Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: ul/Evsg7jWps6TE4xHDhedcbQn1SYvspWedqNJPq32o=
Subject key identifier: D7:38:78:76:5E:3D:3D:B9:59:E2:6C:67:D7:38:F2:5E:6C:48:2C:86
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019D2628A0FF82F8C3C1A0F5AAF5B225FACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 11FA
Signing time: Wed 25 Mar 2026 18:01:29 +0000
Manifest this update: Wed 25 Mar 2026 18:01:29 +0000
Manifest next update: Thu 26 Mar 2026 18:01:29 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: 6mriRkL4kPPc6MDNqy87m0bTEWoKDOiKOJTYxcvI/UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a0:ff:82:f8:c3:c1:a0:f5:aa:f5:b2:25:fa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Mar 25 18:01:29 2026 GMT
Not After : Mar 26 18:01:29 2026 GMT
Subject: CN=d73878765e3d3db959e26c67d738f25e6c482c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:f5:06:3f:96:00:e0:d5:fc:7c:fb:f3:34:
d1:0f:ec:30:94:48:91:9a:22:46:aa:62:d4:6c:e5:
34:ba:2e:82:7c:3a:6f:b9:c7:3f:5b:11:6e:b5:29:
18:9a:b3:23:89:e4:72:a1:49:4d:8c:b8:8e:36:0a:
76:bd:17:8a:70:98:61:59:a9:22:e0:5f:f8:ed:35:
67:64:61:b5:3f:62:97:77:de:e1:ff:a8:d6:d4:5f:
f5:57:71:a0:2b:0d:d9:a5:e6:7d:0a:79:98:cd:f9:
16:61:3d:bc:d0:39:b7:db:a2:8e:96:ef:0d:de:b7:
66:65:9b:f9:3f:e9:26:06:1f:39:3d:93:7f:56:a5:
81:f2:a7:68:fc:62:31:ba:83:51:5e:04:15:20:f2:
42:d8:f4:d8:12:3f:4c:09:f7:a0:87:b7:09:66:ca:
b7:25:58:94:4e:9f:bd:62:bb:68:24:a2:08:2c:c1:
59:34:b2:31:b2:30:34:c0:27:cf:42:06:d8:c1:d2:
6b:06:a0:e9:b9:0a:3e:fa:9a:de:95:2c:21:b7:0d:
2d:cb:24:67:0f:f5:57:e2:a0:d8:df:17:ab:26:64:
79:ad:08:6c:5c:ad:71:a4:bc:36:70:a7:5b:f0:8a:
e8:ac:61:9b:4e:cc:ca:27:18:91:a6:8f:09:82:b6:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:78:76:5E:3D:3D:B9:59:E2:6C:67:D7:38:F2:5E:6C:48:2C:86
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:31:d0:8a:06:7f:5a:98:99:9a:2a:22:4c:e8:9f:d7:c2:
18:e0:70:97:4e:b8:52:a7:ff:eb:e3:42:67:e0:d0:7a:78:01:
49:d6:f0:0b:e2:fc:04:8e:00:e8:ea:63:7b:93:e5:b1:18:74:
a5:08:67:4b:bd:87:9a:7d:ab:5d:ec:6d:35:b2:f9:24:d0:3f:
2a:5b:7b:7c:96:3e:1a:c6:1f:e4:ba:62:1d:25:b9:0c:a4:3a:
d5:77:a8:a6:75:a6:71:51:a2:f0:9c:40:02:aa:b6:9b:da:7b:
69:17:ee:ef:7a:ab:6b:95:a3:ea:ff:9c:2d:ce:84:47:62:fd:
18:5a:9b:af:d7:17:2b:10:73:cc:7b:1a:23:f0:2c:73:ea:da:
6c:e7:e3:d3:d1:4a:0f:72:e9:fb:28:88:f8:fc:ec:3e:c2:ef:
98:34:02:79:eb:32:e7:f4:33:8c:99:27:4f:eb:d9:4b:ce:56:
c7:bf:6c:6c:4d:dc:22:f0:c9:51:49:a0:11:a3:38:52:97:12:
a3:f1:39:21:3d:29:4d:0b:cc:79:83:b4:b0:b6:fc:65:90:f2:
f7:33:f4:8f:75:3b:83:76:a2:c8:86:0b:b0:18:45:d0:96:f2:
26:67:17:e7:be:0e:4e:1d:1b:cd:6a:f3:61:8c:b8:cd:aa:10:
bb:04:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:52 2026 by rpki-client