Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: tlM+03dNjT+fHx2kRX78RNohXRGMVJ91ZO0yWnuetG8=
Subject key identifier: 7E:8D:0F:E8:FF:7A:12:2E:AE:04:6F:F9:CE:C2:99:48:AE:9A:46:D7
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019D2772B73E7D8938EA09B980FF6F179269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0D4E
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: VBLtb5anXu8mfDZEd2sf0Q3rh38.roa (hash: ZdPYXywTN4OXgthFTsawnGv2wOYDeomubZS+6zVQngE=)
2: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: 7dprWawdqJxWGcmtr1JO92ULVWpAbt424IfAuRsPs94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b7:3e:7d:89:38:ea:09:b9:80:ff:6f:17:92:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=7e8d0fe8ff7a122eae046ff9cec29948ae9a46d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:ee:f7:bf:ad:2f:50:15:f9:8a:22:9a:0f:
cb:d9:7c:b5:43:74:95:4f:5e:a2:b8:ed:bf:1d:0e:
5e:56:52:6e:3b:31:f9:31:eb:f5:56:54:53:0c:cd:
f9:2a:0e:11:9b:92:2c:11:7f:8a:ee:0f:0b:5e:f5:
aa:3b:85:3d:26:34:3d:32:66:e7:ca:2d:fe:1d:5d:
b9:01:b9:4a:2a:aa:70:39:16:36:94:da:d1:fe:53:
4b:91:cc:66:ab:76:9b:ab:fc:84:60:7c:51:1c:ef:
48:f1:e4:8f:2b:65:5e:9c:6f:35:c0:35:e0:5b:b3:
22:3d:0d:9e:8f:38:a5:83:92:5f:1c:fd:37:7f:88:
87:0f:91:3b:31:92:45:03:ab:1e:cc:af:df:fe:34:
17:52:a9:c3:51:39:81:df:42:c8:06:84:1f:b2:ca:
75:27:d9:5d:0f:77:f7:58:98:f8:25:7b:e8:d2:58:
05:4d:1b:42:f8:62:a1:b7:95:6c:6c:26:e6:24:0e:
62:b0:61:bd:09:fb:55:0b:04:c2:fa:50:1c:0a:1b:
d3:d4:f7:d5:d4:45:7b:a9:58:49:4b:dc:d7:fa:57:
a5:cc:4a:d7:85:d1:83:f4:b4:3f:a5:a7:a7:79:33:
51:b3:42:6a:67:99:b1:63:89:5c:24:3b:20:f0:a5:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8D:0F:E8:FF:7A:12:2E:AE:04:6F:F9:CE:C2:99:48:AE:9A:46:D7
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:35:5f:61:b5:51:39:b3:43:1e:15:a8:2e:19:44:7f:14:
7e:d2:a5:bc:2d:3b:56:f3:97:58:4f:cb:2c:a1:b8:2b:e0:89:
57:8c:c3:76:ce:e5:a4:13:69:75:df:b0:85:30:fa:a0:8e:54:
af:1e:45:fd:74:09:44:54:dd:a8:38:af:d3:de:8b:1b:53:95:
f9:5d:ed:3e:95:73:c8:04:91:5f:2a:93:4e:70:5a:91:0a:a0:
a4:27:4f:85:14:51:2f:cd:61:22:b1:e0:89:d9:b8:f1:3b:57:
1a:e4:83:76:c6:f9:71:66:cd:01:ee:75:6f:32:8d:df:d0:e4:
52:87:27:02:16:4b:f2:3e:e5:e4:86:cc:0f:0a:bb:81:fc:1a:
14:fb:89:65:f5:b0:9f:fd:77:10:51:61:84:f2:8b:b7:fe:39:
7d:a7:ef:73:3a:71:60:3d:91:7f:71:53:3c:ab:1e:1c:a3:67:
a3:0f:29:88:11:2f:d5:7a:40:63:91:ad:e2:f5:f8:5e:db:23:
4b:d5:76:f1:5f:fc:f9:19:7f:43:70:76:3d:da:64:ce:c8:1a:
5b:9c:f6:0a:f8:af:13:38:11:c9:c8:65:b8:1e:4d:ee:d1:5f:
1a:65:57:c6:39:a9:05:0c:89:f7:aa:c7:39:e5:eb:f7:bd:3a:
07:d0:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:59 2026 by rpki-client