Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: CKxOkxQ2ox209/bu2eJvBKz+jxxPIat4/mV/utg9QBo=
Subject key identifier: 2F:12:03:79:8A:6B:E7:40:DA:2B:66:7D:2C:B2:72:A2:2D:87:D1:E7
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019D277274F5B32D1A372C5B9C9D4B5B818E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: f9wKs/c+FbE95zoDx/woYYdRJAx/p9MbBmDONtLaFsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:74:f5:b3:2d:1a:37:2c:5b:9c:9d:4b:5b:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=2f1203798a6be740da2b667d2cb272a22d87d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:30:70:e2:4a:3c:88:b0:b0:e4:f6:a9:07:
31:ed:4c:0e:83:2e:8e:c8:09:32:27:47:3d:0d:0e:
07:47:57:e9:00:72:87:af:a8:fa:0b:28:76:e4:c4:
a2:d5:43:13:69:a3:02:c5:cf:0c:83:23:6a:1d:01:
f8:14:b2:dd:5c:07:62:62:22:ff:1e:d3:73:71:a6:
2e:99:fd:1a:61:5a:ba:1c:7c:74:d6:43:3a:b8:d1:
1a:de:ca:1f:af:c1:90:fc:74:91:95:32:1d:4f:b4:
ac:27:e1:5d:79:38:0a:ce:c1:4b:56:ed:b8:e3:f2:
41:c9:a4:b1:c1:eb:c5:87:bb:f4:f3:f2:1c:00:fb:
11:ad:cb:fd:fe:90:bd:d1:75:df:e9:5e:47:ab:b2:
b8:fe:4a:13:db:5d:b3:3a:e7:95:cf:34:fe:7f:bb:
9b:40:a6:be:95:b5:ce:11:27:ad:8c:98:4d:de:75:
7a:75:a3:0b:fc:6c:e1:aa:65:91:f9:73:68:4d:d0:
89:d3:2c:bf:1d:62:8e:d0:e6:16:2e:72:f6:21:87:
b6:66:4c:85:48:fc:90:ef:c7:19:79:40:7c:2f:86:
22:ea:60:f0:c5:ac:65:ab:3e:58:f4:a6:2b:41:fe:
62:20:82:50:90:3f:43:3d:f8:e5:2b:b0:96:a3:c4:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:12:03:79:8A:6B:E7:40:DA:2B:66:7D:2C:B2:72:A2:2D:87:D1:E7
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:00:5a:49:33:6f:e1:3e:52:3a:65:66:f3:ab:21:e7:14:
2f:f8:0c:43:0c:04:d6:97:e1:50:7a:03:4f:dd:2f:4e:43:ab:
77:86:ba:72:e4:21:87:8f:cb:5a:6b:04:e3:73:f4:6a:3f:f9:
76:b7:3d:a0:60:ca:24:5a:5a:fc:74:53:26:f1:d9:e8:e0:be:
fa:ef:a9:a6:63:50:c2:8c:50:2d:d9:5b:e8:e3:6b:c5:9e:03:
a1:01:5c:32:5e:d8:59:e3:89:c8:4b:d2:9e:02:9e:79:86:c5:
d7:db:79:fe:a7:c9:e9:36:34:5d:9c:1f:94:18:0e:56:72:ed:
c9:90:53:d1:ee:c5:af:e3:b2:3c:82:ac:4e:30:36:ae:b3:a3:
ab:b4:c6:d1:74:e0:4c:1b:7c:4a:81:e9:4f:65:f3:51:fa:cc:
67:8e:eb:b4:40:f3:35:7b:f3:1b:c4:e3:0b:10:bd:9e:96:2b:
2a:45:a0:97:00:c2:cc:1f:4c:e2:ff:d2:8e:21:7f:f5:83:3e:
51:92:36:42:98:2d:48:d6:54:1a:17:ba:c2:90:44:23:04:c3:
a5:af:7a:eb:71:4e:26:54:65:7e:6b:6b:bf:92:fb:8e:56:54:
9b:28:df:e3:4a:68:1c:25:f8:2c:65:c6:00:3e:61:79:86:08:
01:40:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:11 2026 by rpki-client