Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: EO+oPTr8j8Dl9rx8TH8XM/llhRP7lQFDeUdHo59C9ek=
Subject key identifier: CE:60:D3:FA:EC:DE:97:5D:37:DE:C0:EF:3C:E7:A9:65:A3:51:D3:CF
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019D2884AB4E0E77DC474BB5F64E9408616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 1388
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: B4JUwxwZkNDd5c2WvCC3dbWwQp6bBsKjAxyvMdhKckY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ab:4e:0e:77:dc:47:4b:b5:f6:4e:94:08:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=ce60d3faecde975d37dec0ef3ce7a965a351d3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:2c:af:11:f8:e2:60:6b:f2:1a:24:d8:c7:
18:e8:3c:11:97:f6:a6:d4:6f:69:65:5e:fd:ae:67:
4a:ea:2e:ca:c1:7d:db:aa:2a:1f:3e:86:b5:7a:56:
37:d5:7e:71:44:a5:87:01:45:45:cb:5c:d5:b4:fb:
c5:ad:a1:3e:d4:dc:df:7f:0a:ec:a9:a6:f9:b6:3c:
50:61:67:0b:4f:1d:8a:1a:01:69:bc:10:90:40:74:
66:2c:d5:e6:8d:b3:6d:7c:66:bb:fe:ad:34:e0:45:
9a:b6:64:74:f8:d3:90:88:17:e0:06:36:7f:43:4f:
67:f6:01:d8:09:e1:24:45:a9:ab:58:e6:30:f7:63:
e3:80:76:e7:73:ce:2c:8e:ef:df:a7:f6:68:d1:a4:
9b:de:a3:00:d0:5f:eb:7b:f1:62:92:48:2e:4c:26:
27:f3:74:7b:fe:45:4a:ec:a0:69:f4:1c:5d:78:59:
f3:f5:3d:6e:79:b2:97:e9:cc:3e:e2:93:8d:64:4e:
cd:b0:76:cb:f7:c1:36:2c:9a:70:56:05:1b:9d:f4:
85:43:a3:12:f5:d2:f6:c1:b6:e0:b8:94:8e:88:83:
93:bb:18:ca:a2:9a:19:16:be:09:88:ba:42:1b:ea:
06:3e:2e:2e:82:36:ec:75:b4:fe:8f:4d:68:61:8f:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:60:D3:FA:EC:DE:97:5D:37:DE:C0:EF:3C:E7:A9:65:A3:51:D3:CF
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:36:a9:ec:0a:d1:1c:f5:67:60:90:73:9f:00:f5:07:52:c1:
e9:1e:42:7d:28:63:ce:8e:c8:f1:df:9b:d1:49:ba:f0:ea:7d:
4d:80:68:31:7e:51:60:ff:cb:2e:19:b8:6e:ca:aa:bc:da:1f:
6d:44:62:48:fc:48:ae:92:c8:00:ba:6c:9f:82:eb:e3:fe:c5:
4a:f4:ed:7d:43:39:e9:e7:7b:b0:b6:85:2c:cb:40:14:e5:2c:
6c:8f:3b:09:09:70:f0:e7:8a:57:1f:0b:cd:eb:f2:b0:35:77:
f5:89:53:ac:39:9b:da:6b:61:52:2a:de:6f:c1:6c:90:b6:ba:
33:e0:e3:37:1a:f6:85:60:b0:af:22:49:48:8e:46:81:2b:e9:
7d:e5:4d:49:d6:c9:d4:2f:60:43:88:a7:06:30:2d:47:9d:8f:
5d:58:98:2f:9c:ba:5b:6f:e5:4d:98:c0:92:aa:94:b2:21:37:
e8:3a:6e:cd:92:51:15:c4:65:85:ba:64:2b:36:c4:a1:a6:f0:
6f:d5:d6:13:06:c2:42:7f:a9:6d:15:68:8d:95:e5:84:6b:b2:
6f:b7:68:d8:60:7e:a0:3a:50:26:b8:ed:de:7e:2c:b2:70:ee:
34:c1:98:78:6d:d3:7c:34:d9:47:e4:0d:65:3b:21:d3:0a:65:
81:10:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:52 2026 by rpki-client