Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: I0R1jm+DXDdtb5M8lO70PAcLMhvnsmjXutFvdsG6uZQ=
Subject key identifier: 13:25:46:60:95:D9:7D:B9:2B:49:63:2E:AE:27:F2:99:4C:94:17:8B
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 019D265F8D0623C0B5E29AA0E30EE6297D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa (hash: yfGpXBMwfuCn+DMxXYn3DWhF4inc0qBH11Kt+d+QCNw=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: XXpORTREaawBUtkJEyNIg1ntVmqmbWAfNMcFZ77Yowc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8d:06:23:c0:b5:e2:9a:a0:e3:0e:e6:29:7d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=1325466095d97db92b49632eae27f2994c94178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:bd:3f:aa:f3:a5:e9:5d:4c:fe:7c:09:a8:
3a:4e:74:53:b6:fc:8f:67:aa:ca:17:ac:81:1c:3a:
03:d7:f1:16:e6:7c:b1:93:c1:84:99:9c:b4:2e:4f:
71:2d:53:bd:4f:c4:67:15:4b:85:31:d6:e9:73:e2:
7c:96:bf:f5:42:a6:65:b6:ef:1f:05:31:30:d3:78:
c3:79:cf:de:32:ce:5d:16:64:bf:e3:a8:82:d1:98:
1b:25:ef:8d:d1:78:23:cb:a5:75:69:e1:43:52:69:
ca:79:d5:18:5f:1c:85:1c:14:dd:03:44:48:4b:5e:
68:fb:e1:95:ba:5a:b8:7f:e0:22:53:2d:6c:c0:f5:
38:ed:27:06:ce:8d:d5:3a:4a:79:91:ca:cd:bf:91:
1f:5e:d4:da:da:ed:bb:4e:0c:08:be:35:f7:5c:89:
a5:93:00:69:24:85:30:36:55:fa:65:6c:62:34:e4:
d5:3b:e0:b7:65:d2:ad:d8:9b:aa:82:98:99:d7:b8:
9b:e4:d9:eb:05:dc:dd:05:00:f9:fb:92:20:d2:c9:
89:58:bd:bd:ee:5b:49:d0:eb:27:65:33:b4:f3:cb:
70:fa:9e:3b:9c:72:ad:52:24:6f:07:a3:f4:b8:a1:
f9:32:f3:68:3d:fd:02:d5:24:4e:79:19:e5:dd:88:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:46:60:95:D9:7D:B9:2B:49:63:2E:AE:27:F2:99:4C:94:17:8B
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:89:f0:86:3e:37:da:28:c4:a5:6b:99:0d:4e:3e:16:ba:
9e:9b:7c:ac:2b:91:e4:c9:6c:76:cf:ca:2c:6e:61:a7:54:ab:
a9:73:29:0d:cc:ba:57:64:68:75:01:38:47:ad:63:29:d3:1e:
76:f3:0a:83:b2:9f:61:9f:ea:e4:0a:b1:77:50:83:98:30:d3:
12:a2:74:9e:cd:6a:b3:61:5d:f3:79:88:ea:d6:4e:c5:fa:51:
c2:d0:89:54:e1:ae:55:b9:4b:fc:28:1f:75:80:be:54:b6:c2:
95:12:5a:83:53:46:44:47:ff:4c:64:1b:fa:cd:b6:68:69:53:
c1:16:30:6d:70:62:3a:30:43:d2:c4:59:2c:79:58:75:6a:37:
6f:49:18:f3:97:fd:bc:79:52:2a:b5:1e:a8:97:18:82:93:7e:
78:82:8d:4a:b5:41:53:dc:83:5b:57:45:66:5b:42:27:55:44:
90:1c:eb:cf:45:53:6c:85:4a:72:2d:ca:50:b0:a0:93:87:38:
73:59:08:2f:e6:08:78:3f:b6:82:ea:7d:85:22:9a:37:6d:00:
8e:f8:33:46:cb:42:c5:c8:d9:76:7a:70:03:06:7b:a8:26:d4:
17:10:d3:2b:69:e0:44:d0:e1:82:9e:55:42:52:71:ca:54:63:
7c:0c:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:32 2026 by rpki-client