Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: Wx1BoQ+0oTO6IvmLq84hv+IbaQcsoyvLPsug8NNfEms=
Subject key identifier: 7C:93:E8:45:66:0B:D2:E6:8C:3B:5C:4D:33:23:E3:14:95:E0:93:6F
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 019D2884A10F31FCEADF5BA544AA5BB97C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0E90
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: 5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa (hash: vHRw1aMy6QtggdL865LadOSRH74ZxGkEgwi3zn9M/rU=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: xM5oavbPwbH48xI40FWwXFiMQgKW+ApOfOOD7IITPuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a1:0f:31:fc:ea:df:5b:a5:44:aa:5b:b9:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=7c93e845660bd2e68c3b5c4d3323e31495e0936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:0e:b3:f6:45:1b:2c:6f:89:31:7a:15:89:
3e:21:8c:fa:0b:c9:53:b0:43:96:c6:d1:c7:1b:71:
25:82:b9:03:f0:8d:01:5d:ca:53:e6:82:6b:4c:91:
7d:a4:08:e6:f4:33:f9:45:52:82:f2:22:27:51:34:
61:ff:cc:2b:e2:ac:b1:54:03:fd:eb:2d:05:aa:84:
75:cf:27:6f:71:9b:57:9f:74:f2:3d:37:d1:d7:d5:
1a:c0:5d:98:67:b2:5a:1b:3b:65:79:a4:36:3c:46:
26:23:1f:77:43:12:59:b6:5d:4e:91:9f:81:fe:29:
96:43:d3:b5:b5:cf:58:7e:ff:0d:f7:93:d7:3c:1e:
3d:55:85:37:e7:b0:8b:cd:36:44:84:12:e7:c5:77:
71:e7:a9:5f:36:76:be:c6:fd:34:ef:ce:4d:a8:06:
97:aa:bd:99:33:93:ea:74:c8:95:19:35:c5:7e:78:
a8:8e:68:a6:16:b6:17:0b:dd:5f:a6:16:64:10:a4:
a0:70:44:86:bc:22:ff:42:38:ca:b1:5b:25:9d:59:
53:59:2b:38:8a:d1:95:d7:04:33:45:d4:18:94:f7:
14:1a:f4:0c:86:75:09:54:ff:a7:41:0d:17:f6:29:
f4:27:3e:0b:cb:78:77:09:df:33:ac:bb:e8:2d:7a:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:E8:45:66:0B:D2:E6:8C:3B:5C:4D:33:23:E3:14:95:E0:93:6F
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:91:22:7f:ec:75:b6:6e:43:b3:5a:79:7b:68:8e:8f:7e:
31:f0:cf:f0:18:e3:9e:d8:56:05:53:21:f6:c1:d8:04:73:28:
ee:e8:22:e9:90:ce:7d:cf:26:5e:d1:2d:e0:4a:13:ef:31:89:
e2:03:61:cd:f0:13:ab:06:a1:1d:c9:6a:b1:61:18:dd:61:eb:
8a:a7:9e:4e:d8:fb:b1:1e:b4:5e:b8:5c:63:70:71:cc:1b:da:
bd:f2:c9:51:58:ff:e8:d8:b6:ed:7d:3f:55:d1:53:a7:aa:e9:
56:b4:85:47:04:2a:67:5a:95:74:6f:d7:f2:6c:7b:bb:4e:84:
f8:03:2a:6b:a1:f9:5b:6c:d2:bd:fc:11:c0:9f:77:a6:ce:5c:
4e:b8:b7:4a:1a:7b:b6:05:9e:fa:e6:19:55:f5:68:8a:6c:88:
4e:6c:73:03:0a:25:6e:a5:50:46:e4:43:5f:70:c3:08:72:43:
d0:d5:d4:bf:5f:74:51:18:28:d5:2e:57:b1:e9:89:31:17:6b:
20:18:e6:46:33:78:88:1a:ca:be:34:b9:43:34:1f:74:05:d3:
8b:66:a6:ed:da:79:d9:29:2e:bf:20:11:44:f8:99:1f:2b:54:
9b:74:b0:2c:00:bf:40:3d:e5:0d:20:31:3b:1a:19:de:b0:29:
05:13:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:17 2026 by rpki-client