Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier: +v5sLSragj9LTNK73l4RPXJjHstQTF8UlEDqUXnSMfU=
Subject key identifier: B6:D4:1A:A8:12:C8:C8:A0:20:24:81:6E:D1:9B:0C:15:1A:5E:73:D2
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 019D2772637E0F2AB000374F129A4BC8BC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: HmUomsPgXy_ichPpqzKABnF-f1Q.roa (hash: Bx6E3+408hVB6DPUkC1/WmqYHNWX0Umjmfc5LiZnxMs=)
2: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: Deghgwtel7mNImReYwwUX9EUG16mbXTm7eJO97EYHtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:63:7e:0f:2a:b0:00:37:4f:12:9a:4b:c8:bc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=b6d41aa812c8c8a02024816ed19b0c151a5e73d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:08:80:f3:e0:95:31:0a:e5:45:51:ea:44:
fd:1c:5d:1e:85:b8:b3:84:34:89:ab:1c:84:d1:63:
53:1b:d7:e9:e3:9a:1d:82:1f:ff:1a:30:d8:0e:a9:
45:da:71:ae:e8:59:f5:34:fb:1b:60:79:32:bd:49:
e3:2c:e5:c2:48:23:36:c7:3e:f6:ae:21:ef:f3:6b:
cb:11:ac:31:6e:f0:2a:2d:15:85:8b:04:b3:88:d1:
92:e0:ee:8c:97:b6:62:72:94:bf:25:cd:fe:f4:83:
ba:0e:fc:1c:d1:66:90:3e:5c:b9:47:ca:2d:cc:72:
99:8b:63:4f:6f:15:02:8c:3b:0c:f4:c4:34:bb:e6:
02:ae:96:5a:4b:52:a8:13:21:68:ac:f4:7c:7d:b4:
30:2e:5b:3c:78:37:6b:41:33:53:bb:52:bd:39:6a:
b1:a3:b5:9a:87:dc:f1:4e:c3:1c:78:25:b3:43:e3:
f0:d8:cf:8c:eb:20:3a:f2:c7:18:52:55:db:70:0a:
1c:c9:4b:96:2e:df:c1:9a:78:4a:cf:af:89:8d:c8:
d5:39:6e:8f:dc:4b:0e:13:d5:ff:93:e2:18:42:0d:
1b:d1:61:ca:a0:18:2d:c6:a4:91:ec:7f:42:c6:8b:
2b:9b:0e:b2:d5:e4:06:39:a9:49:78:29:c1:83:af:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:1A:A8:12:C8:C8:A0:20:24:81:6E:D1:9B:0C:15:1A:5E:73:D2
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:13:a2:b5:d8:ef:70:25:85:4d:82:c3:31:80:9c:a4:7f:
23:9c:4d:93:36:14:3a:58:2a:59:89:ae:b7:50:4a:76:d5:a4:
50:d0:2a:7a:da:1e:a2:81:75:a5:a4:28:d1:e8:b5:c2:be:0f:
4a:c0:87:cd:e2:e1:f2:59:49:10:22:4b:62:84:56:4e:36:81:
04:60:16:01:af:77:c3:0c:21:9a:4b:99:b0:65:14:45:c8:77:
3f:2a:92:7d:9e:be:4d:fd:17:99:1f:de:9b:02:57:71:50:f0:
bd:5f:43:5e:cc:39:c3:a2:f1:80:0a:50:f5:79:37:20:62:e8:
2f:e9:38:e2:e8:09:bc:19:57:7e:02:d3:24:b0:e3:9d:8c:b5:
b5:34:6d:ec:d4:bc:4a:8f:f2:99:77:51:1d:11:c8:98:8e:a5:
2b:69:af:0a:f6:c9:25:58:86:93:c2:c9:d4:9d:13:f2:93:12:
e2:23:7e:d6:7a:b5:11:cb:fd:c0:38:37:a4:00:a8:77:8b:ef:
d7:df:47:b7:7b:8d:01:66:36:56:2f:37:dd:ec:1b:e5:70:19:
5b:0d:8f:02:6e:6e:60:10:96:22:8b:3f:68:2c:b7:ee:01:35:
5e:92:a2:05:6a:30:fb:5b:64:d4:9a:20:2e:c6:99:6c:8f:24:
74:0a:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:12 2026 by rpki-client