Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: JELdoTyPMcmTLymPl55nQhyQcCRm/b8z1QZE9LHwyc0=
Subject key identifier: 0A:B1:A5:99:D3:53:01:7D:07:8A:80:39:50:F4:48:CB:88:2E:C7:56
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 019D29293F3A5A081CD12A618CEC828DED02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: ZDyULkY7XdQ11kYjdum05r2DwuM.roa (hash: zq3BSwMTqEueaum+sWRBlqipTKD1rJ/mmOl8XQsz7Vs=)
2: dAmCb4Q0Lu8OSnL465WyYmvHdqs.roa (hash: ihhOeF2biIt0LZI2QoL/OX+WXgwfGmKMeTYYQxzMVw4=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: Ehoyau4vYfOaiQIp/BLQ5N+/iZKKPVS6G21yPisc4Sg=)
4: rU_aup43-JcvplAJDdsQtTE8z3s.roa (hash: 8xZqax6dDOxidmRdOp80eUZcDr3nHq4tvorScngCUzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3f:3a:5a:08:1c:d1:2a:61:8c:ec:82:8d:ed:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=0ab1a599d353017d078a803950f448cb882ec756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:ce:69:a9:b1:96:02:26:20:0f:9a:78:6b:
22:e1:f3:f7:8f:db:93:bc:a3:0d:59:6b:30:83:4e:
04:b0:c7:38:64:0a:9c:c3:93:77:5e:34:b8:7a:ac:
59:a8:09:ea:4a:88:65:eb:86:6f:43:6a:2c:39:a6:
65:d6:db:55:89:87:72:fd:5f:57:a2:54:18:e4:e9:
1e:22:64:78:96:e3:0d:58:87:47:7d:c8:aa:ba:ab:
55:ed:2e:11:48:a2:9a:ca:44:42:c6:fe:84:83:32:
13:23:41:27:c5:d3:39:5a:d7:45:3a:66:91:d5:bb:
00:01:b7:79:16:cc:98:da:4e:19:bf:3c:52:66:06:
52:44:b6:02:2c:79:5e:af:e7:62:0b:2b:a4:0d:fd:
fe:a3:c7:91:8e:e2:07:da:43:c0:06:70:e4:95:a6:
43:ff:41:3d:8e:51:52:53:09:34:63:7a:cf:3c:90:
9d:0a:af:26:e9:b7:a3:b7:7c:6e:ba:3d:3c:81:b2:
15:89:7a:0c:ca:02:0f:14:a7:8c:8d:2c:22:72:63:
3f:ec:37:5b:2a:41:85:c9:35:1a:4b:9c:e2:9e:0c:
e4:2c:c5:6b:a5:75:58:bf:b4:43:d8:6d:51:b3:0a:
70:14:20:bc:00:18:6b:c1:26:83:a6:50:11:27:3c:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B1:A5:99:D3:53:01:7D:07:8A:80:39:50:F4:48:CB:88:2E:C7:56
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c0:ec:4a:46:cb:8f:5b:53:4d:0d:ee:3d:55:54:b5:90:34:
c8:b0:fe:4e:03:46:5a:3b:e4:80:fb:2b:b0:09:b0:9a:4c:93:
b2:28:c3:b9:ed:31:30:84:5f:07:78:b8:2c:fa:7f:17:54:8a:
f7:65:ae:29:30:81:ee:fc:a1:f3:98:33:72:87:2e:67:0f:fc:
b0:9a:71:45:2a:1d:41:e1:7f:93:10:5e:6c:ff:41:52:74:8e:
ee:f1:b5:97:60:6c:f8:db:c5:89:c8:96:8c:65:8f:8c:31:75:
17:9b:e4:81:7d:11:78:ef:c8:85:12:7a:3a:1e:0f:4a:a2:22:
99:c6:81:2a:c2:92:58:8d:ed:78:13:c9:f9:93:7e:84:55:b6:
01:eb:b4:10:19:6f:ee:e9:58:f0:e9:09:74:c1:b3:f0:cd:77:
03:b2:42:b7:ba:33:4b:36:c3:6f:4d:01:e4:df:48:22:e8:ab:
8c:bf:6d:25:f0:57:0c:b4:5c:99:e6:0a:7a:df:93:9e:f1:6d:
63:cb:5a:62:00:9e:93:a3:87:70:aa:d6:9d:3c:78:2e:8a:38:
e2:42:68:f0:11:4d:a5:6d:ed:0d:99:7b:89:c5:db:34:95:7d:
64:ee:59:f3:9c:08:57:77:7a:90:8d:48:c9:96:c8:5e:91:7a:
80:37:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:18 2026 by rpki-client