d0:48:63:3c:a5:0c:53:58:c1:82:e8:c5:59:28:70:
c7:80:ef:f6:9e:b6:e4:ae:b9:66:7d:c5:db:13:d6:
fe:db:6c:45:08:52:f6:0c:73:47:27:57:5c:dd:eb:
29:9d:7a:89:b5:58:05:9a:3f:b4:37:e6:73:3e:b9:
29:bc:0b:f0:2d:e9:76:87:d5:4a:19:9d:91:fd:3a:
46:8b:79:0c:61:f8:51:d2:84:4b:77:f2:81:91:f6:
09:9e:83:c4:81:c2:1c:0c:6f:cd:0f:1a:e4:94:f5:
14:8e:92:c0:3e:e5:b3:a0:d9:ac:05:c0:74:dd:d3:
66:7e:2f:80:34:14:f6:f4:58:13:0e:e0:49:9c:2d:
2c:07:24:f8:fc:8d:2b:53:a6:fc:e1:1a:0f:bc:b8:
fd:ec:55:31:d0:fb:4b:06:d0:5b:95:98:00:08:79:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:23:FF:03:44:BD:3B:57:2A:AC:8B:4A:16:FD:43:3A:94:50:B2
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:da:37:67:41:34:cb:d7:e9:35:20:a8:28:69:4e:3c:4a:74:
f4:c6:fe:b2:b8:ce:f5:a9:63:78:b2:37:1a:c7:dd:74:40:b8:
d3:d9:35:92:f4:31:93:8f:c8:f8:14:44:be:80:9c:e0:a8:9d:
11:64:3c:80:d8:12:60:10:c9:fa:a0:e8:0b:d0:96:4d:45:e7:
28:58:6c:d9:2f:43:9b:f3:d0:b9:4c:e5:8b:df:4c:f4:67:33:
47:e5:53:37:f2:02:d4:8c:a4:5e:4c:f5:18:0d:a9:0f:4f:0b:
41:f4:d7:de:ac:ac:7b:0d:9e:39:fc:1d:ff:9d:91:41:34:e1:
ba:e7:1f:7f:bb:a4:9a:e0:01:be:06:ec:05:ef:4a:21:c8:d4:
93:b0:3d:9b:fb:5a:b6:47:fa:98:66:54:91:a4:cd:fd:37:c1:
50:6b:eb:d1:39:f8:93:a3:0a:82:4e:84:81:32:04:be:22:82:
77:59:97:0e:1d:2c:bc:63:93:a7:db:ca:65:d6:6b:8f:c3:7a:
3b:47:88:b7:40:f0:8f:c2:61:e5:a5:1d:1c:c2:00:42:ab:e5:
4c:b3:18:10:ec:7b:7c:fc:2e:49:1e:b8:2f:35:9e:2b:41:06:
22:65:78:2f:e3:95:57:0d:c0:b1:b4:6a:75:eb:8d:55:d2:5e:
4e:30:ee:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:14 2026 by rpki-client