Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: m6eo7ARaucj3Jr5Xr2Kl01Z8nf7yGtpMHbQHuvHF+m0=
Subject key identifier: 88:E2:3A:18:E9:86:A6:AB:B2:34:17:9A:11:D5:B5:F5:16:F6:D0:88
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019D2628437CE939C20F8170B88A23DFCC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 058D
Signing time: Wed 25 Mar 2026 18:01:06 +0000
Manifest this update: Wed 25 Mar 2026 18:01:06 +0000
Manifest next update: Thu 26 Mar 2026 18:01:06 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: CbDaWKznx1vnxuxEv1I5B97a/0nREbK1aJleefSJ8Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:43:7c:e9:39:c2:0f:81:70:b8:8a:23:df:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Mar 25 18:01:06 2026 GMT
Not After : Mar 26 18:01:06 2026 GMT
Subject: CN=88e23a18e986a6abb234179a11d5b5f516f6d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:8f:43:08:c2:47:a2:29:a4:97:1d:e9:12:
12:f9:40:09:21:e6:a8:a5:5d:63:ae:8c:c8:76:9e:
d2:7b:35:af:1f:7e:a1:cc:d8:e2:35:8b:dc:9d:1d:
78:c6:9d:6b:92:2a:2e:e9:a4:da:f7:e0:4a:9c:a6:
d5:41:fe:64:c2:99:af:f8:a6:5c:4b:91:d6:55:e8:
5f:d2:2f:e9:5b:47:37:59:72:12:ee:cd:d0:19:86:
f2:1d:c9:46:0f:6f:88:77:1c:1c:c4:79:35:fe:14:
f1:92:71:63:da:9b:02:2a:f8:e2:34:76:45:be:60:
34:f9:dc:e3:cf:37:4f:50:2f:2e:95:e0:b1:2d:cd:
25:c7:5f:15:b4:43:7a:77:ad:d2:bd:7c:58:7c:f6:
18:4f:9e:ef:a8:e8:26:4f:8a:e9:b2:d3:a7:90:54:
4e:0a:e5:2e:f9:4b:bc:bd:30:37:4f:6a:82:4e:05:
41:e1:5d:04:60:c1:0c:18:c9:58:31:f0:9e:ea:58:
58:0a:b8:67:82:27:68:79:41:21:8d:33:dd:34:65:
9f:2b:34:08:e7:c6:2a:97:13:df:90:40:df:ba:fd:
07:c2:42:5f:dc:76:2e:2b:41:0f:47:65:19:24:56:
38:d2:ba:bb:c6:30:a9:45:37:11:b5:13:e7:c2:d8:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:3A:18:E9:86:A6:AB:B2:34:17:9A:11:D5:B5:F5:16:F6:D0:88
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:d1:1a:d3:7d:04:87:dd:a8:0b:12:a6:dd:5c:05:fa:94:
84:6d:4d:0f:ed:29:77:ab:93:f9:66:b4:c3:f3:c1:43:57:e8:
b6:5a:79:09:b5:46:9b:8c:b3:0d:fe:c4:1d:23:3a:59:63:7b:
12:e7:a7:5d:f3:cb:d0:e9:4e:10:3d:4f:44:6c:81:4d:1f:68:
4b:b5:8a:3a:04:22:9b:8d:c3:f5:1d:2b:da:00:75:de:53:fe:
66:67:d4:85:e6:6d:26:c6:2d:7a:96:6d:3d:45:86:4d:f0:00:
1f:04:8b:1d:7d:6f:c4:9b:2a:fd:4e:c5:3e:96:0b:56:e6:ed:
59:22:04:b6:70:67:95:a6:6e:8b:fc:df:c6:63:46:9b:e3:24:
19:31:fc:92:74:b4:9c:06:51:94:20:8b:73:a8:fc:91:c9:18:
ab:ef:a7:7e:e0:5f:2a:07:1f:36:1e:fe:08:c2:65:a8:f6:7f:
63:80:69:b4:5b:b9:92:42:7c:7e:b6:f9:73:1a:ba:3d:3b:89:
15:61:95:83:1d:68:bb:a2:09:7a:3b:a1:bc:c5:a4:39:41:67:
d0:15:e8:41:e2:6d:be:40:59:a8:a2:b8:35:c3:d7:97:c5:32:
67:55:f5:23:c9:56:13:82:dc:42:1c:f7:16:3b:70:db:c6:a5:
ad:7c:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:07 2026 by rpki-client