Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: 2cu5/smakI6vslOKA7BkU7iffz6ExJdcca5rl3VQqlA=
Subject key identifier: D6:44:1D:05:61:D1:4C:89:7D:D1:87:47:6B:89:57:2F:07:64:B1:09
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 019D28BB0853801BE2018FEFA8B453ED9592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 096B
Signing time: Thu 26 Mar 2026 06:00:39 +0000
Manifest this update: Thu 26 Mar 2026 06:00:39 +0000
Manifest next update: Fri 27 Mar 2026 06:00:39 +0000
Files and hashes: 1: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (hash: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: HxxyR9yQv38bRCI44XiOvzCDyjXMz1n/QJuA4X3syqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:08:53:80:1b:e2:01:8f:ef:a8:b4:53:ed:95:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Mar 26 06:00:39 2026 GMT
Not After : Mar 27 06:00:39 2026 GMT
Subject: CN=d6441d0561d14c897dd187476b89572f0764b109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:e4:81:2d:8a:e1:f0:a4:e1:cc:ff:37:b9:
f9:a5:2d:87:3a:40:38:e7:86:20:a6:59:6d:5f:58:
68:bf:aa:73:7d:5d:ce:f6:ad:8e:17:29:67:69:b0:
d8:ae:be:c6:27:ee:61:17:a0:9d:11:5d:c4:aa:3d:
e8:1a:60:b1:46:bd:1c:1a:e1:40:9c:48:95:d5:50:
05:4d:50:33:6a:c4:5d:69:bb:70:39:b4:03:40:31:
53:c0:0b:e2:ed:f0:be:11:dd:ed:a4:f7:7c:e7:2e:
df:d3:4c:f3:b6:52:e8:9a:24:8a:4d:c9:97:63:41:
3a:0d:98:18:28:cf:a5:42:21:05:29:00:77:ea:8d:
14:d1:49:14:ad:a7:dd:ec:b1:5e:a7:de:dc:e0:2d:
01:5e:3d:1f:03:a3:c5:e5:be:b1:46:0e:9e:73:2c:
e8:6f:b1:e9:03:30:66:79:07:36:54:6c:84:bb:9c:
6e:0c:e2:e5:8c:3d:bf:3d:44:a1:cb:81:34:fc:eb:
f8:4c:fd:ad:5f:19:07:9e:02:0f:b9:13:86:95:a4:
3c:d7:2a:a7:be:db:13:20:a7:20:a4:59:ff:d0:da:
a7:1a:13:1d:28:3f:b0:9d:4c:ac:1a:40:04:e9:29:
f7:87:39:ec:d3:ab:40:ae:fe:85:e3:71:fe:54:5b:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:1D:05:61:D1:4C:89:7D:D1:87:47:6B:89:57:2F:07:64:B1:09
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:09:ad:56:73:02:8d:fb:bb:1b:ee:09:03:c9:0a:75:6f:2b:
ef:69:2c:37:b4:de:b5:cd:a0:a3:4a:84:f2:d7:e6:60:0f:9e:
13:eb:72:f7:7d:0a:97:4d:71:ea:f8:8a:19:ce:d7:e6:ec:a1:
8c:1c:99:b1:b5:99:dc:6f:07:64:83:d9:b5:4a:d9:81:48:32:
29:28:15:61:a8:95:7c:ca:f7:36:5e:03:a5:fe:69:dd:95:af:
ae:5b:bc:d1:09:ea:d5:48:70:a0:18:de:10:d7:66:6a:92:2d:
3e:db:32:1d:69:22:95:69:89:d6:3c:7f:de:95:e8:42:02:9c:
02:78:5b:76:9e:69:70:b1:c8:ab:9e:65:56:85:92:59:58:18:
12:98:c0:c2:97:8f:48:ec:ff:76:bd:76:b6:6e:8e:1b:d0:d3:
bc:cd:ee:d5:08:9b:af:c1:a8:28:64:2a:2d:a5:cb:fd:ef:85:
2f:51:c7:b7:0f:c0:1b:72:1f:7f:55:64:43:01:a3:50:d5:39:
aa:7a:5a:ad:8b:a0:36:22:27:37:07:72:ec:4b:fe:e7:b9:5b:
3f:82:27:12:76:0f:60:60:20:e4:f4:9f:0a:ff:78:7b:ed:26:
2b:38:8d:99:1d:7d:70:1d:32:a6:65:4a:70:7d:68:dc:be:a5:
e1:d5:d3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:11 2026 by rpki-client