Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: jmIFt3pNczFccrTfUMngYUcd2Jz5XKPbWv29u9qNWBc=
Subject key identifier: 36:F8:85:48:E1:B8:21:52:30:3B:A5:57:DD:95:5D:CC:48:FD:AF:32
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019D2961A34CBF7B3A034385215C6748BADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 171F
Signing time: Thu 26 Mar 2026 09:02:37 +0000
Manifest this update: Thu 26 Mar 2026 09:02:37 +0000
Manifest next update: Fri 27 Mar 2026 09:02:37 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: f53Jq/1+F/3p5GkmcmWXh45SfV/oWx4wEx74ElNQG9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a3:4c:bf:7b:3a:03:43:85:21:5c:67:48:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Mar 26 09:02:37 2026 GMT
Not After : Mar 27 09:02:37 2026 GMT
Subject: CN=36f88548e1b82152303ba557dd955dcc48fdaf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:35:8a:fb:8f:f0:77:68:77:2d:29:68:cc:
29:e6:56:39:cb:9a:d2:23:dd:01:15:96:79:7f:7c:
ad:13:16:e8:e6:ab:8e:cb:4f:a5:f2:fa:f0:a5:98:
ae:aa:04:17:41:86:ec:4e:58:bd:59:47:d2:36:d1:
c1:5d:2f:99:53:d9:45:ab:9f:6d:8c:1d:38:33:66:
d9:73:d6:ac:b6:4f:f6:78:f4:e5:bd:72:50:16:fa:
f4:06:73:a9:b4:71:2d:11:09:8d:f0:fd:93:d5:a3:
27:1c:4e:55:d9:5a:2f:03:ae:5b:21:db:b8:03:7d:
09:3e:bb:3c:13:eb:a5:a0:85:40:38:9c:82:14:eb:
75:87:e3:78:d4:65:14:0a:15:42:76:71:4b:1c:e8:
49:0c:ac:04:85:4a:09:93:ec:b4:ca:bb:15:9a:4f:
20:b6:7b:63:1d:2c:4f:8e:d9:80:ae:b1:9d:5f:1a:
6d:d8:08:b1:03:91:e6:c3:4f:a7:eb:8e:ac:f9:d7:
ea:b6:7a:03:57:4a:7d:fd:85:9c:6b:6b:5d:df:1e:
c2:3d:58:1d:cf:33:68:c8:93:6d:cb:30:a0:ff:db:
50:35:a9:e1:da:f4:b5:06:02:3a:0c:94:42:ad:bb:
d1:14:9a:4b:8e:33:f4:ae:fe:79:eb:ed:77:6d:48:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:85:48:E1:B8:21:52:30:3B:A5:57:DD:95:5D:CC:48:FD:AF:32
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:8e:44:1e:a9:e1:86:5d:b9:cf:88:4d:8e:b1:ba:d8:6e:01:
c3:af:37:a5:e4:d6:29:6c:32:56:b8:57:2e:01:f5:a7:ba:16:
ea:47:b5:d9:05:13:c9:b5:69:24:f1:1c:cc:4a:bb:7e:44:4e:
dd:a6:f6:07:c4:14:b6:ce:15:8e:1d:67:83:b3:95:75:79:e0:
8e:f8:1a:b2:40:a7:4f:2b:84:89:82:ea:78:0f:e3:49:3f:f4:
fb:fa:cb:3e:0f:80:be:b3:0e:17:61:61:4b:16:15:6c:07:81:
dc:16:d2:2f:c5:2f:8b:8a:75:97:e8:4d:1f:39:61:f5:b5:91:
44:fc:13:b3:e3:d2:0c:f4:76:9c:79:a2:7c:da:c8:5c:0d:33:
c7:65:94:25:c6:61:25:4e:50:0e:07:33:fe:99:98:e4:68:cd:
38:f1:9a:6e:a6:32:de:01:e7:9c:97:ab:0d:62:2b:e5:5b:d2:
10:52:5c:05:67:1a:93:cd:23:9f:f0:36:73:0f:77:f0:59:1c:
d6:3c:27:22:dc:bb:7f:3b:ba:be:67:27:14:9b:f5:0a:01:d8:
d5:11:1c:36:77:bc:d5:31:b7:ea:38:84:86:36:70:53:61:fd:
33:46:d5:32:76:ba:ab:6d:d9:ca:bc:f4:3a:31:28:78:09:4c:
3c:d8:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:28 2026 by rpki-client