Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File: sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier: GqqA5HWuP/Gs7BojXgCUZZKAMi4NSoKCplpSMM5SAVU=
Subject key identifier: 8E:3B:2E:44:DC:BD:DF:99:30:6C:43:4F:16:AE:6C:1F:CD:68:15:28
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 019D2929391E3344CECA0C5B16FD0C7B21F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: ebnHbqmByhrGvJGtZ4Y7s-9VBYw.roa (hash: /tjv+x+vm/SIeihKRcSh0zd+JaP0Lz3yLbHkQ/BOBMQ=)
2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: G0yE8DXzfjCjijZJ7ma7gKRMCb1KE0exaVlGeBQK6PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:39:1e:33:44:ce:ca:0c:5b:16:fd:0c:7b:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=8e3b2e44dcbddf99306c434f16ae6c1fcd681528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:b5:0d:65:5b:f7:96:1c:94:d7:e3:33:18:
f8:2a:bc:80:6b:25:c9:67:6c:97:33:98:36:5f:51:
df:9b:38:69:51:da:8b:fe:77:12:15:15:1b:ad:72:
7d:7d:ba:37:5a:a0:1f:eb:4f:4f:3a:91:db:1e:3b:
52:05:57:30:25:48:d8:6d:51:aa:63:02:5e:45:29:
ec:c1:e9:3c:a3:63:16:50:b7:11:57:1f:e0:02:b6:
09:33:66:04:ff:e2:d4:5b:52:9e:8b:f4:fe:9c:19:
dd:f7:e9:e6:be:fd:1e:08:1f:c3:74:7e:69:ab:95:
4c:7b:5e:f6:ce:be:e5:e8:4e:fa:88:74:0c:1c:de:
6e:40:5a:24:dd:21:15:5b:4d:3e:2f:9f:8e:5e:71:
b6:2f:1e:ac:e0:1f:74:b7:8a:91:4c:a3:a8:af:a9:
a3:10:77:57:54:d8:cb:b2:e1:a8:31:6b:42:d0:ca:
46:09:dc:75:37:76:8c:5b:69:b5:c6:82:85:8f:f3:
f5:cd:d5:68:1c:f2:22:37:4a:27:8b:e7:8a:0c:03:
00:b2:02:76:c0:9b:03:ad:9a:2d:47:46:4b:52:39:
b0:ef:30:7e:d0:47:82:82:ac:60:d9:61:13:45:8d:
d2:64:c4:45:bf:d6:2e:73:11:90:6a:99:fd:3f:e1:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:2E:44:DC:BD:DF:99:30:6C:43:4F:16:AE:6C:1F:CD:68:15:28
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:e1:67:51:b1:a8:b0:b6:ee:34:3c:0d:28:29:b1:bf:d8:
19:44:b4:f2:cf:41:b0:82:13:52:c1:a4:55:2c:6e:93:f0:a4:
5b:16:49:37:30:07:5c:32:cc:64:34:af:ec:3e:c4:52:fa:00:
45:ce:3d:8b:3b:e7:ec:60:f0:8e:8a:be:f5:28:a6:11:cc:f2:
f2:05:cf:ee:34:16:2c:ae:c6:41:3b:c4:0f:b1:fc:d9:35:c9:
50:39:a9:7a:f8:e1:31:9f:ff:c9:62:f5:da:a5:f9:84:d8:fd:
01:4f:99:b7:f6:27:d6:ef:60:98:fd:df:f8:54:28:41:d6:3c:
2e:31:f6:e9:76:5d:d0:85:ab:35:cd:1a:93:d1:74:71:85:6f:
9f:f7:a2:dd:6c:35:ca:fb:e3:45:ee:6d:69:f1:ae:e8:79:4b:
c6:6f:c0:53:4e:77:dd:29:04:0f:d7:d7:8f:8f:05:6b:59:d8:
77:bc:5a:f8:28:b8:f4:c1:c9:56:24:79:db:42:8f:8e:11:11:
ab:f5:d5:e6:e6:fc:03:64:7f:5e:61:52:ff:8d:6f:1c:01:6b:
dc:74:64:75:bc:f1:fb:eb:32:90:3c:b7:a7:f2:21:88:ef:ed:
5d:11:ee:c4:00:af:a2:7c:20:77:aa:c7:33:e5:c4:f7:c0:b4:
65:cd:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:17 2026 by rpki-client