Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: SZL+NIZAIpfP5x58rHbOUuiRNzKeKNu8xjFnNWOilAM=
Subject key identifier: FF:7A:7F:6C:42:5F:65:70:BC:36:04:31:A3:00:65:8F:4A:F6:56:FE
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 019D26CD7C4798AD7429DC351F888AF384E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: GfTuX0KwSdkfHKGDeWKZFDGssWg.roa (hash: EwufZny6b9Jopwvn2m9ePJKhZ4mgvDv4zGEryHxcyLs=)
2: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: aMR1PnlDmI+GSkW1bo4qcwRCa27PelPKe25wmcb580w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7c:47:98:ad:74:29:dc:35:1f:88:8a:f3:84:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=ff7a7f6c425f6570bc360431a300658f4af656fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:f3:8d:ca:21:3e:4e:d3:82:55:8c:71:c2:
1f:a0:83:a9:29:75:4f:77:f1:65:86:c5:1c:e2:6b:
9d:41:fb:26:27:75:7d:6e:35:c8:c3:be:42:f6:a6:
c8:7f:52:85:99:4b:99:2d:9e:1f:af:10:d1:6c:38:
91:1a:dd:65:e1:ba:a8:12:8e:fc:2f:1a:b2:4d:ca:
f0:18:e3:e2:ca:6c:5b:d8:08:a8:07:7e:fb:2a:86:
6d:cb:4c:01:ae:f9:fc:70:31:53:e7:dc:de:14:35:
b7:6a:ba:4e:19:15:10:da:82:dd:03:f9:f1:1f:87:
f5:e1:bf:92:30:4f:72:b5:87:d7:bc:40:68:db:18:
72:33:99:b2:a3:04:54:4c:62:cf:fc:3a:c4:e8:e4:
2f:04:ac:82:e4:b0:08:64:22:e8:29:4e:5c:87:ee:
24:76:73:7e:d9:a7:03:62:17:a7:03:2b:d5:21:02:
64:1c:b4:07:20:fd:57:68:d1:1e:92:c9:98:c0:b6:
ea:a5:f3:01:bd:ec:83:1f:5c:61:f1:98:eb:d3:8d:
bb:00:49:90:68:32:20:1c:8f:ad:a9:24:62:13:24:
f9:e6:f0:db:33:a4:d1:d5:9b:43:f4:1a:90:15:4f:
11:e4:48:85:8b:c6:01:10:11:75:1f:07:3c:e7:36:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:7F:6C:42:5F:65:70:BC:36:04:31:A3:00:65:8F:4A:F6:56:FE
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:a6:a9:b6:8e:ae:40:01:66:69:4a:28:f6:a0:dd:0f:8b:
d9:30:42:f2:53:5c:75:af:b5:99:bc:df:e8:a6:f5:25:93:23:
c6:00:72:c4:15:96:7c:04:c7:e5:8e:32:ee:f5:41:15:c4:f2:
f1:61:79:ca:9c:f4:1f:09:b1:bb:17:fa:c5:2f:eb:12:a2:b7:
10:cf:98:47:7e:ec:32:72:4a:21:a7:07:5d:b3:1e:27:33:a3:
e3:8c:93:8a:03:20:98:fd:13:be:af:29:04:89:63:fa:1f:2a:
d1:8e:11:10:52:76:b7:2a:96:64:61:7a:46:9b:1f:56:51:c6:
a2:fa:2e:b5:1f:e7:3a:90:39:9d:17:86:21:d5:63:35:c8:22:
00:10:bf:38:d1:e8:27:df:db:e6:a3:64:e6:3d:f7:f2:fc:e5:
c3:c1:45:6f:48:5a:9f:3f:09:7c:b0:80:17:9c:c9:1f:95:9d:
e1:f9:97:ad:49:ad:de:e6:f2:6c:16:f8:2f:45:59:af:9a:29:
55:03:cf:67:8f:56:16:c1:3f:10:73:40:62:ce:04:16:25:63:
0f:39:14:ea:23:98:7c:90:56:49:20:02:ef:fc:50:61:83:66:
67:3a:90:8d:23:80:35:2b:a0:57:a9:15:ed:15:1b:37:46:22:
72:c5:77:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:10 2026 by rpki-client