Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: sdAbYg3UFThpzUMy0EWVYbA0hXxm9j14m0DT4778ctE=
Subject key identifier: 70:B2:95:C7:1D:5F:B1:22:AD:C9:E0:1F:5C:DE:EF:64:D9:25:62:0A
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 019D273A954AB3C2251B062E71525442602F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: oDbgSsQ+X/MF+TYVDcYFrQtn5Rf0QIHoxeNQBs8V1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:95:4a:b3:c2:25:1b:06:2e:71:52:54:42:60:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=70b295c71d5fb122adc9e01f5cdeef64d925620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:e9:3b:60:cc:18:e9:60:3c:0d:7b:f1:7d:
fe:9e:67:b3:4e:27:e1:8f:85:0f:94:5e:b4:a3:c1:
b8:43:87:1e:dc:b3:9f:57:7b:9a:50:b0:36:c2:7a:
52:1a:c1:ab:54:35:6b:78:da:47:d8:b8:e4:f0:74:
62:c6:89:cf:5b:6b:cb:90:65:69:5e:79:22:7a:d8:
9f:46:38:ac:61:88:42:ef:f6:19:35:8c:b9:f8:e5:
61:c5:b4:96:73:82:57:88:77:7d:67:67:fe:3e:3a:
7a:9e:a6:55:b3:cf:35:37:0b:92:5d:0e:c2:52:61:
88:d0:ee:43:25:9c:9b:ff:17:ec:c9:e2:25:30:33:
36:8b:56:48:53:08:3e:0a:bb:91:24:06:6f:3d:4e:
36:df:18:83:09:f1:33:57:39:86:71:1a:66:39:c4:
78:a6:af:0a:ca:64:93:ea:72:1f:63:25:ea:76:09:
c5:11:49:91:ea:70:6c:c4:bd:d0:94:c9:ea:fe:78:
f8:53:97:98:0b:ba:34:9c:dd:4f:63:8a:86:68:3d:
25:1b:83:d9:d5:17:b7:91:93:00:07:57:f7:7d:ec:
ae:a7:3e:7c:12:76:9e:9b:4f:63:20:b6:7c:66:e2:
7d:9a:95:2b:0d:32:f7:4f:75:6e:ba:e1:ec:41:4d:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B2:95:C7:1D:5F:B1:22:AD:C9:E0:1F:5C:DE:EF:64:D9:25:62:0A
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:79:ee:05:8e:f2:99:c5:f4:90:eb:ca:e1:0a:d3:f0:cb:8b:
44:2a:2f:e7:41:16:1b:ba:84:6a:70:15:04:11:9b:89:d0:a4:
90:3a:45:4e:5d:89:9d:a4:f3:ae:28:a7:f1:d0:a9:9f:fd:a7:
8f:c2:8c:30:c8:ca:35:ee:1f:bd:ab:7c:a8:57:85:4a:02:ea:
f8:73:1e:ff:c9:79:c4:19:21:96:cd:d7:61:50:80:fc:79:a2:
b4:69:ad:bd:95:dd:75:c8:b3:e0:35:a2:1f:c9:11:91:b4:36:
db:f1:9f:db:8a:d4:5a:58:f8:18:a6:5e:b4:ee:6c:f2:2c:e4:
ce:1e:ed:8a:59:7e:ad:60:63:a3:f7:4e:5d:c9:b3:ab:c1:43:
d2:36:ed:8e:f5:43:49:4f:59:d5:76:2a:38:fd:82:90:84:6c:
f2:72:76:d7:6a:82:4f:fd:06:dc:32:bd:cd:2a:f0:bf:6e:4e:
77:9f:d2:94:03:66:a6:3d:61:90:14:d8:86:31:fb:3c:9f:9b:
4f:c9:ba:a5:19:d2:08:c1:6f:0e:0c:c5:b6:73:3d:ef:f3:32:
67:d1:87:8e:6c:68:97:3d:1e:4e:7a:f4:8a:a4:34:7f:93:6c:
40:d3:b0:93:4e:3a:8d:24:ab:a3:c4:41:0c:ef:24:84:02:07:
cc:aa:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:07 2026 by rpki-client