Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: dy1RAYUdNVdPUwSAX1RW0Ao3kjw7CRR3hZuM0Ri4p0c=
Subject key identifier: 6C:D6:69:2B:E0:05:CF:9D:ED:AC:62:66:1C:0A:A5:A1:AF:69:72:CE
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 019D27A8C816A13C2DCBCE04292D79AD8622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 0684
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: MvxuGFgJO1HcqJcQXHExSwR9U5A.roa (hash: gwjNOond7GjnBlbK7xaPErigbWlHmn1g1Fd3dZwf6oE=)
2: anEMLhBSR-ZUhDs4y9V3c82TLb4.roa (hash: JlsU25C/lCNOkItP54ekDC6SLLrLG7JIzKd/WFTWKEE=)
3: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: gdGefDUR46rTiqHxR41+QkhrZ9/ro5l5ozhyAJKvbOQ=)
4: wim6z6Qps0aBjMJXEvJ79OHVt2I.roa (hash: Xvtl1HpjZETCKdBHr+BV103OhtUw84OetTQurPvOKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c8:16:a1:3c:2d:cb:ce:04:29:2d:79:ad:86:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=6cd6692be005cf9dedac62661c0aa5a1af6972ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:bc:e0:74:1f:ff:a6:e8:4a:87:da:02:55:
eb:83:68:84:7a:74:03:cc:48:a3:19:25:79:7d:03:
45:04:4d:e3:ab:2c:76:2c:29:18:cf:eb:8c:35:e1:
97:12:87:23:8f:d5:4a:66:7b:a9:a9:a3:ee:66:97:
6c:82:8d:26:02:2e:02:74:bb:b0:8d:2e:0d:9d:40:
1d:5b:69:21:a7:58:a1:87:ef:24:9c:d9:bd:db:5f:
d5:5a:da:1c:01:dd:3d:ea:32:c0:5f:74:11:0f:81:
dd:6b:64:f9:bb:11:ed:b9:d2:e0:5a:e9:31:8a:76:
b9:8d:bf:3a:0c:27:31:3a:8b:44:c1:3d:bc:46:de:
d3:4f:0d:b3:06:28:05:e0:45:bb:85:a1:e3:4e:a6:
0a:53:c9:63:4f:62:1f:d1:8b:14:e6:aa:79:f0:c7:
63:21:3b:e8:18:70:9a:2c:70:a9:ad:70:e5:08:5f:
d8:22:8f:e3:18:8e:96:b0:81:e6:30:65:29:f4:8d:
b6:fa:34:1d:df:b7:5d:6d:a3:2a:82:c6:77:7e:0f:
19:9e:29:ad:91:79:14:30:7d:8d:6f:db:39:42:5c:
a2:76:29:da:5b:ef:59:cb:13:27:9a:ae:cb:6f:31:
77:a1:ec:7c:b5:17:cf:25:da:86:80:82:6a:ad:e2:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D6:69:2B:E0:05:CF:9D:ED:AC:62:66:1C:0A:A5:A1:AF:69:72:CE
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c1:18:40:ff:d5:b2:10:14:fc:1c:c6:e5:e9:bf:1a:e5:af:
b2:27:36:44:35:dc:4d:a3:41:c2:75:00:27:e8:d4:07:99:53:
b1:9c:b3:05:17:92:ff:12:b3:ca:0c:65:aa:a4:22:6d:76:99:
cf:64:bd:ac:b5:43:75:2c:38:f3:a8:87:e4:c8:6e:f0:43:7a:
bd:87:f4:bd:04:65:35:16:4e:5b:ef:79:f3:aa:e9:05:a8:66:
1c:21:f1:1c:3e:a5:01:cc:2c:0c:35:af:93:dd:95:2d:07:e8:
4b:59:95:05:d7:7f:12:09:e7:e6:63:b7:a5:a5:42:a3:d1:93:
59:70:34:fd:0b:fb:94:dd:f1:d9:d2:c4:d2:8d:62:e7:80:eb:
8e:98:46:04:18:ec:ce:5a:b8:5a:28:09:27:2e:e3:1e:a4:93:
54:42:84:ad:e6:d3:56:9b:97:7f:66:65:3c:23:3d:44:50:50:
69:ec:82:0e:38:f3:22:25:57:88:08:2d:c6:47:3d:e9:46:93:
e6:f0:a9:05:b1:41:cc:01:9b:64:dd:0e:85:2c:d1:95:cb:1a:
01:32:69:0a:e2:52:4f:d4:92:32:b2:db:e3:75:34:d2:e3:84:
13:45:df:a2:c9:6f:c6:a9:c4:8b:a0:6b:5c:b2:ff:2d:34:96:
bd:7f:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:32 2026 by rpki-client