Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: xkfhT/AEZ9XIc1htrjwuXuXBbJF2TiIKhiyO+CMKOOY=
Subject key identifier: 06:61:98:5D:0E:31:58:3F:70:4F:60:D8:D8:A9:73:F9:26:8E:2A:0C
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 019D25F2168E16922C0624F523D7A73AE29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 1016
Signing time: Wed 25 Mar 2026 17:01:55 +0000
Manifest this update: Wed 25 Mar 2026 17:01:55 +0000
Manifest next update: Thu 26 Mar 2026 17:01:55 +0000
Files and hashes: 1: 3widJOutrAHh97YKSptO-b1dBlc.roa (hash: WjqlvhNeLoXjkFAEnq8uZuntv6RT+a3RPjop0QMbaM8=)
2: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: jD2eHVFNLbAd33hx0zEiSqRubQHxFLeQYEAHmYe74vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:16:8e:16:92:2c:06:24:f5:23:d7:a7:3a:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Mar 25 17:01:55 2026 GMT
Not After : Mar 26 17:01:55 2026 GMT
Subject: CN=0661985d0e31583f704f60d8d8a973f9268e2a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bd:ce:4c:f2:90:ca:fe:63:bc:af:7a:f7:69:
90:42:7f:c0:fa:2c:9c:79:30:e3:26:60:e3:55:b6:
db:a5:bf:58:05:cb:16:72:80:b6:1c:af:51:88:d9:
c5:37:37:b8:5c:36:58:0a:e0:0b:26:ff:60:2c:a6:
d4:01:e4:5b:62:e1:bc:88:b8:ae:78:31:03:7e:6e:
31:2f:bc:b8:01:6a:36:d2:fc:97:47:14:b9:3c:cd:
29:21:56:00:d5:4a:56:bb:28:b0:6a:6f:94:87:13:
1f:c0:a6:5c:92:5f:8f:56:f9:66:49:02:5e:ee:a9:
dc:2b:eb:bf:3c:60:66:f4:f4:ff:16:ab:3f:93:e9:
4f:dd:41:2c:eb:e0:93:16:9e:3e:d3:34:8c:7a:c8:
35:c4:72:9b:92:8f:b4:e3:5a:ab:be:60:5e:27:c1:
e9:b8:d5:24:c4:87:8b:27:1c:d7:30:02:a8:4f:ea:
96:8e:b0:08:2f:d8:ea:6b:0b:54:0d:79:9f:81:7f:
69:ad:6e:a4:b0:55:0c:5f:db:0c:6d:b9:e3:31:1b:
4c:1a:c8:df:a6:e5:bd:7f:69:e3:39:81:ec:66:48:
d5:89:59:2b:fd:eb:06:c0:bf:70:72:5d:fa:b9:7e:
29:ea:04:9d:ff:fb:91:ed:fd:12:12:73:06:0f:c8:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:98:5D:0E:31:58:3F:70:4F:60:D8:D8:A9:73:F9:26:8E:2A:0C
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9b:6c:64:a7:93:61:60:45:f1:db:cf:33:4b:c9:e8:91:4d:
be:d3:3f:8f:7c:ff:02:a1:10:43:b6:10:77:3f:c6:b9:28:38:
78:03:fc:58:34:4e:2d:0d:1e:d6:4b:40:56:3c:7b:cb:7b:0c:
59:9e:fa:3a:22:98:91:e4:2c:d6:b2:ba:a7:db:0b:f8:fa:4b:
b8:e0:ea:6e:e2:46:f5:b9:21:10:94:2b:d8:ae:35:8f:b5:e8:
30:3b:f8:c9:a7:ee:96:ad:aa:71:d8:ce:16:8c:a9:64:69:71:
8d:66:3e:c0:fe:6a:8b:ef:2f:01:81:2a:8b:89:3d:47:29:20:
ee:04:5d:2a:8d:3d:74:94:bd:e3:4e:a0:6e:9c:81:01:0d:de:
9c:2f:bf:94:88:1f:c5:6f:91:f8:df:be:05:80:57:d3:8d:4d:
74:bd:96:5b:9a:e1:d3:d9:b3:28:df:a3:d4:65:c9:d4:04:af:
ed:81:8f:02:42:14:b3:49:f9:40:7a:63:e6:91:03:92:d4:ad:
e5:a7:56:c2:67:81:1b:b4:c3:f7:c3:9a:de:70:f7:eb:e9:58:
f4:26:d2:74:4c:c9:05:d4:38:28:ce:86:fb:ca:dd:23:15:ad:
e9:22:c1:f2:ef:b3:31:fb:da:20:c6:f6:81:54:a2:69:cc:15:
78:f6:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:43 2026 by rpki-client