Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: prtZdHsqyK4N/pJ1OyyHWvXwfkE8hBLHp34fpMOHXD4=
Subject key identifier: 68:26:6B:6C:69:D7:B2:8B:20:51:2A:9F:FB:5C:E8:C8:86:9A:B5:ED
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019D25BA62DBBD1A7DF3A30CC4C79CDDC481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 01C5
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: j3BP08Bn5sAxR1C28vWwypDl54Jw37DXi/mfwpaSogw=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:62:db:bd:1a:7d:f3:a3:0c:c4:c7:9c:dd:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=68266b6c69d7b28b20512a9ffb5ce8c8869ab5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:fe:00:11:7e:44:47:47:0c:c7:e3:c0:ab:
d1:f8:68:91:6d:3e:c8:ac:85:21:37:48:06:18:48:
59:a4:cc:16:3a:81:76:1c:d6:ba:0d:a3:10:15:bd:
96:ba:09:90:9b:3f:86:4b:dd:a2:a1:b6:94:66:3c:
e3:7a:f5:7d:55:07:c1:a0:73:28:e5:bd:2b:e0:39:
26:d3:d3:73:91:c4:eb:b9:54:3a:1a:69:79:1e:06:
9f:ff:14:c4:77:60:5a:99:7c:0a:ea:bd:ca:1d:ec:
56:bf:c4:8c:b5:07:c4:7e:96:19:a9:55:e7:1c:a2:
1e:b8:b2:95:4b:f1:41:d7:bf:0f:cf:5b:bc:1f:50:
8b:11:b9:11:3b:d8:d4:7f:24:99:27:75:d2:c4:00:
b7:d7:5b:3a:7d:cb:13:8b:54:92:29:6e:29:67:3b:
52:39:b1:1f:7e:49:07:71:0f:7a:e6:f1:da:70:23:
dc:2c:62:a1:5f:89:fb:54:4f:d9:59:1c:0a:06:79:
84:ed:03:89:17:65:bb:a6:17:43:d4:67:82:af:3e:
74:57:0b:da:d5:98:cb:b8:dd:34:3f:7d:6c:1d:4a:
a3:12:ff:d8:f9:b4:43:06:50:03:17:cd:23:c2:4d:
13:1b:ce:e6:c7:7b:87:86:ab:57:3c:b5:b9:42:37:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:26:6B:6C:69:D7:B2:8B:20:51:2A:9F:FB:5C:E8:C8:86:9A:B5:ED
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:96:5d:db:a5:24:1e:ac:89:0b:ea:2d:1a:d9:f0:08:41:76:
9f:35:26:6c:c4:81:e4:53:af:9e:98:11:c2:23:8a:c2:58:4d:
0a:78:12:57:17:67:77:7b:88:95:a5:59:d3:25:d4:2e:8f:9c:
e3:a0:1c:86:ea:f8:01:1a:94:94:97:ea:50:f5:b4:37:56:12:
d1:7d:84:aa:2c:f3:02:7d:d0:89:65:65:7c:1b:bb:de:4a:ce:
0d:dd:8a:2b:67:2a:3e:a9:66:b2:21:28:a3:1c:8b:76:1a:7f:
07:41:24:b6:83:54:90:fc:b3:a9:4c:44:02:d3:04:39:3f:3c:
f7:55:3a:09:ce:d7:75:ae:fe:f4:53:75:78:4a:b0:c4:be:9c:
c6:86:27:fe:1b:5e:e6:a8:ab:de:1b:b0:0a:e3:da:da:b9:f2:
e2:34:7c:43:e5:76:63:d8:cb:17:2c:8a:34:93:5f:c8:4c:d3:
1a:64:9a:61:cc:80:bf:06:2f:11:a5:cb:da:86:6c:70:bf:44:
a6:f9:86:d9:bd:bd:ea:b3:52:dc:9b:55:e9:ee:41:bb:1e:43:
56:5e:4a:03:32:47:7f:75:c9:8b:ef:fc:3d:e1:d8:45:2e:5e:
8f:3e:60:26:00:cc:33:0b:79:2f:42:0a:d3:f7:d7:0b:91:31:
0b:82:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:00 2026 by rpki-client