Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: LttC8T6nElaLzdwTV+1B+p+dTf0EZUVtz5JRt3ZtxxU=
Subject key identifier: E9:0B:6B:B8:2B:24:62:E5:FD:1B:08:1D:47:2D:0D:F5:E6:48:F9:F1
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019D28BB8D3EE9D1B771659DEE5DBA0D907D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 18C6
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: 0j/lsYZkndvqvbasIhWPVySjg523TzxtMAoazvYA5uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8d:3e:e9:d1:b7:71:65:9d:ee:5d:ba:0d:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=e90b6bb82b2462e5fd1b081d472d0df5e648f9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:40:44:6f:b3:a7:1d:ea:ff:2f:6c:ef:f8:
a5:49:e9:d6:85:14:75:6a:24:2e:b1:d5:52:c1:2a:
d0:4b:1d:47:e5:d8:79:eb:f5:de:54:7f:3c:12:7a:
c6:44:74:b7:02:27:54:9c:f8:8c:09:20:47:86:42:
b1:9e:2a:8f:d3:16:d4:d7:cb:9d:aa:16:66:4d:3f:
d8:8a:97:38:64:f4:50:9d:ef:4f:72:31:7c:ab:b5:
e1:73:2f:6b:25:f8:a4:17:d3:36:29:16:a3:e9:3b:
43:b8:ee:58:cf:e7:a3:37:71:b1:8b:48:3d:d2:6e:
e4:98:8c:c4:42:a6:0d:6b:55:da:e4:b0:a9:da:29:
8e:03:73:6f:0c:79:83:4b:5b:fb:e4:a6:6a:9a:21:
4c:65:a0:9f:06:bd:8d:2e:16:c0:9b:dc:3b:16:53:
87:ae:75:df:5e:04:8d:eb:bc:e8:14:6a:09:74:68:
bc:f7:ef:d1:30:11:a7:85:6c:68:c7:54:32:b8:e8:
bb:3b:95:be:ce:c4:b6:cc:e6:40:c9:9f:b8:5f:67:
db:83:34:22:ba:4a:ef:9a:f7:74:c5:40:68:b5:35:
19:05:03:3d:69:da:d3:47:df:eb:40:07:c1:50:56:
d4:33:04:31:e5:df:af:ac:fb:4b:5d:0f:ac:5c:27:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:6B:B8:2B:24:62:E5:FD:1B:08:1D:47:2D:0D:F5:E6:48:F9:F1
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:57:ad:8c:1f:8a:a3:2d:aa:5a:0c:45:c4:f4:db:76:9f:c6:
76:a3:d3:f0:67:10:d8:83:99:75:47:c3:21:2b:84:43:16:70:
71:d3:69:e1:d3:47:cc:42:f3:e1:21:87:3a:77:1d:c5:fd:51:
e3:11:61:c7:06:c0:b7:bf:f5:b6:1e:ee:7d:e5:4b:65:4e:8e:
7e:29:7b:78:ca:40:02:10:2e:93:83:58:81:fd:75:b1:11:10:
08:e0:74:83:f0:28:4d:08:b9:23:ad:6c:d5:9d:0b:74:19:93:
53:c3:d1:cf:af:ba:cf:ed:60:51:d7:1f:db:dd:31:78:c8:0f:
e5:86:1c:08:6e:db:4b:78:ba:54:1e:f5:37:45:53:4e:12:e5:
1e:23:0a:15:8d:65:ec:d7:df:00:85:12:38:0c:22:68:87:bd:
e4:ba:db:5d:15:88:40:80:52:17:46:ca:e6:68:f0:3d:86:ae:
52:4a:4b:8f:9b:d6:f9:80:95:ee:24:b7:1c:e4:1a:1c:45:cc:
92:8a:e1:6d:4e:10:7c:76:11:72:90:f7:3a:be:62:78:fa:19:
91:22:4b:10:09:e8:18:04:90:62:db:b7:20:ee:90:34:b4:26:
cc:9b:2d:c9:57:12:38:d9:a4:c3:21:b5:36:cc:5c:ca:02:ed:
e6:35:32:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:53 2026 by rpki-client