Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: jyY11tqzem/1x2eFNSJEzJCX5ubUKSDb2hfJjzMurqw=
Subject key identifier: 8D:59:64:D6:B2:10:86:61:80:57:94:06:3C:70:52:9B:3D:4A:D6:6D
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 019D273B444B8FA026445D967B1E0A925A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:01:28 +0000
Manifest this update: Wed 25 Mar 2026 23:01:28 +0000
Manifest next update: Thu 26 Mar 2026 23:01:28 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: kKN64k+FTL9cK155EtDvicKISQKaTlewTtVfUDVPyMU=)
2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:44:4b:8f:a0:26:44:5d:96:7b:1e:0a:92:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Mar 25 23:01:28 2026 GMT
Not After : Mar 26 23:01:28 2026 GMT
Subject: CN=8d5964d6b2108661805794063c70529b3d4ad66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:73:bd:a3:93:31:e8:24:bc:83:71:43:d2:
1a:65:9d:c7:b4:1d:cd:92:a1:28:f3:41:09:55:7b:
b9:a1:65:c0:40:ce:37:e5:3d:8e:dc:c4:dc:cb:b2:
73:7c:2d:ca:e4:0f:7e:50:f6:cd:9f:0d:1a:a4:22:
35:21:6c:28:99:a7:3a:2a:16:8b:cb:e6:85:fc:ae:
cb:46:77:65:c7:e7:31:a9:d4:af:91:d3:01:09:35:
f3:9c:12:c7:de:a6:09:fc:da:f1:3b:cd:ed:88:85:
2d:29:0b:04:ef:ff:e2:99:f3:68:16:58:e8:db:2b:
37:87:71:97:c8:3b:39:82:27:af:11:ab:74:69:d6:
49:0d:67:35:17:74:be:55:53:41:c8:60:1a:24:f9:
86:98:7b:c9:83:99:6a:06:62:5d:26:02:cf:14:76:
21:3a:f9:be:a3:ae:49:30:7b:78:2f:ae:2a:81:67:
c0:8b:e8:21:8e:4e:b6:2d:fa:45:b8:82:8c:51:4d:
7b:ed:61:c7:eb:53:6d:40:89:d6:f3:a8:fa:77:aa:
eb:c4:39:60:7a:ec:3b:7e:d9:f4:f7:c5:c4:56:54:
b4:32:55:de:97:c0:48:03:ad:cd:60:6e:c7:ea:3c:
9e:e0:43:ee:c7:f1:6b:db:74:3e:36:22:99:ac:54:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:64:D6:B2:10:86:61:80:57:94:06:3C:70:52:9B:3D:4A:D6:6D
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:36:55:cb:c1:a8:3d:50:21:01:09:99:09:5c:b9:fc:f8:e7:
84:d4:33:de:2f:ad:06:df:61:42:27:06:ff:62:bc:59:6d:ff:
f0:11:2c:e4:ee:e3:72:c8:f9:ab:84:22:e6:f5:bb:4d:b6:86:
82:a2:42:64:7e:ae:c0:1a:54:5a:c9:dc:0a:80:10:c5:e1:a5:
b2:e5:3a:2b:ed:60:a0:ad:1e:cc:ab:d6:7b:ce:11:0b:77:67:
20:12:73:23:cc:06:5d:c5:b9:28:3b:76:e3:f7:16:69:53:47:
7b:1a:a7:d7:c2:ce:0c:19:a3:a5:99:14:68:9b:1f:28:b3:07:
9d:58:09:26:21:cb:6e:f9:69:28:80:c1:20:d7:a9:84:1a:b2:
a7:6b:f3:c0:eb:a8:26:26:66:c4:91:23:3f:b1:d3:8c:f7:a3:
e8:d4:ed:8e:a5:bc:dc:99:75:4d:f8:54:44:f6:8c:5e:f4:8f:
8d:37:44:1f:0b:89:dd:38:3f:bf:a4:3b:3d:c2:4c:71:72:5c:
08:58:95:e5:60:f8:d4:c5:84:51:5c:50:59:ea:20:de:b1:57:
56:84:3b:93:5e:2e:33:14:0b:fe:30:23:7a:21:b9:46:83:8e:
51:bd:ca:88:5a:cd:8c:20:a8:1c:8c:e2:d8:57:66:1f:04:6c:
0f:bb:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:47 2026 by rpki-client