Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: xlEJzUDgsP6eRGhAL1Edw+mJ9szBQMuiHZ99X6ukBdI=
Subject key identifier: 60:C6:B1:4C:29:25:FA:A2:46:8F:26:A2:14:C4:81:75:27:44:D1:B4
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019D2928FC7431DA0AAEEE88C5FE3D0E4DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:00:44 +0000
Manifest this update: Thu 26 Mar 2026 08:00:44 +0000
Manifest next update: Fri 27 Mar 2026 08:00:44 +0000
Files and hashes: 1: MiEsRtqbk8f9Jyv8IyxMZOx2e2E.roa (hash: 0+M0KN/0qMyXVee1yKyBcwMkTGKxSKcvVUW4ZAOcFIQ=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: EilajEvLn0VaODc2fI015B+EwCS0XLNZJV27jIE943o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:fc:74:31:da:0a:ae:ee:88:c5:fe:3d:0e:4d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Mar 26 08:00:44 2026 GMT
Not After : Mar 27 08:00:44 2026 GMT
Subject: CN=60c6b14c2925faa2468f26a214c481752744d1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:a8:68:1f:6a:00:f8:fb:c3:94:e5:78:c8:
d0:4b:2d:1c:74:ca:86:88:fb:41:74:ab:ab:e1:17:
86:f5:52:53:e4:bf:e3:b9:16:aa:51:f8:31:aa:f9:
d1:a0:1a:43:11:c2:cd:72:d2:0a:0f:5f:f9:2d:ba:
e4:11:0a:a2:b9:32:08:a6:83:1e:b4:50:81:30:a0:
3a:ce:e3:28:20:01:eb:40:cf:c1:ac:eb:90:c6:16:
f2:63:7d:4e:a4:88:6c:4a:90:e0:dc:ab:d4:b9:54:
19:72:e6:35:77:1d:0b:53:0f:c3:0c:80:48:32:ee:
c2:34:ef:fb:3f:28:79:f8:31:db:01:e8:a5:ab:91:
d6:6c:fc:67:bc:21:e7:51:ed:b8:e2:f5:69:f7:e1:
26:41:31:4a:f5:ac:d9:b5:1a:26:96:f7:df:a3:55:
9c:94:28:8f:24:46:53:12:c8:5f:21:ee:9a:6b:f0:
8d:ea:c3:da:f6:c5:09:c4:53:fa:a5:e1:3c:e2:e3:
8d:c8:fb:a4:77:b4:c9:7e:6a:cb:83:fb:e4:7e:6c:
11:a5:47:5e:27:f6:91:e6:b6:f8:48:70:d0:71:e3:
5f:d2:0e:eb:2e:3d:3f:da:d7:dc:b7:d2:39:be:e0:
4b:f0:06:25:6b:ae:9b:fc:00:75:94:d0:96:de:40:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:B1:4C:29:25:FA:A2:46:8F:26:A2:14:C4:81:75:27:44:D1:B4
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:57:b2:1f:85:9d:9f:80:99:40:54:19:b7:dc:cb:7e:86:e1:
a5:28:85:1a:eb:64:a0:44:b3:32:d8:62:ed:83:df:d4:91:ea:
07:cf:30:7d:f3:ce:df:48:61:6c:9d:76:20:48:d2:56:e2:e4:
84:07:fd:e9:4d:b7:5e:e4:eb:f7:21:df:5e:fb:07:27:84:90:
ff:a1:4f:b5:37:5a:2f:cd:3f:3a:38:e4:72:e1:83:18:61:9e:
e8:69:c8:4c:6e:71:35:8a:d2:1f:a1:cf:c2:1f:f2:fd:eb:59:
08:cd:44:02:e3:a9:49:05:6a:2d:36:c2:37:bb:59:9a:15:b1:
df:45:fa:d2:6e:40:ba:22:7f:d6:40:0d:14:52:a1:06:84:cd:
4a:48:a6:fb:ae:c2:22:84:33:da:21:11:1e:46:3b:97:e3:1f:
c6:01:68:73:1e:d5:43:d8:94:d5:76:d3:cf:39:32:bf:c6:fb:
15:2d:46:f6:fe:d6:d4:09:51:47:6d:b0:81:05:55:fb:d9:ea:
25:1e:00:07:24:06:92:6e:8e:11:40:d2:c7:55:11:1a:9f:a9:
db:14:b0:81:ae:01:e6:e9:9b:32:96:37:d7:a5:8b:8f:a0:ee:
c0:6d:31:ac:e7:63:c4:b3:ea:5c:44:20:17:5d:a7:47:6b:5c:
7f:44:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:27 2026 by rpki-client