Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
File: hcAE7tTPscJ2cTgiL_wJUooqXIY.mft (raw, json)
Hash identifier: 6m3BomFqkojDL8N09BBnoT8KOT1X3nwRBvGtkKsO7Iw=
Subject key identifier: A4:71:C9:7E:5A:9F:7E:ED:6C:CC:E2:9D:2A:29:06:2C:A3:9E:8D:44
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 019D27A917F279D49BDC4A361ADF36E7C342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
Manifest number: 0244
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: 5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa (hash: Nj/dFE0ShVqEkO5zoMZ/0/zZii3em6nlg2XD7KAhuw8=)
2: hcAE7tTPscJ2cTgiL_wJUooqXIY.crl (hash: 4AMzMFxlnyqBuO6S6AFbXclWDrTV5OrFbVDWCFLbkw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:17:f2:79:d4:9b:dc:4a:36:1a:df:36:e7:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=a471c97e5a9f7eed6ccce29d2a29062ca39e8d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:2d:0e:f1:56:e1:02:46:9c:3c:62:b5:91:
6b:0f:4a:ed:58:2f:c1:09:78:66:63:bd:9a:c8:ec:
81:05:a8:27:b6:20:f1:6b:40:ea:d4:fe:8a:71:e6:
fa:60:57:5c:9a:9f:f7:7b:a4:90:10:96:26:83:35:
cd:53:c1:79:4e:49:61:ff:8f:fe:52:03:0a:be:04:
33:de:12:bb:d4:77:34:11:6b:5a:a1:8f:8a:09:7c:
4f:b9:ac:9b:9d:72:3a:88:db:0c:7c:43:07:49:71:
26:d6:c7:37:e7:02:63:32:d0:ff:d0:e2:81:32:1c:
05:7d:4d:5c:ec:89:fe:18:ec:10:05:54:38:3e:8f:
4a:73:4d:bd:bf:59:8c:0a:62:65:5d:33:9d:f8:05:
28:9b:2a:d9:d8:3a:1e:2b:47:61:79:9f:d7:c8:d6:
99:53:a0:23:04:b4:fc:79:43:30:c6:1e:ed:05:95:
5a:93:f3:47:f7:d9:56:9c:b3:43:b2:76:93:3f:c7:
e7:8c:6f:a2:50:8d:2c:c7:b8:17:53:75:bc:05:b7:
73:10:a8:0f:12:2e:24:64:c2:49:b0:da:a2:fc:5f:
05:e2:57:d2:63:8e:33:ac:7b:b6:1d:0e:bf:37:81:
89:a0:e5:85:df:2c:fa:b9:4c:11:80:3b:a0:6c:84:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:C9:7E:5A:9F:7E:ED:6C:CC:E2:9D:2A:29:06:2C:A3:9E:8D:44
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:06:23:e2:1a:c3:e9:65:ec:1c:35:82:ca:18:c2:a1:9f:
46:61:18:b2:8b:cb:f7:ee:12:68:3d:d3:2d:02:62:73:52:08:
ae:8f:dd:17:5a:a0:05:1a:76:f6:ff:17:c5:9d:5c:fe:e8:ed:
21:90:10:57:59:8d:ef:c9:6b:24:f6:ae:52:54:10:cc:1e:35:
ba:94:2a:bb:cc:ef:01:ed:98:64:95:b8:51:c2:f1:79:4c:0a:
f6:22:6e:06:77:70:db:a1:66:6b:fa:85:67:1f:52:59:db:18:
71:3e:b3:f5:fe:d6:5c:8e:f4:34:a9:49:de:36:d1:87:2e:d7:
48:03:06:02:45:2c:4b:d6:1e:b5:cd:1a:a5:62:99:d8:0a:a6:
9e:0a:7c:7a:fc:e7:d6:66:8c:2c:76:79:ed:93:10:aa:a1:30:
7b:83:50:cb:4c:36:d6:3d:ad:d7:ca:e2:be:a0:3f:1f:0c:6c:
f5:4e:fa:20:dd:e2:19:8d:74:ec:cb:e6:22:51:8b:24:58:ca:
25:ed:24:63:8d:60:ae:6f:f7:83:d6:9b:24:d7:80:c6:aa:18:
72:9a:55:53:5b:18:8e:78:8e:a0:bb:0c:16:9d:5e:cc:8d:d3:
55:d5:06:25:4d:9c:e9:eb:0b:37:af:60:f4:be:b5:a0:05:25:
35:c3:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:17 2026 by rpki-client