Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: vVr2Q4Bgc1t5bw5DQk0FJIMIXEpJH/oWcU8lBv+z9E0=
Subject key identifier: 08:84:77:6F:16:98:ED:4C:82:2B:E9:86:19:6A:58:14:78:4E:59:26
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019D2997449C3FEEDD4A9CDFDA195F7EB287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 03D4
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: 8qyVcumSbBlGwA8T0s6SPXOa3ZqtsD5ieMFF0rDZGlY=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:44:9c:3f:ee:dd:4a:9c:df:da:19:5f:7e:b2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=0884776f1698ed4c822be986196a5814784e5926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:80:dc:3e:5a:19:9e:28:2a:5d:9e:df:64:
ff:eb:4b:82:3f:13:9d:08:87:11:d5:f3:01:96:ba:
02:7f:73:f9:23:42:33:d3:f8:9b:8e:b9:8f:73:07:
96:68:1d:44:2b:9c:ce:53:f1:4e:27:f3:cd:c5:d4:
70:84:74:0d:13:c8:43:3e:85:53:e2:5c:f2:0d:81:
c1:36:6a:e0:9d:5c:50:15:2e:5c:2c:3b:3d:ee:63:
13:10:45:c8:f4:b3:c6:29:66:f2:6e:1a:39:a3:ae:
f5:c5:b7:73:a9:54:f9:6f:bf:76:d3:5a:e4:0f:b5:
5d:8e:4b:9a:77:fe:68:2b:2f:28:8f:d7:c5:df:96:
34:17:f6:9e:54:7a:7f:4f:02:f0:54:a6:09:b4:20:
af:d5:9e:3c:14:05:b4:f5:13:e3:6a:90:1c:f8:f4:
bb:d4:76:15:a7:f5:18:46:36:9a:39:66:c7:96:06:
af:f1:e6:08:38:34:a3:cf:3e:de:55:e4:ff:00:d3:
e2:31:c3:00:73:f3:54:f0:c0:a6:cb:8c:a1:1f:67:
12:1f:a4:c8:cd:37:6c:ca:56:9c:41:f1:41:c0:56:
d1:56:1c:cb:17:f5:93:20:54:3f:63:78:7b:70:a2:
a7:3d:24:d6:a8:71:af:24:86:29:a2:ff:1c:dc:55:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:77:6F:16:98:ED:4C:82:2B:E9:86:19:6A:58:14:78:4E:59:26
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:64:01:27:0a:9c:34:c7:d9:5a:eb:d9:77:16:26:7c:33:
ca:33:4e:32:5e:49:25:7d:28:a1:92:b5:e2:64:89:9c:42:34:
49:1d:ec:2d:e5:b1:c1:04:b4:9c:79:39:70:4c:13:a2:46:c2:
41:ab:af:81:d4:5d:b9:8b:7c:01:be:fc:83:5e:b2:7d:50:ca:
66:de:2b:b1:a8:be:0c:ae:9b:e3:19:fb:9d:69:4c:0f:ec:5d:
84:2d:e4:be:0d:43:fc:e5:6a:35:45:2b:11:98:32:93:4c:3f:
67:e7:ae:30:71:2d:17:df:b4:cc:30:86:1b:a0:c7:64:90:5a:
1c:70:bb:b1:4d:e8:6c:0f:33:33:dd:70:05:d1:7d:c0:aa:4b:
af:0f:1f:95:70:22:ba:75:32:99:10:b4:fd:80:e0:15:8c:c5:
31:c5:fa:2b:89:f7:dc:19:d0:6b:95:58:be:b1:01:ac:97:26:
6d:a7:85:a3:d0:0e:3a:09:62:75:36:ec:7d:de:93:1d:2d:7a:
c4:f2:5e:8e:4d:fd:cd:85:c3:0d:d4:cc:17:b5:ab:5e:3c:6f:
56:12:73:81:77:b6:e8:14:1d:2c:5b:aa:47:5d:24:00:49:b1:
42:a8:57:e3:71:98:fc:23:27:64:e5:c9:0d:2c:b7:6e:db:e1:
95:c5:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:13 2026 by rpki-client