Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: v276xX5mNZA6EcUGCfQj36pGA1QxQSmOXZVARnz3cwc=
Subject key identifier: BA:0F:9A:85:56:36:7E:9C:2F:A8:EA:15:1E:FB:2F:72:4F:64:0E:18
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 019D2884193A7C4E39184F6DB62715094A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 05:00:38 +0000
Manifest this update: Thu 26 Mar 2026 05:00:38 +0000
Manifest next update: Fri 27 Mar 2026 05:00:38 +0000
Files and hashes: 1: 9j3nuOJhYS9_ZFXqxcrD7kXzXn8.roa (hash: yrqM3YmDVW0i3nBRQF8ojpl3PLx4I5epyyrEiw1s4Ho=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: ZWSUK/6s8YjGvskBPmbb7ZKHPF4BBJ3UBaWwdHOxm8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:19:3a:7c:4e:39:18:4f:6d:b6:27:15:09:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Mar 26 05:00:38 2026 GMT
Not After : Mar 27 05:00:38 2026 GMT
Subject: CN=ba0f9a8556367e9c2fa8ea151efb2f724f640e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:e5:86:1f:a1:33:29:de:f0:60:f9:b0:be:
ce:66:52:2f:1c:d3:75:b1:b5:31:a0:bf:54:f1:d2:
72:13:35:05:9b:bb:f1:d8:5d:5a:b4:24:98:9c:44:
b4:51:e3:3d:b1:56:b5:9d:21:cf:20:44:d2:cf:50:
96:65:65:ac:9f:85:88:ca:16:7f:ff:54:1e:e4:d1:
dc:56:e0:f5:d7:d0:1d:52:f0:4c:05:b7:60:06:a2:
ef:b1:f0:dc:73:55:73:9e:4f:d3:06:5b:2d:69:b8:
40:7b:3c:04:08:c3:d9:d4:24:db:d7:43:54:78:25:
d0:e9:2e:77:7a:3b:d9:ce:f2:92:4f:a0:b8:ff:87:
63:c3:33:48:f9:db:cb:b4:76:e3:31:d8:cb:0c:b8:
81:ab:72:ab:67:bb:3b:dd:46:30:a0:8f:2f:8e:c0:
b2:db:e8:a8:84:4a:c7:67:7b:56:cb:c9:59:98:0b:
65:44:eb:c6:d6:bb:71:aa:17:1d:e1:cf:4e:ca:2d:
3a:41:b2:c0:6f:eb:5a:a0:64:d6:43:a3:3a:05:a7:
7f:e3:e8:92:b3:9a:a7:19:8d:0f:82:49:45:e2:6f:
8e:ed:3a:71:e5:f6:ff:6e:ee:a0:91:cc:4b:57:38:
9e:f7:99:f0:ef:21:d9:b8:55:df:d6:ac:c0:ee:97:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:9A:85:56:36:7E:9C:2F:A8:EA:15:1E:FB:2F:72:4F:64:0E:18
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:65:f6:92:4d:9a:d2:50:2c:89:8c:ff:5d:5d:db:a1:6f:30:
06:40:a9:7b:7d:02:69:3d:35:a8:e8:37:79:1d:35:db:c1:e3:
c4:b8:05:8b:09:c8:49:9f:bf:62:d1:c8:66:3b:51:89:72:c0:
14:0c:d1:e5:1f:6b:7c:6a:ab:cd:9f:6f:56:1e:e3:e6:79:47:
2b:e5:67:50:c3:b3:01:b0:48:ef:09:52:0c:a4:44:04:d5:bf:
70:2c:d6:d7:23:2f:83:00:9a:21:40:d6:0e:63:82:6e:b0:fb:
1b:6b:71:7e:bd:e2:8e:8a:b7:8a:d5:5b:4b:4e:6b:21:c6:c6:
f9:48:46:9a:d7:b8:aa:33:10:7c:30:72:8f:cd:eb:dc:bb:65:
e8:08:c9:79:2c:39:c4:a4:83:12:09:80:a6:ff:4a:c0:9a:ec:
78:3c:e0:50:f4:35:8c:13:ad:73:99:b4:f7:36:5a:9d:83:47:
c0:62:1b:43:65:f8:c5:f0:73:f4:12:a3:6a:fe:fe:40:5b:ea:
ee:4d:a7:10:c2:86:69:58:20:0b:84:77:18:23:1a:9d:29:fb:
49:c7:a1:31:5c:a9:fa:55:c7:ac:36:a0:21:9a:5c:98:e9:49:
7c:1d:6f:f8:a9:0f:6e:b5:51:b2:b6:ae:e6:11:d3:fc:10:a2:
17:4e:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:03 2026 by rpki-client