Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: OUaL+wqtta6UBGU2a4TfN65VZqXgOP0NZxTZgPgQSIU=
Subject key identifier: FC:06:3A:93:D4:E8:5C:19:68:F6:8E:C7:6B:12:1B:5F:0C:94:19:1E
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 019D25F0F243986FA5ED158EDD4DC652FA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: 1M7VqjCBlvnrrW2KuHI+EPfKDSXF3Hzdw6TwHI3LDMs=)
2: v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa (hash: QMYJkrHaL3LBI/CVAcdwz2saxueqHf/IvlmxIHaRqm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f2:43:98:6f:a5:ed:15:8e:dd:4d:c6:52:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=fc063a93d4e85c1968f68ec76b121b5f0c94191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:1d:ea:d8:a9:e5:52:f0:b6:d9:6c:49:d9:
40:06:d0:f0:98:39:52:e2:43:e9:b1:37:2a:cd:e4:
c9:ce:21:48:27:5a:f4:83:27:6d:f3:14:ab:30:f1:
51:a0:60:d8:9d:fe:3c:b9:cd:be:ba:17:26:6d:ee:
ce:64:74:b9:4b:af:b9:22:09:63:c1:5b:89:8b:f7:
26:32:2a:e7:95:31:13:aa:3a:55:2b:b4:3a:f8:b5:
a0:fb:2a:66:62:da:b4:d2:58:c1:24:80:3f:9e:57:
fc:84:2e:82:6d:d7:58:ae:33:22:bc:7f:f0:69:2b:
fd:4e:ca:18:0e:c1:4a:ab:82:27:6c:bc:75:07:3c:
9a:d9:4a:c6:72:9b:1e:9a:e1:46:a2:ab:20:8b:52:
50:6b:37:e0:fe:38:54:a7:15:eb:5e:e5:07:bb:ee:
1d:4c:ff:f6:99:ae:f8:8a:8f:29:de:b9:ae:92:dc:
77:1a:74:b8:50:63:4f:7b:b6:0b:05:cb:53:bf:fd:
34:57:58:8b:ef:39:b5:60:a2:c6:b1:c4:9d:fe:ae:
5a:b2:20:4d:c5:74:3e:42:e8:24:ed:0f:eb:0c:26:
9d:71:4b:1c:9d:f7:56:f4:55:c8:d4:2c:41:83:92:
0a:36:4f:60:12:08:d2:15:62:07:4c:4d:6d:df:f7:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:3A:93:D4:E8:5C:19:68:F6:8E:C7:6B:12:1B:5F:0C:94:19:1E
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:87:7e:28:98:9a:99:9b:36:e1:a4:c4:b0:d6:28:9a:41:14:
f1:91:16:64:7f:38:f5:4b:3f:ab:d4:80:1b:fe:c8:24:e9:3f:
57:5f:d1:35:eb:71:b0:9b:c6:51:3a:46:47:3d:b0:62:b1:2f:
11:0e:86:e4:c7:c0:a2:ba:f6:1c:81:0a:62:a9:32:77:67:1d:
38:97:a0:9c:a6:89:54:59:d9:61:17:2e:62:84:35:f8:cb:1d:
48:fd:61:18:0f:65:ad:30:b8:f4:63:40:a2:94:71:d9:45:1a:
9a:ee:5f:9f:f2:75:f0:13:13:da:6b:a7:24:48:81:e1:60:11:
69:0e:e9:2d:5a:14:52:b9:6e:07:94:e1:21:5b:a5:e4:44:48:
28:4e:6e:b7:ec:42:33:70:41:09:1e:80:06:24:06:6c:7e:93:
69:65:ad:c6:53:e2:79:17:c7:b8:69:fe:91:e4:87:6a:73:44:
4d:c4:bb:7d:01:66:3b:cb:9a:c6:3e:c2:83:d4:79:78:04:cc:
9b:6d:b1:70:b4:49:8b:94:1b:1d:00:08:5c:42:9b:5f:ce:7f:
c4:8d:ea:c4:57:c5:5a:52:37:7f:e9:ed:b6:da:60:06:14:2a:
b4:37:b8:94:f0:6b:e2:1b:1a:0e:7f:7a:a4:49:6a:3b:47:73:
1f:90:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:53 2026 by rpki-client