Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: VvAkRaNMaaYeET2eSaVKz2+bsi9xBj6EU5Rj44nHYbE=
Subject key identifier: 6A:9C:93:CA:9E:58:87:2F:DD:2E:18:28:32:5A:76:FD:42:DA:90:6F
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 019D284E4C0D3D6C43B66690CF38F7A3B1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 170E
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: VpPJ4ZzReaEohaymqptLaOAjr1o.roa (hash: lqwSOhzaFJrXfe0L7Qw99FbYMDPv5g1eewbWIKteNLY=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: qE0a7XhHd5fQbVZ4Z55wzF93Ir85iHPdeo+VDHQl9PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4c:0d:3d:6c:43:b6:66:90:cf:38:f7:a3:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=6a9c93ca9e58872fdd2e1828325a76fd42da906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:80:3b:bf:82:56:82:d5:1d:c8:8b:9f:d7:
47:aa:e7:d8:24:eb:6a:3d:46:16:04:4e:96:1e:c8:
0f:6d:ef:32:64:0c:d6:dd:36:41:99:dd:84:13:3f:
48:17:43:33:37:6e:0a:a5:59:88:cc:8b:00:88:9a:
30:85:5c:21:a1:d8:0d:5c:ae:a2:41:92:62:6a:9e:
51:f7:47:ac:f1:0f:a9:7d:a8:14:c6:a4:c8:61:10:
da:69:08:e4:92:ec:d3:0c:2e:b0:c9:17:f9:c5:97:
80:b8:41:90:f5:74:36:d1:22:20:35:ae:72:13:2e:
f0:ba:62:1a:3d:ed:6e:c4:d5:21:ee:85:46:df:59:
7b:be:e3:b9:22:5d:e7:bd:74:33:01:61:9a:59:5f:
4d:2f:56:21:21:7b:8c:9a:74:e1:4a:7a:43:fd:fb:
ea:2e:84:2a:fa:9b:24:59:87:45:ae:77:71:c8:b0:
91:11:04:a9:23:4b:f7:06:7b:94:49:26:d5:be:e9:
92:40:38:4a:cf:b6:c9:3c:ab:58:8b:ee:d6:01:a5:
d0:13:4b:e6:3e:c8:85:6a:9e:b8:f7:fe:2b:40:19:
3b:e8:aa:cf:24:2d:44:f3:59:5a:b9:ec:19:66:15:
d4:dc:62:31:a4:cc:65:0e:7c:d9:ce:23:3c:5d:11:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:93:CA:9E:58:87:2F:DD:2E:18:28:32:5A:76:FD:42:DA:90:6F
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b1:52:0a:30:f3:4b:22:f7:57:06:c4:af:b8:1f:38:fd:8c:
36:ce:75:1d:d7:bb:47:58:98:e3:ff:bb:8f:0d:11:a6:3f:78:
bf:9f:ae:bb:74:7c:a4:4a:c8:70:17:06:cc:13:7c:9c:15:2b:
3c:60:42:38:a5:25:c7:11:2d:86:bc:06:b6:84:4a:8d:b5:b1:
af:d8:5a:eb:f5:99:2c:de:31:60:d2:27:f5:7b:67:ab:c3:c3:
62:41:19:0f:31:01:c1:05:32:05:4c:d5:18:3d:1b:11:c1:7c:
66:5d:bb:60:60:b2:c1:2b:27:8c:67:cf:45:70:16:2f:4a:5f:
97:87:6c:cd:c4:d1:80:2f:2c:5d:b6:31:51:c2:2f:d9:59:8f:
6b:c3:21:84:4b:ac:14:20:2a:f6:d4:4c:22:4f:da:b5:03:6a:
0e:e0:dc:ea:27:87:41:a3:45:07:98:5f:d4:9e:23:6b:ec:2e:
2d:54:9b:4c:92:9d:46:4f:d3:5d:7b:f4:db:dc:c5:0b:fe:e6:
b7:50:ab:28:a1:ec:43:b6:ed:27:74:5a:3b:63:f0:e4:b5:9f:
5c:15:78:86:ee:9c:f8:cb:c9:a9:ef:89:4b:65:40:40:5f:c9:
b6:78:34:58:0c:b1:7d:4a:4c:e6:27:ad:52:30:4a:fd:72:e3:
c5:9f:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:36 2026 by rpki-client