Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: edWoyNaGz1RsitnB8CY0VdWtKSo3A+EynF81CPdAp+0=
Subject key identifier: 10:CD:CA:CF:F6:C4:F4:BB:19:D5:D4:D4:A7:EF:72:09:C4:33:22:CA
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019D27A909C461E1AB17C5C8DD36AFB31DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 1449
Signing time: Thu 26 Mar 2026 01:01:22 +0000
Manifest this update: Thu 26 Mar 2026 01:01:22 +0000
Manifest next update: Fri 27 Mar 2026 01:01:22 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: Y4YzeXX/ksOx6/NjqZOxc5RJeLfWjEZgwAqvY+rCmOY=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:09:c4:61:e1:ab:17:c5:c8:dd:36:af:b3:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Mar 26 01:01:22 2026 GMT
Not After : Mar 27 01:01:22 2026 GMT
Subject: CN=10cdcacff6c4f4bb19d5d4d4a7ef7209c43322ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:38:82:22:75:8c:8b:14:14:01:8d:09:bd:
6e:31:d4:32:62:73:3d:9d:b0:c2:3f:ca:4c:72:5a:
92:54:9c:a1:56:fa:ee:0c:fb:30:dd:c9:38:2a:31:
b1:68:d8:f4:12:b4:0c:1b:78:61:83:af:94:06:da:
14:3c:58:96:8b:3e:d5:f5:9d:17:ec:b8:a3:42:89:
25:43:8a:5e:54:86:c3:41:f6:42:56:d7:9e:d0:aa:
da:b1:06:75:2a:a7:eb:4d:d6:1f:d3:26:95:76:46:
a5:a9:e0:ec:1d:c5:eb:37:49:92:53:1f:37:dc:85:
32:d4:10:bd:c5:0a:9b:92:2f:5b:b1:02:63:08:3f:
97:e1:c3:cd:c3:22:57:51:1b:49:2d:86:c1:08:3f:
09:ae:a2:fa:ea:78:a0:16:16:fd:c7:ab:c5:45:a4:
e0:3c:82:5a:a4:a4:57:a7:15:65:63:ef:06:62:82:
f0:95:f4:6e:4a:8b:41:a6:a2:48:93:d2:05:8b:36:
a1:77:87:cc:5f:bf:4b:38:5e:df:50:a3:d7:d9:b0:
f5:df:c1:fd:12:21:7b:a2:4d:e7:1d:5b:24:a5:6c:
de:30:b6:a6:81:99:fa:dc:3e:b8:9f:0d:0d:0c:d1:
de:47:72:4b:a9:51:8c:8e:83:26:96:43:f6:c8:7a:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CD:CA:CF:F6:C4:F4:BB:19:D5:D4:D4:A7:EF:72:09:C4:33:22:CA
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:9b:46:92:7a:4b:a2:e2:aa:12:b4:ad:df:66:3c:03:7a:
6b:98:9e:95:0a:0a:21:28:da:ea:cf:f5:7b:9a:fc:56:77:03:
da:d1:64:5d:6c:26:20:d9:08:75:e9:b7:b6:db:fe:40:cf:06:
9c:c1:25:25:8f:61:0d:d3:47:06:4f:a1:75:9f:c0:38:36:1d:
b6:c5:f9:40:61:ce:b1:f4:12:ae:53:80:39:4d:ea:a7:22:e6:
bb:c2:2e:42:fb:c2:ff:d8:d4:c9:d4:9a:1d:18:de:9c:6f:b9:
e6:e6:f9:a6:b8:4a:3e:b4:09:cd:c8:7a:d5:34:6a:1c:32:6e:
f9:04:17:d6:02:05:99:80:a4:54:b4:03:66:16:f1:15:d8:2c:
45:55:1a:9f:ec:9c:9d:54:fc:02:42:cc:58:c3:16:bc:fb:66:
29:4d:dc:be:1d:14:82:87:bd:d2:ff:7a:bd:f7:c7:13:1e:f9:
70:04:f3:c1:08:ca:00:89:9f:6f:1f:af:dc:b0:a4:79:fa:53:
57:b7:88:52:87:68:cc:ce:82:38:ff:b1:fb:ba:26:5a:e8:87:
83:86:ca:5d:01:54:73:ee:df:f8:7d:1e:da:e9:26:84:c5:fe:
cb:fc:c6:a1:d6:b9:b0:7b:bb:17:46:f5:81:f5:e1:4f:55:0a:
bd:4d:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:39:13 2026 by rpki-client