Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: 9LWGKPKDHY6L8g54vO2Z1YHrlFqo3B4lpkGRM5dRYGw=
Subject key identifier: 0F:B8:88:10:45:4C:B0:D3:49:91:E6:D6:16:0D:B7:F8:70:BD:64:20
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019D29291C744F473C84F009C2AD93405FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:53 +0000
Manifest this update: Thu 26 Mar 2026 08:00:53 +0000
Manifest next update: Fri 27 Mar 2026 08:00:53 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: KQTSKYoSFg+Y8OH6XPyTbd2V2CuHZVYDexRgX8ejzWk=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1c:74:4f:47:3c:84:f0:09:c2:ad:93:40:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Mar 26 08:00:53 2026 GMT
Not After : Mar 27 08:00:53 2026 GMT
Subject: CN=0fb88810454cb0d34991e6d6160db7f870bd6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:7e:0c:74:80:4f:de:a8:7c:02:f5:64:3a:
ae:de:09:69:36:b3:b2:48:4c:f7:06:41:5c:97:2a:
7e:91:31:33:1f:98:ae:12:b6:14:6d:2f:93:05:84:
dc:d9:96:95:49:3b:d6:fe:2f:42:7b:b2:1b:da:4d:
25:69:ad:b5:79:84:84:05:0b:f8:96:a0:9a:27:83:
02:14:6f:9f:da:9e:78:40:b3:8b:1c:91:13:05:eb:
d4:d2:0d:d4:c1:69:43:a1:58:af:a0:24:82:8b:74:
41:7f:d8:25:50:ff:e1:58:3d:14:a3:96:ad:2f:a0:
2e:2d:16:1e:e8:f5:08:2a:ac:6f:36:bb:90:5d:14:
1a:bd:eb:d7:a7:66:b8:ed:ad:7f:50:af:3a:b9:40:
c8:bd:00:66:6e:b4:34:0d:39:41:1a:15:fe:51:23:
42:c5:e4:dc:3f:bf:83:50:33:1b:be:25:08:52:45:
5d:0f:a3:1b:e3:26:82:c5:74:68:96:74:11:03:33:
0f:2d:d8:25:1c:d4:64:5b:50:47:db:1f:3c:be:34:
2c:25:86:1e:8c:08:81:6a:7c:29:85:31:1e:f1:23:
22:35:c5:cb:c7:43:e0:fa:fa:53:d2:b7:0a:43:35:
8c:12:7d:a1:d4:3e:48:b0:e4:b1:57:c4:cc:dc:be:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:88:10:45:4C:B0:D3:49:91:E6:D6:16:0D:B7:F8:70:BD:64:20
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:3a:4d:d3:9e:eb:46:d8:6f:59:c7:b1:e0:2c:d9:2e:50:
0f:db:38:16:c5:57:80:14:33:5c:0a:dc:a4:f7:a3:a1:0c:41:
5d:72:f7:66:8a:86:c0:90:d9:87:57:3d:4a:59:6b:f1:09:94:
8e:30:44:be:ca:88:ad:d8:52:56:a5:f5:1d:cd:0a:a1:57:2c:
4a:9f:e0:2a:59:85:82:7c:df:b7:7a:3e:29:0d:76:e6:cb:97:
29:2f:1d:46:39:bc:d5:b9:1a:91:cc:c9:21:16:68:fa:5d:76:
16:e8:03:b0:2a:93:87:94:a2:05:63:88:7c:4a:f5:54:1b:2d:
61:bd:78:da:1a:51:c3:ef:13:96:41:fc:8d:e7:6c:ae:67:44:
b8:2d:19:be:d5:34:77:4a:db:f0:42:35:c1:ca:5a:74:97:0a:
19:6b:b5:10:2c:5c:05:c7:c1:a8:34:3f:ce:36:23:f8:4e:88:
56:80:6a:ed:8a:a9:b4:04:27:b9:64:95:2f:74:6d:77:b8:1f:
19:17:a1:0f:f5:bb:4e:f2:4d:77:3e:df:97:e1:54:4f:0e:66:
87:75:dd:9e:57:12:19:90:8a:00:a2:21:4f:91:09:6d:2e:db:
25:0b:99:75:46:3d:b5:af:3b:53:f8:34:2f:53:a9:30:89:ea:
d5:89:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:14 2026 by rpki-client