Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: covH7xpOEjv0rAquI35lu8byvtXZPlVX/ujCMYmpZjA=
Subject key identifier: E9:F5:5B:CD:52:ED:D7:E0:DD:BC:B7:13:29:09:E8:CD:C0:E9:8F:5B
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019D2A04B7A51DED923BEAD2959DA181292E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 128C
Signing time: Thu 26 Mar 2026 12:00:45 +0000
Manifest this update: Thu 26 Mar 2026 12:00:45 +0000
Manifest next update: Fri 27 Mar 2026 12:00:45 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: fVtfwYRKCYRoyrWDm8/WZueqN7OkVOBqAr4pVXY2L2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:b7:a5:1d:ed:92:3b:ea:d2:95:9d:a1:81:29:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Mar 26 12:00:45 2026 GMT
Not After : Mar 27 12:00:45 2026 GMT
Subject: CN=e9f55bcd52edd7e0ddbcb7132909e8cdc0e98f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:26:fd:37:64:1d:8a:15:af:ad:95:33:3c:
0f:3e:a4:10:f7:e6:c7:00:1d:b4:6f:5d:09:23:d2:
d0:bd:1e:6f:a2:76:39:4b:81:88:58:25:18:de:53:
47:61:8f:f3:4d:2e:11:5e:52:29:0b:0e:84:2a:1a:
9c:e0:f7:76:c4:55:2f:b9:44:0b:05:a8:cf:52:2b:
6d:c2:cd:c6:be:9c:8f:5f:1c:eb:53:52:c4:c2:c4:
74:34:8f:a9:d6:33:e8:ac:05:a8:bd:e4:56:9e:23:
dd:50:ee:51:9b:27:4d:5e:2b:77:70:37:3e:cd:f9:
92:b0:dc:3a:ee:65:dd:48:4e:73:47:53:6a:01:51:
25:00:3d:64:22:b0:3a:7b:fe:a7:50:dd:99:7b:d1:
2f:f7:94:3d:67:52:a4:1a:e1:f7:5c:94:48:89:c0:
a7:58:05:c4:fb:84:e4:81:f4:00:ee:56:88:af:0a:
ea:f7:62:fb:c3:ae:e4:68:a5:1d:68:00:a6:50:94:
07:f4:e4:94:bf:6b:e5:a0:35:f9:49:d1:f8:81:59:
c4:21:c3:b1:ed:76:f4:e2:53:0c:26:73:7b:2d:c7:
7d:b0:b8:10:f8:ec:f2:e1:a3:81:bc:15:e6:47:3e:
0d:ac:a4:f3:a7:13:e2:78:39:86:d9:c5:4a:b9:d2:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:5B:CD:52:ED:D7:E0:DD:BC:B7:13:29:09:E8:CD:C0:E9:8F:5B
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6f:bb:a2:4a:c3:fb:f3:82:fe:ea:07:6b:90:7c:f2:0c:83:
7f:32:92:8d:f2:28:c3:8d:35:74:7d:07:5b:cc:8b:55:34:09:
eb:a8:27:d6:34:cc:55:58:33:39:a1:99:be:fe:5a:98:a1:d8:
15:61:da:b7:65:74:0e:ac:ea:ff:48:f1:dc:98:68:c8:a8:f4:
22:be:29:fd:7d:9b:76:91:9a:53:cc:48:ec:92:80:5b:87:fe:
c2:94:cb:5c:d7:b3:b8:76:6f:0e:52:cc:2c:86:3e:9d:50:bd:
95:5c:f3:e8:c0:45:56:71:d4:55:57:66:ff:e3:7e:49:1a:4f:
15:78:7a:6c:b3:c2:51:9d:45:20:a1:ae:e5:8d:25:88:ea:d6:
30:2d:d9:12:17:52:07:04:2a:7f:3a:d9:af:06:b3:61:e4:b8:
97:8c:a0:b4:16:bb:0f:fa:c9:8a:a0:a8:c5:f8:97:c9:7b:b3:
7c:e8:c7:a9:a2:e4:f5:65:96:b9:37:2e:72:ed:b5:99:6f:36:
e3:3e:7b:1a:d7:8d:48:84:5c:b8:ec:ea:9c:bd:7d:31:1f:b0:
04:d6:f6:7c:84:8f:e5:60:1b:16:f9:60:48:44:f5:a7:85:51:
9b:dd:d1:38:51:b9:62:f5:bb:de:04:3a:d1:a1:a0:9c:9a:cd:
d0:ea:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:51 2026 by rpki-client