Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
File: hXosdK9aRNmq5HoLiUJfpPf8fBk.mft (raw, json)
Hash identifier: XnIJW9Am9XFreAc4iiVT2qM+4VALo4lBRskoYV08YoQ=
Subject key identifier: C0:FD:9E:78:F3:13:58:CA:31:BA:3F:A8:AF:CF:6E:E2:10:1D:A8:67
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 019D273ABA2AAB893FB42496E6B3ADEE44B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: Bonx83HF76BE61ZX0VoIun52A94.roa (hash: TlHLw/pT6swl2899e/7+GOFr0kLi3ZqUiDKK8FJwmx4=)
2: KhO94NLVmWuXMsiCxf4jrKbJ5Po.roa (hash: qEss2pgdXS0c4u8wwfxj/bMSNCRROZUmP3NoiQOGa5M=)
3: hXosdK9aRNmq5HoLiUJfpPf8fBk.crl (hash: SoaUUUcCmXSE9GTC9QOSIIrW5vglX848oLTl8vr8e0Y=)
4: ku1P8o5rq2UWzSBP5BqJGle8jJY.roa (hash: og9Xi90Vpv7B2cA94MtmnptXF8svnEEvwmcGsCW9qAg=)
5: ssADW3_Hs4QeRpZLpNq6K6vfQ3Y.roa (hash: aeb9BpkvqDq2X7UVYrDEmcbZhKgrzz3R1D68l+yOj6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ba:2a:ab:89:3f:b4:24:96:e6:b3:ad:ee:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=c0fd9e78f31358ca31ba3fa8afcf6ee2101da867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:18:0e:34:3b:bd:0e:73:77:f4:7f:4b:0d:
d6:8f:fb:ab:30:14:5f:2b:7a:9e:29:0e:22:74:62:
4b:03:03:e8:16:53:4f:54:a2:83:9a:af:ff:75:37:
53:77:ae:0c:1c:d5:35:25:3d:01:3a:b5:54:ff:60:
cb:13:33:26:8a:65:88:f9:c7:07:44:e2:f5:fc:51:
06:14:ab:6f:67:25:f3:15:c9:24:35:99:a1:8b:7b:
ed:4e:2a:d8:4b:79:14:c8:5a:33:a3:8b:b5:53:d0:
23:fe:4f:97:3b:51:d7:63:82:a2:68:c8:b2:bb:e8:
e6:63:e8:cf:9b:3f:81:f7:2f:7e:3d:52:fa:05:6b:
99:1b:d4:bd:82:63:59:ad:eb:80:cf:19:e6:0b:26:
95:50:e6:40:82:59:4f:b5:cc:f4:62:2c:f9:df:10:
93:63:ff:35:a3:e9:5a:01:89:fe:71:b8:3a:ba:6f:
34:ea:d3:ac:f4:f2:78:2e:f5:69:44:24:5c:d8:d5:
6c:b9:13:5f:5e:12:22:b6:e5:96:21:ea:b4:ba:aa:
c3:9c:9d:32:98:c7:eb:2a:75:d3:3b:31:a2:79:87:
75:3b:00:f7:e7:e9:f0:16:38:14:90:8f:36:ce:10:
9a:45:a7:9e:9b:15:98:b9:7f:f8:0d:72:d4:18:4b:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:9E:78:F3:13:58:CA:31:BA:3F:A8:AF:CF:6E:E2:10:1D:A8:67
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:aa:b9:15:0a:29:8d:80:92:7d:9d:36:29:ad:69:85:5d:81:
84:0a:04:5b:e3:62:97:73:00:3a:6a:3d:40:23:d6:4f:aa:13:
e8:7e:24:f1:04:cb:eb:7b:40:e1:b6:c2:37:bc:93:6a:58:48:
19:e7:79:e9:98:1b:93:80:42:66:1c:82:9c:68:05:ee:38:80:
8e:12:1d:9a:d8:7a:e7:b5:55:cb:a6:5a:95:7c:44:86:23:d7:
5c:7a:24:5a:64:a8:28:9a:52:18:3a:ab:d6:ac:00:f4:a4:9a:
40:6f:8e:9e:c7:b6:1e:90:5b:b0:2e:d9:70:27:5d:12:45:e9:
1e:ef:f8:a8:6d:9a:96:47:38:dc:27:a2:41:06:51:83:3b:2b:
bb:a9:d0:f3:fd:03:bf:19:71:45:d8:18:cd:1c:d4:6a:41:28:
93:b2:57:f3:a2:6d:18:b2:b7:ce:97:9a:6c:79:5b:84:15:9c:
d3:39:5e:5c:5f:d3:09:52:2b:ac:31:f9:dc:1a:8f:93:cf:2f:
51:c6:f9:d2:10:2d:02:29:b6:fd:f8:bd:65:eb:22:87:00:c3:
38:52:61:b7:e5:50:76:8f:8d:3f:98:19:e3:92:d7:04:eb:92:
48:f2:9a:66:f4:4d:43:e5:d2:6a:d7:98:58:0c:4c:37:eb:98:
9c:38:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:52 2026 by rpki-client