Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: ame7HkBfGstMBfBuBYDweurPDIXzlBDPMybZhmwxlgk=
Subject key identifier: A8:E2:4E:2B:AA:C0:41:B9:F9:5E:44:03:AF:D2:6B:17:F5:B8:DA:03
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019D2A3BC4716EEB621652600408B44AD9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0BA0
Signing time: Thu 26 Mar 2026 13:00:53 +0000
Manifest this update: Thu 26 Mar 2026 13:00:53 +0000
Manifest next update: Fri 27 Mar 2026 13:00:53 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: apUGvJUGtraSMrVRUVm+aLlYT1oly+J2BlkCBUykg7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:c4:71:6e:eb:62:16:52:60:04:08:b4:4a:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Mar 26 13:00:53 2026 GMT
Not After : Mar 27 13:00:53 2026 GMT
Subject: CN=a8e24e2baac041b9f95e4403afd26b17f5b8da03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:f8:b7:d7:bc:6e:0d:a0:a4:e0:88:c7:e5:
3c:56:03:39:c4:5a:04:49:96:1b:8f:98:5a:65:b2:
51:23:2e:87:64:15:d0:27:15:8e:a7:8a:db:6b:b5:
bb:43:8e:ee:9a:0b:b4:a8:34:32:79:7a:0c:bf:dd:
65:f8:47:65:01:25:60:06:40:7a:5d:08:22:89:ba:
4a:f9:b6:a6:2c:a1:59:9a:a9:6c:3a:8a:0e:74:39:
d6:3f:ab:fa:5c:1f:5c:25:f3:65:54:d7:a1:46:07:
68:cb:5f:04:1c:3d:fa:f0:3d:45:e4:a1:8e:8c:0f:
5e:0e:1b:9a:8f:29:85:26:f2:a5:b3:0d:4e:17:07:
6f:5a:de:87:94:b3:95:34:66:8e:f4:08:b1:4b:28:
21:39:27:cf:2e:ad:b3:cb:08:96:b3:f2:0e:b8:f6:
5d:7a:49:83:ff:4d:62:0d:ee:8f:27:ab:f1:4a:98:
07:7e:08:80:af:77:41:08:f2:10:81:f6:ab:bd:4b:
f4:49:02:6e:f1:a8:d1:8e:48:a5:20:63:78:1e:dd:
3e:75:25:c9:f5:f9:8d:40:65:15:20:7d:77:25:37:
8f:fa:2b:4c:24:da:ab:fd:23:da:91:3d:ff:87:c8:
50:fa:b7:3a:8b:da:5e:4c:19:cb:81:14:1c:1b:d0:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:4E:2B:AA:C0:41:B9:F9:5E:44:03:AF:D2:6B:17:F5:B8:DA:03
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:aa:6e:38:83:90:59:d5:6b:07:d2:41:86:17:be:89:68:10:
dc:2a:87:f0:0d:9f:89:b8:97:eb:e8:cb:99:e3:01:ab:e5:08:
f2:0c:0b:b6:84:75:be:34:0e:ec:4f:21:ab:56:b5:9e:39:fe:
98:2e:ad:e8:91:be:29:e7:71:c0:f4:3f:24:d8:5c:8a:f2:7b:
4c:c7:ba:8e:56:18:35:b2:c2:01:37:47:98:f4:f2:01:2a:a6:
48:5c:88:b7:74:06:80:81:80:52:9a:b5:d1:c7:63:69:1f:c0:
55:d0:26:0b:93:a0:da:0c:6c:a6:ee:1a:55:a3:90:df:2c:1d:
d9:88:51:c9:01:89:8a:0d:55:f7:45:4f:6a:e8:f3:29:98:19:
72:f8:0e:ea:e7:eb:51:a2:46:6f:b5:6c:ed:34:63:e4:01:b9:
d0:07:6c:e3:e2:e1:8e:aa:88:1f:c5:e7:a0:ed:5f:d0:96:cf:
eb:42:b9:05:b2:42:53:83:66:8a:51:4e:b1:3f:21:fb:fe:43:
62:d9:ac:af:62:32:84:d8:db:96:31:25:07:7f:ae:40:c7:dc:
5a:fa:3b:81:2f:34:6c:91:71:15:4e:7a:ee:9f:58:b2:ff:c8:
e7:43:88:ee:2b:d6:8e:70:e4:71:5d:4a:76:4f:f5:a4:ba:ca:
40:a4:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:48 2026 by rpki-client