Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
File: hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft (raw, json)
Hash identifier: 3j1YF/TQPXhprkN5ZC6d7cLMLcEvv31hMH/HYRoNgj4=
Subject key identifier: 5D:5A:F6:B7:06:52:A6:3C:C8:00:75:00:BD:80:8D:8D:CA:8D:08:53
Authority key identifier: 86:4D:2F:0C:46:75:2B:F0:69:73:8F:BA:67:EF:E2:F6:B8:B6:2C:C4
Certificate issuer: /CN=864d2f0c46752bf069738fba67efe2f6b8b62cc4
Certificate serial: 019D33ACFB629D97BAAA4C7ACF9D77289884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
Manifest number: 0110
Signing time: Sat 28 Mar 2026 09:01:07 +0000
Manifest this update: Sat 28 Mar 2026 09:01:07 +0000
Manifest next update: Sun 29 Mar 2026 09:01:07 +0000
Files and hashes: 1: R9NGLutQdVO4LXCQi00sG9rliWM.roa (hash: +uY9BE883q1EK9ehNx5rRzDlM1yOOZRz+kA9g1qIqVk=)
2: hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl (hash: mo3RRTVQ56av7seFw04cMMm6EV3G1cuHQQUQbgQdXBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:fb:62:9d:97:ba:aa:4c:7a:cf:9d:77:28:98:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864d2f0c46752bf069738fba67efe2f6b8b62cc4
Validity
Not Before: Mar 28 09:01:07 2026 GMT
Not After : Mar 29 09:01:07 2026 GMT
Subject: CN=5d5af6b70652a63cc8007500bd808d8dca8d0853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:e8:4a:ae:e0:4b:be:6a:20:42:e3:cf:5c:
56:98:0b:b5:5d:19:1d:c9:df:a5:78:b5:00:3a:f2:
81:23:52:c7:5d:83:47:b3:a9:ef:93:19:59:08:0d:
c2:ea:a2:5e:c2:76:a5:5a:43:a4:fe:ed:14:5d:23:
94:a6:29:bb:03:db:40:f6:b7:e7:75:85:6e:1d:5b:
7c:2d:2a:69:12:41:ca:ce:a6:fc:12:c4:9b:4f:5e:
b6:26:b9:01:b2:7b:88:bf:72:6c:dd:dd:48:50:81:
d4:ce:91:d0:0e:84:d2:2c:02:f2:7b:15:75:e8:69:
b9:98:49:61:da:a4:ad:9d:ae:83:b7:b5:cd:2f:98:
7e:f8:fa:cf:15:5e:6a:31:54:45:03:d7:14:f2:d0:
4d:f4:79:c2:81:ca:2e:32:b8:4a:6e:c1:4d:bd:e9:
0b:75:47:c1:5f:d1:d4:b4:85:aa:68:b8:52:56:05:
e7:e8:5a:c9:14:c9:c5:b3:5c:ba:cc:b3:40:0f:eb:
a6:0f:42:45:fb:1f:df:02:bb:1b:97:7c:20:18:9c:
87:34:cb:11:93:5f:d0:60:0e:ef:74:53:c7:06:50:
c4:a0:f9:e8:30:e3:e5:2b:e3:92:dd:53:5c:76:bb:
66:ce:ee:dd:1c:75:84:62:6a:8f:f1:79:09:4e:2d:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:F6:B7:06:52:A6:3C:C8:00:75:00:BD:80:8D:8D:CA:8D:08:53
X509v3 Authority Key Identifier:
keyid:86:4D:2F:0C:46:75:2B:F0:69:73:8F:BA:67:EF:E2:F6:B8:B6:2C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b8:58:b2:25:0a:c4:72:f7:f2:26:f1:50:cd:0c:07:f6:24:
8e:72:88:3e:6c:22:c9:a7:f0:4f:a7:65:20:4b:59:6a:b4:6c:
4c:6e:10:13:57:1f:aa:7a:fe:68:07:f8:a7:96:52:e2:fb:65:
57:f5:3a:41:86:c4:54:85:ce:0c:bb:39:7c:e8:8e:cc:55:d1:
81:95:33:4a:a8:71:5b:54:ef:e2:fc:b5:f9:c1:e6:4c:04:60:
db:9a:45:12:3f:6b:de:44:5f:3f:e9:7d:08:03:72:d2:36:c0:
e4:8a:77:64:81:eb:0b:71:cd:e3:27:05:1b:75:bd:f5:a2:51:
52:2a:f9:0d:fe:16:ff:b7:20:e2:09:38:81:b9:27:c0:85:f9:
d9:e6:48:88:0a:df:36:51:83:62:e9:70:39:20:c4:99:32:4a:
37:3b:17:6f:fe:e0:04:52:d9:3f:25:e8:3a:a7:25:6e:3e:57:
fc:55:0f:9b:74:62:56:1b:5f:07:f7:f7:61:c5:2e:98:cc:0e:
c0:a8:06:18:fd:35:ff:9a:6e:b4:3b:c9:f5:3c:9f:dc:cc:81:
0c:64:ab:9c:88:07:59:fc:b0:c6:69:cc:62:b3:e3:52:e2:b2:
83:d0:12:b4:a1:44:58:7a:e7:19:b9:80:5d:9c:8a:a9:0b:73:
5d:9e:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:46 2026 by rpki-client