Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: JMnD/6aJpcjsqEeAMsuuNRe6xrBkpnQqxFFClbdTzys=
Subject key identifier: CF:67:19:0B:7E:11:85:97:3A:FC:8C:69:5E:72:DB:F7:F8:25:1F:C6
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 019D28169C1EAC1BF4D9CF815ABE8BF386A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 185C
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: u5DvsdHzdZWv1+XUz7EJe+qszxiXnStExb8jh4QDfYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9c:1e:ac:1b:f4:d9:cf:81:5a:be:8b:f3:86:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=cf67190b7e1185973afc8c695e72dbf7f8251fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:b9:1b:5e:b1:24:09:8f:78:d0:f4:e7:7f:
4e:33:a3:17:f2:27:26:5e:53:db:d5:29:14:04:78:
e4:24:b4:58:3d:71:ee:5f:77:a1:e2:da:8d:4c:e7:
a0:50:b1:93:b7:aa:a0:b9:e6:a5:5b:96:0c:2a:ca:
ec:a5:28:50:e5:78:cd:66:f7:b0:5f:51:c9:ee:5b:
78:71:b1:85:cb:89:78:2f:a2:88:67:c3:77:9a:91:
72:c3:c1:14:eb:e9:9b:3d:5e:61:4a:19:8f:8b:71:
31:59:04:2e:19:b4:b5:9b:10:94:0c:f1:24:2a:8c:
2d:04:36:83:c7:e0:fd:85:3e:c0:7d:44:4a:52:77:
35:97:5c:de:15:29:eb:c1:da:51:88:74:48:ed:2f:
b4:59:a6:a5:8c:4d:98:f6:ad:3f:4b:a5:8e:38:26:
74:26:94:7b:62:8c:c5:ea:96:88:43:67:a2:72:e5:
b2:62:63:4d:a0:23:6e:48:bc:c9:1b:67:a6:4b:fa:
5e:be:4c:d8:5f:66:b7:ce:8c:b9:57:4a:20:8c:ac:
27:6f:00:8c:59:61:87:2c:2b:1e:fa:82:72:20:bd:
f0:8b:7b:a4:2b:d9:bb:e7:e0:99:a3:03:3a:fe:cc:
ad:8a:b5:f6:de:c3:2f:37:78:e1:7c:0c:3f:bb:b1:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:19:0B:7E:11:85:97:3A:FC:8C:69:5E:72:DB:F7:F8:25:1F:C6
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:62:27:9a:c4:f9:92:b0:7d:ac:66:15:ca:26:49:57:de:fe:
34:bc:d4:ee:a3:37:d4:08:4a:a2:d5:4b:fa:8c:2e:a1:9f:1b:
08:a6:9b:ad:aa:74:b3:e0:59:ed:25:d0:9a:f8:ea:9d:e5:d9:
46:c8:04:ef:df:0e:8b:53:b1:73:d9:df:1c:b9:27:bf:6b:73:
5e:53:e7:53:34:40:d3:d6:f9:a5:49:4e:a4:f0:6b:d4:b7:a4:
a3:3c:e6:bb:b0:96:c3:43:2b:32:16:e4:ea:45:08:9a:ae:0c:
c8:c3:85:a2:69:b6:fd:ab:48:7f:41:47:ae:ef:96:c7:0e:07:
77:db:53:c8:14:a8:d1:1e:0b:77:53:0f:7a:26:a7:db:49:fb:
51:62:11:2b:55:a1:24:21:c5:67:bd:34:a4:99:e3:ff:9f:4d:
d8:03:62:d1:74:ac:36:3d:ba:5d:00:a1:ec:24:6e:e1:d6:5f:
c8:e8:40:b5:0c:cb:91:99:e2:c3:79:83:fa:4f:46:2e:6c:b4:
bb:af:66:43:fc:c4:88:89:42:e8:0c:71:2f:54:8c:de:0c:76:
7a:55:71:60:47:ae:eb:e5:a0:d2:db:ae:19:e5:5b:c2:ba:15:
29:db:a3:be:ad:2c:05:e6:f3:fc:ce:af:02:09:74:7d:9c:b0:
45:db:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:55 2026 by rpki-client