Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: tgUpOVVLcNxYQHbblmxc3nSXQwVN0woCAZ/Wgbobg5A=
Subject key identifier: 5E:8D:D9:F1:61:97:79:8C:16:83:8A:D3:32:D7:C3:56:B9:65:5B:30
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 019D2704D55D2EE09E2D3DEF4E1F9F6A844E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: QJwpGsJzgsIA6qGY7KIx71Voe1VfLhnGNO2rWsqWpVA=)
2: nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa (hash: VwaGIZ+yf1ZIOUOKEz3bZkTWkr43RISg2q2l8GV2Ibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d5:5d:2e:e0:9e:2d:3d:ef:4e:1f:9f:6a:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=5e8dd9f16197798c16838ad332d7c356b9655b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:0b:c3:c7:e8:bd:65:07:b0:b9:4b:b8:c1:
42:6a:64:0d:7c:b0:01:eb:e6:a9:9e:c1:b3:5a:44:
8a:86:07:d5:a1:a4:dc:1d:e8:fe:41:2c:8e:28:f2:
0b:99:bf:96:75:47:c2:e9:c1:e7:b0:d0:60:49:d9:
15:d2:94:fb:98:40:69:cc:de:15:35:1c:6d:e9:60:
16:21:86:af:7e:b7:e8:38:ad:f7:dd:75:8c:98:f0:
95:0a:f3:8d:bf:59:ad:12:56:d6:33:b9:76:6e:bf:
6d:89:82:1d:7a:a5:8c:ed:73:8b:dc:d7:7b:0b:a4:
f9:64:45:82:d8:58:32:d5:51:76:23:b6:90:90:32:
6e:fb:8b:23:f8:da:a6:b7:da:f7:31:cc:53:26:15:
5e:09:65:0f:fc:1b:df:42:ff:45:ae:ae:89:34:2a:
84:cc:99:51:86:6c:97:b3:fc:7e:a5:1a:71:ab:0d:
12:62:c0:43:aa:6d:a5:c4:52:21:bd:fe:14:36:61:
38:47:fb:58:8e:44:7d:2f:fa:43:b2:b3:5a:c3:38:
ec:d3:8a:95:d2:39:67:e9:bc:5d:67:6b:a2:3d:8c:
f8:72:b9:3d:0e:25:8f:68:37:14:c8:5e:b5:ba:5b:
ed:86:42:3c:69:51:a1:66:35:bf:7e:bd:df:5e:f2:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:D9:F1:61:97:79:8C:16:83:8A:D3:32:D7:C3:56:B9:65:5B:30
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:03:6e:f4:9a:8a:ac:c6:c1:ec:9b:2a:82:75:99:2e:38:e4:
cf:8d:cf:cd:82:e3:8f:70:5e:0e:30:4c:2c:12:84:e0:ed:d9:
e7:0a:00:3e:bc:e3:19:e2:86:b5:35:d0:43:ef:13:00:3d:b4:
e4:87:42:78:f1:30:b0:26:a7:af:64:01:d4:7e:d7:54:20:cf:
2b:d1:72:2d:e6:58:6a:86:f1:67:5f:1b:8a:95:ec:c0:7f:38:
a9:75:73:c5:94:e2:43:61:54:90:70:93:07:2f:9f:ee:78:99:
dd:21:08:16:c9:3d:db:e7:e6:f9:5e:81:67:36:88:9d:7f:ee:
3c:39:a2:f8:74:de:29:5a:8f:fa:1d:db:4a:15:08:3c:8c:2d:
05:14:e9:24:c4:ae:c9:d0:5f:c1:59:89:cf:b5:48:06:46:f4:
a4:b5:dc:f1:44:29:28:c4:7d:91:27:86:b2:8f:62:76:83:77:
38:23:0b:3e:f7:8d:b2:0f:68:09:7c:d6:5e:17:5f:c4:2c:87:
ee:76:f5:b3:db:c8:e9:10:44:47:7b:f5:ff:1e:b1:87:a8:62:
70:05:ad:fd:29:3e:f9:4b:66:a3:6a:33:c0:6d:ec:d3:bd:58:
92:e2:10:13:b2:37:08:b3:bf:c4:89:6e:35:5f:c4:5e:50:d8:
ae:c7:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:37 2026 by rpki-client