Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: zWgxQ/juVOvyrFKaLFLWVCxrC8Sw1IcEkwAXLir6tZ0=
Subject key identifier: B4:F5:CC:C9:12:9F:23:EB:91:58:D2:4D:79:CE:31:60:EF:90:DF:95
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019D2B176721E456F9B96EED29AB90AFC697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 11D3
Signing time: Thu 26 Mar 2026 17:00:46 +0000
Manifest this update: Thu 26 Mar 2026 17:00:46 +0000
Manifest next update: Fri 27 Mar 2026 17:00:46 +0000
Files and hashes: 1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
2: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: Ox0SxqvDYSwX9OaX6qvwr0yT74eVbRPDzYf+ners/C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:67:21:e4:56:f9:b9:6e:ed:29:ab:90:af:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Mar 26 17:00:46 2026 GMT
Not After : Mar 27 17:00:46 2026 GMT
Subject: CN=b4f5ccc9129f23eb9158d24d79ce3160ef90df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:8f:a2:af:e8:8b:e6:c1:6f:0d:2c:76:9e:
47:7c:7c:18:20:31:f3:d1:b1:46:d7:2e:f3:9b:3e:
65:3a:7b:43:86:8a:56:ed:4a:36:6f:0b:38:50:f3:
12:41:f4:e9:3a:56:3d:b7:ce:8a:20:f3:e6:75:44:
4b:af:70:f7:cd:6a:5a:62:b4:2b:9c:b7:ad:e3:b4:
1c:18:77:98:30:d5:e4:d4:89:b3:35:7f:09:7c:90:
2e:b9:3e:8b:ac:88:b2:6d:4f:2c:84:83:0f:f1:6f:
99:d3:3c:e2:77:d0:76:69:e0:e8:de:2f:b1:a5:85:
8c:e0:2b:ae:59:b8:a2:5a:d9:c6:47:b3:22:07:e6:
01:9b:db:eb:cf:bc:39:2b:1d:4f:57:24:b5:5d:da:
4b:48:d3:72:87:b1:92:cb:37:29:a5:01:51:b4:a0:
bf:a9:54:85:ee:cb:33:c5:c2:a0:78:e7:1a:22:40:
47:c3:64:6e:dd:ff:80:b5:e5:0f:7d:21:3c:66:73:
2a:0a:9b:5a:3d:1b:82:f7:2d:bb:5c:fb:aa:f6:63:
58:b0:a8:6a:f5:c3:3b:c6:f1:ac:ec:4f:7d:dd:8e:
ec:bb:ee:6a:cc:1f:30:9e:82:50:3a:c0:13:0f:11:
5b:dd:2c:10:eb:b1:1a:e9:ce:4c:39:fa:1b:eb:ee:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:CC:C9:12:9F:23:EB:91:58:D2:4D:79:CE:31:60:EF:90:DF:95
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:82:78:2b:bf:15:e6:ad:88:04:50:f7:e7:17:7c:95:b3:89:
c4:db:b6:a8:6d:e8:a1:6c:0d:28:fe:af:3f:da:52:8b:32:e2:
f9:95:03:8c:37:bd:43:b1:6a:48:39:73:eb:42:83:5e:f5:fd:
8e:2b:ae:42:dd:ca:cf:5a:6b:63:30:1f:79:4f:a4:dd:1f:59:
33:e8:65:67:a4:fe:50:d8:bf:e2:6d:18:dd:a7:2f:ef:c6:84:
60:8e:b2:9e:c7:c7:8b:60:ab:ad:8b:15:4a:71:a7:3a:ad:8b:
58:34:16:96:fb:f7:85:94:7c:dc:1b:30:fa:9c:5a:30:46:5f:
60:ae:79:e4:32:b2:44:89:bb:b4:ea:ed:ec:e2:77:c7:34:9d:
39:59:59:e4:fc:13:7c:ef:3c:61:dd:8c:6c:80:14:ff:d7:13:
66:27:aa:4f:59:3b:8d:a7:d8:8e:5b:85:b5:81:ee:24:18:d6:
8d:57:9b:96:97:a3:c2:f9:3b:1b:c7:d9:3f:d0:f3:e1:10:8e:
f4:eb:ca:96:9c:2c:57:74:62:ce:14:f0:83:51:f4:76:ec:b4:
38:11:86:f8:13:d3:6b:72:d7:da:7f:38:50:af:aa:50:c9:45:
f1:e9:7c:c1:0a:29:da:6c:9e:a1:df:9b:07:76:ff:1c:56:d8:
f6:59:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:18 2026 by rpki-client