Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: LhzHYWC+f7D4eXcvpBIEfAULw6afThpL4HcfwbYt+nA=
Subject key identifier: 01:FE:23:D8:4D:6C:3A:08:A2:CE:33:2C:53:F3:2A:C1:DE:6E:5E:D5
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 019D2816BCF4C566110DA73BA607F94341FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: 8rQFycP0wCkWTOuHRSr62IO8dgE.roa (hash: MFuuptNilDQ2/pqjlNHx2pqwg9aDYbH9lFzucSAdE5E=)
2: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: u4ZDFNN0a9nOErAThYrDjy78wYK5dwQ97Qk93nulAq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bc:f4:c5:66:11:0d:a7:3b:a6:07:f9:43:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=01fe23d84d6c3a08a2ce332c53f32ac1de6e5ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:da:d6:01:99:ba:90:f3:62:f3:4c:95:8f:
76:1d:34:43:01:be:02:26:ea:77:8f:c5:06:0c:f5:
41:c2:58:b8:4f:c4:91:91:ff:a4:0a:d2:cc:dd:e9:
85:59:71:a9:aa:26:6f:7c:35:21:f3:40:76:f2:22:
9d:ab:01:e6:13:69:4b:31:2a:a1:aa:20:13:89:f8:
23:ca:99:b9:cd:73:a5:b3:82:2b:95:b4:8d:a0:a5:
40:8a:07:13:6c:23:a3:95:e5:98:e3:a6:4d:9e:48:
2a:cd:0d:4a:6e:8e:e2:7f:33:7a:78:1a:92:4f:a6:
86:c7:da:f0:c8:05:c6:ea:bb:f8:34:31:3f:66:0c:
dd:d6:27:e2:78:aa:68:1a:2c:46:d9:56:d0:51:ef:
70:3d:06:23:fe:cc:61:56:f7:09:4f:2f:f0:3f:fd:
86:30:f2:25:ac:07:f6:d2:11:4e:d3:4b:e4:2b:ba:
f4:15:74:d4:49:97:9d:6d:40:1b:45:e7:bf:7a:48:
d4:3f:ff:5e:e7:d7:9f:05:7d:04:74:36:b0:bc:e7:
f7:49:94:ec:57:f9:69:58:74:a8:d8:cd:20:26:e4:
ec:da:8d:bb:08:b3:28:9a:4f:6c:64:cd:0d:77:d2:
f9:86:7c:9f:31:cc:26:1d:c8:92:56:89:70:68:c2:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:23:D8:4D:6C:3A:08:A2:CE:33:2C:53:F3:2A:C1:DE:6E:5E:D5
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7a:3b:fb:b6:9a:3e:f9:48:4b:2d:8f:81:04:b1:df:6d:14:
96:f4:75:a6:bc:14:f0:9a:17:24:15:78:57:a1:f7:f5:24:75:
48:78:4c:82:1e:7b:bb:d8:e2:2c:ae:f0:33:74:04:f1:ae:01:
d4:06:c4:95:a4:f9:13:95:52:db:d4:e2:25:7f:99:eb:b1:cf:
ad:00:01:7a:e2:34:2c:47:8f:8a:b4:e4:c6:d9:09:de:ec:67:
9d:51:de:c0:57:b6:01:7c:17:25:98:ad:4d:5a:a6:a3:f7:e3:
b2:35:2e:89:37:2e:a7:55:91:a4:12:a7:ca:d1:4d:4d:67:7c:
14:b3:4b:d9:2c:17:80:24:2d:ca:1c:f0:e4:12:ec:e5:50:f6:
2a:5c:b1:fa:c7:76:26:85:a9:f5:2b:0e:38:c0:8b:5c:8b:f5:
70:06:44:35:9d:45:b0:23:04:e0:7e:3f:c5:3c:5f:a7:a6:e3:
b1:a9:49:c2:0e:cc:a7:b9:17:ea:3d:8e:00:b0:1e:d3:c7:a4:
7f:2c:47:46:13:c1:ff:04:93:6e:c2:4b:6a:a6:f5:84:32:80:
60:b3:74:c8:78:d9:b6:7c:d2:1e:91:56:3d:7d:bb:5c:92:61:
50:9b:ef:61:f4:72:9d:bd:cc:2d:02:57:4b:8f:be:c9:86:8b:
95:45:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:13 2026 by rpki-client