Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: t6O8tAvepK2U3b0jHChMGF80yrBpXjksuyhB1ymtJw8=
Subject key identifier: 18:02:A8:FD:92:CD:EE:42:3F:8D:E0:F8:38:36:11:89:14:3C:31:5D
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019D28BB6A5E416F6048DD270FEBF777CD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 010A
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: XE6pgpJzfm408IolpFzSwOsierCGefrxS6HoW3kIXfA=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6a:5e:41:6f:60:48:dd:27:0f:eb:f7:77:cd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=1802a8fd92cdee423f8de0f838361189143c315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:d6:25:c8:4b:07:f0:0d:31:22:70:c5:8b:
ba:d2:44:71:01:21:37:c0:d4:1a:08:06:5e:2e:72:
83:43:c5:eb:9f:4d:fd:9f:af:47:ea:ac:a7:91:34:
75:a2:fd:17:46:89:96:0b:f7:fd:cf:fc:26:aa:b7:
fb:a0:75:eb:4e:21:db:f1:8c:67:38:44:90:cf:9a:
b7:44:f4:1b:4c:d3:15:bc:81:46:0d:d3:94:87:1d:
c9:cf:8d:ee:11:c3:d0:3b:42:dc:b9:3d:a2:05:ea:
2d:b3:58:ce:93:97:cf:31:d0:a2:7d:0d:17:27:c0:
61:c5:c9:d6:38:65:f3:0c:02:7e:03:3b:2d:30:c3:
f4:03:97:4a:72:95:44:4f:66:6a:37:53:3f:7a:8b:
a3:e6:2f:f0:66:cf:2e:16:13:51:d8:4c:fd:2b:75:
5f:e6:d6:5b:01:bc:1e:a4:53:6e:8b:95:8d:ea:3b:
3a:84:98:0f:54:d9:9b:22:10:70:91:6d:cf:7f:de:
d8:bc:91:36:ce:de:fc:34:d2:1a:75:d0:e2:ae:fd:
72:44:97:87:23:af:0c:c4:f5:a9:a0:fe:5f:0a:2b:
b0:24:90:bc:b1:4d:98:c7:11:e5:d2:cf:28:18:0a:
44:e5:2e:5c:ac:49:85:c2:9f:9d:be:05:ba:3e:1a:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:A8:FD:92:CD:EE:42:3F:8D:E0:F8:38:36:11:89:14:3C:31:5D
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:e0:0b:15:c5:25:5a:eb:86:26:05:ec:3a:c9:73:86:69:
01:46:d6:63:b0:20:3d:59:ef:96:fe:64:bc:67:97:0f:93:c7:
1b:b5:e0:cf:b1:81:17:9e:1f:b1:af:79:5b:c0:dc:c9:70:c1:
42:91:ab:20:25:12:07:68:7f:43:f9:9a:51:60:33:30:ce:95:
4e:00:76:96:b6:ba:ed:88:12:ea:ca:6f:a3:34:28:b3:7d:64:
55:a8:4a:db:7f:45:51:71:45:e3:b6:19:7a:59:16:54:8f:b0:
34:81:ad:06:54:9f:25:89:58:65:82:91:83:e2:97:91:97:43:
f8:67:19:c2:0f:4d:4f:54:5d:34:91:69:dc:07:ed:47:60:1b:
33:47:0e:ef:19:62:2e:4a:47:94:c9:8d:b1:fa:0e:a5:de:97:
de:28:60:51:d2:ae:0f:c1:91:5c:91:8a:1b:56:6b:57:3f:36:
d5:1c:b0:3b:dd:dc:5f:5a:5f:53:7e:d4:24:46:28:09:f6:6b:
22:de:21:26:a5:f1:0f:7d:25:04:23:ee:2f:92:72:3a:b7:8c:
5f:05:b7:7d:bf:00:de:ee:8a:52:1e:33:6f:68:4c:36:52:97:
97:cf:41:78:09:ef:55:c5:af:c1:8d:c0:bb:11:1f:bc:14:72:
1d:f7:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:50 2026 by rpki-client