Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: Den2Ka09kmgILpEIf5otlfjdvqqbSkHbQqaYZrNLQn8=
Subject key identifier: FF:D2:23:77:BE:56:09:83:0A:2B:C0:05:19:D1:A9:56:BF:26:18:7A
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 019D25835D1D130EE1A074197D03A52C949F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 167C
Signing time: Wed 25 Mar 2026 15:00:58 +0000
Manifest this update: Wed 25 Mar 2026 15:00:58 +0000
Manifest next update: Thu 26 Mar 2026 15:00:58 +0000
Files and hashes: 1: 1n27rvaelRUykey6wf5ROwjIidI.roa (hash: KBBik8Julj24P9mvYdNU35DOMzPd5tmec1o6YPTRHDE=)
2: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: 1tYcIF6vT+frtjC4Q5h+wFFgQyfzu3FLToIOpbU4n/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5d:1d:13:0e:e1:a0:74:19:7d:03:a5:2c:94:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Mar 25 15:00:58 2026 GMT
Not After : Mar 26 15:00:58 2026 GMT
Subject: CN=ffd22377be5609830a2bc00519d1a956bf26187a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:e9:5e:ab:0d:41:60:79:35:7f:8e:3d:b0:
fe:f6:de:4e:be:08:26:dc:62:2b:e0:96:78:05:08:
86:6c:e8:aa:e7:21:26:b3:5b:e8:0b:d0:15:d5:bb:
0f:01:8f:7b:ac:93:03:6a:38:14:53:0b:bd:52:21:
d7:2f:60:44:37:db:72:5f:5e:e9:d7:85:61:ee:e8:
c4:5c:27:e5:b1:fc:2d:6a:e5:75:e0:f9:fc:46:2b:
c3:c1:96:6e:b4:c4:3f:70:a3:a9:30:83:b0:85:77:
d6:eb:6e:3f:df:14:7f:66:19:b0:dd:95:86:28:70:
64:6f:8d:5f:2b:c4:39:e6:78:b7:a6:a9:b7:1f:ef:
a2:10:77:ba:dd:90:ec:4c:e2:c2:10:49:59:51:e7:
b5:e3:b1:65:5a:73:3c:d2:da:0e:32:36:5d:9d:14:
2b:14:30:62:bc:41:90:58:52:ae:1f:8c:69:71:40:
d3:ea:1d:c4:5f:f8:1e:0a:de:b9:bf:cc:e3:ed:70:
5c:00:5c:90:d4:e6:00:47:17:50:c5:30:00:fe:bd:
8f:79:04:f1:0d:f8:6c:8b:0b:8d:cd:89:b3:c0:8e:
63:4a:12:b5:f7:34:bc:ec:3f:76:17:40:07:42:f6:
7e:c3:ea:99:45:b8:b7:8b:3d:af:eb:90:ac:4f:c9:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D2:23:77:BE:56:09:83:0A:2B:C0:05:19:D1:A9:56:BF:26:18:7A
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a8:56:e2:f4:f4:b0:c9:1a:00:2e:f8:1c:99:c8:72:16:72:
f8:90:8f:c1:d9:16:fe:0d:ef:e5:e8:5a:df:07:97:9e:e5:7b:
6f:57:14:0f:4c:73:07:8f:a6:f0:91:e6:0c:50:88:ff:e1:8d:
0a:2c:22:9d:a3:c4:ee:32:59:97:1d:ce:65:2a:2d:12:b9:83:
49:6f:ce:d2:7a:94:b9:26:0c:6a:aa:3c:de:7b:92:0e:59:e7:
30:a9:37:3a:1b:0a:11:46:59:33:c2:69:4d:0e:c1:8c:ae:d1:
f9:32:f0:2f:12:28:8b:b3:f9:b7:59:ec:21:72:16:07:5f:b9:
e7:85:2f:c4:f9:3d:9c:bf:0e:50:e4:3b:ef:9a:1a:15:70:c7:
f6:00:f6:08:bf:16:85:f8:3e:6c:33:fa:95:34:08:8e:23:75:
d9:d2:16:7d:5d:14:ec:7d:88:d7:2a:8d:bf:b3:f9:50:1b:0f:
d4:48:0a:4c:80:5d:76:5e:0d:e3:fb:43:05:91:5a:e6:4d:88:
93:7d:b7:40:2d:d8:33:be:38:f6:5a:82:c6:02:b5:9c:7b:7e:
90:79:e3:ba:22:9d:7c:76:6e:64:44:cb:79:0c:82:63:a9:f7:
27:95:72:66:06:28:e5:bf:09:f3:95:a7:b5:46:6a:d9:90:65:
09:87:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:51 2026 by rpki-client