Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: LQl1KjoOVeYHY1Cfl8UnasqRO/Hu4fwqQ3suibK1dxQ=
Subject key identifier: DD:F9:B4:BC:46:09:FB:2A:D3:92:F5:5A:DF:65:3B:BE:D1:FC:9E:BC
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 019D2816E456AA1AA14D82530027012320AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0596
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: fuwgSWJeIyS7RuR8fjKogRlkNn2TZqlzEPJvAEnDgpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e4:56:aa:1a:a1:4d:82:53:00:27:01:23:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=ddf9b4bc4609fb2ad392f55adf653bbed1fc9ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:0d:1d:e3:75:27:ef:3f:ce:6f:c5:15:a0:
48:f7:d1:a6:8b:9c:d1:9a:93:cb:cd:82:6b:55:40:
62:30:83:0a:60:69:c6:a1:17:3c:ac:bb:48:0f:d7:
cf:d9:30:c1:11:68:7c:a2:45:2b:4a:68:7a:c1:1d:
58:4b:74:83:35:18:17:6e:03:14:d9:70:05:43:53:
fe:17:ac:da:d1:35:9f:4e:44:ed:00:e4:2a:19:11:
14:30:9d:57:cf:05:8c:2b:85:15:06:72:75:af:94:
a6:c1:ad:2d:ab:ca:97:02:c6:29:38:4c:f2:43:15:
ac:7d:58:f9:d1:3c:31:8a:6a:ee:c5:97:70:44:72:
a9:3a:41:e2:0f:65:d0:a1:a2:15:f1:9a:ac:67:df:
ca:31:45:c8:2c:e1:c2:fd:26:3a:69:84:2e:f2:bd:
33:2b:17:a4:48:26:62:58:88:1c:02:3f:5d:b3:a2:
ad:74:16:d8:65:05:78:1a:35:3b:0e:c3:80:ca:f3:
3a:91:d0:06:5a:f3:e0:cc:d7:be:35:e2:50:78:91:
3c:f0:19:05:36:ea:c3:f5:1d:49:44:fc:7a:77:da:
6f:a0:cb:e1:e5:ce:d6:e1:f3:a2:92:00:c8:8d:71:
9e:34:91:14:db:17:b9:a8:39:f0:4b:1d:c3:d6:98:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:B4:BC:46:09:FB:2A:D3:92:F5:5A:DF:65:3B:BE:D1:FC:9E:BC
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b6:ab:11:f7:f5:30:8c:7d:e4:ac:68:8c:f8:9a:21:68:34:
11:50:c9:e0:c4:f2:d3:06:7b:b2:87:5f:3e:0a:fd:70:88:55:
34:20:89:e7:c4:3d:06:bf:00:a2:50:08:04:68:1c:8d:00:b3:
5d:62:59:16:a4:2d:37:bd:3b:4b:16:a5:a0:36:13:c0:f6:bd:
dc:b4:77:81:3e:90:f9:d4:42:1c:e3:e6:08:d1:26:5a:5d:f5:
6c:02:a5:ff:54:52:8a:c0:25:4d:e3:e9:e7:66:f5:b5:40:05:
70:f6:35:6c:f6:8f:92:f0:68:08:43:a0:67:f9:53:bb:54:c6:
f1:2d:dd:85:ca:53:1e:7d:99:68:64:e0:04:00:45:bf:f9:4b:
77:db:91:f3:88:53:17:88:e2:eb:87:c2:e0:ca:57:d1:21:a7:
53:f5:d4:bf:11:77:47:07:a2:1e:be:d5:55:83:59:1e:6e:46:
1e:5e:c2:0d:fe:07:08:b2:1a:7a:66:d2:14:2f:ee:62:b3:15:
4f:b5:b3:ea:d9:18:c9:a3:f3:3a:0c:27:7f:d8:1c:a2:5c:a0:
05:11:69:fb:04:cb:6d:73:ae:ef:41:62:a6:69:45:0f:b0:35:
f7:ea:2a:0f:dd:3a:c5:98:70:74:eb:18:68:b8:1d:f1:8e:46:
c3:6e:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:22 2026 by rpki-client