Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: jUjCANq3c1JbtjYLvjE2ESGlkCLR9XJslg+indEvTps=
Subject key identifier: BD:A6:D5:BA:CA:89:1C:D2:03:7F:39:EA:B4:83:3C:F7:38:CE:E7:F8
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019D27E07B1E99693AD2D6C0AAB528DF6617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 09DA
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: 1t3+Eq7QOZ0n917LGaktBMC9LI7TJfXqjsuPjf/40lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7b:1e:99:69:3a:d2:d6:c0:aa:b5:28:df:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=bda6d5baca891cd2037f39eab4833cf738cee7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:cc:65:e2:f4:cb:9c:60:96:04:15:04:2f:
40:19:be:de:bc:3c:38:07:8e:52:38:e0:69:1f:21:
5c:ba:c4:18:5f:fe:26:6d:d8:8f:d4:c2:c8:c5:39:
15:bd:33:e7:28:97:bf:ad:00:1b:94:b4:c3:16:eb:
c0:be:7d:d1:55:27:0c:d1:81:e1:23:f0:94:e1:6c:
0a:2c:1c:d5:ba:51:e5:8e:1a:c3:ee:db:37:e0:2c:
3b:d4:79:2b:fd:28:1f:82:93:eb:0e:86:41:d6:22:
03:b9:55:9d:3d:bf:0d:f4:a4:8c:0c:ac:62:14:89:
21:38:bc:da:17:06:32:61:32:d7:3b:5f:25:9d:f7:
73:9a:2f:2d:54:3b:78:85:c2:06:41:1e:3e:2e:28:
0a:67:17:b9:0f:ce:c0:8d:00:0a:72:e0:31:34:af:
11:47:2e:36:9a:ad:21:9d:37:70:93:a1:b7:53:6e:
57:f8:d6:c4:2a:28:12:7b:b2:fb:8d:c1:37:68:fc:
58:dc:0f:b4:6c:d4:8e:13:59:57:32:25:3f:d1:c4:
16:20:8a:42:fa:29:7c:e0:8d:6b:42:e3:65:52:c1:
e7:72:f1:1a:08:cb:5e:f5:67:bd:5a:a5:98:8b:9d:
c5:aa:cd:99:b1:c0:9c:ac:68:c4:8b:44:ad:04:e9:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:D5:BA:CA:89:1C:D2:03:7F:39:EA:B4:83:3C:F7:38:CE:E7:F8
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5f:aa:04:ee:ff:3d:df:85:f2:d3:ee:55:c9:c2:f7:f1:96:
80:e3:82:f3:1c:98:ea:3f:23:7f:ab:ea:b9:f2:0a:e3:66:ce:
90:68:59:02:00:f6:f1:a9:97:d4:6b:bc:92:db:12:a2:f8:03:
27:eb:f7:cb:bf:20:41:91:f7:fe:ec:5d:18:36:45:b0:b2:4a:
dd:7d:4b:e1:2a:7a:e0:43:12:b3:8f:38:17:a3:f2:2e:81:60:
1a:08:4a:61:d1:d8:26:37:df:01:79:07:91:6b:05:07:22:9d:
b2:24:50:c1:aa:4a:79:f6:4d:87:4d:dd:52:88:46:0d:d9:57:
f2:71:7a:54:60:05:ba:c2:5b:14:f5:31:ac:1a:64:17:9d:d4:
06:ec:75:90:eb:e0:f7:ab:3f:77:62:8f:3c:39:4e:2b:01:73:
cc:a4:8c:ff:03:a3:bd:8c:aa:21:2c:6b:ba:67:f0:c5:7b:61:
a0:88:b2:98:ca:e7:17:24:15:1d:61:b1:3b:d6:c0:c9:51:cd:
c0:49:d3:b0:41:90:b3:e0:54:ff:02:3e:2a:b4:1b:03:ea:c7:
55:c8:45:6a:51:da:a8:f5:da:06:eb:76:36:9f:cc:ac:89:ab:
94:d3:70:51:7b:97:90:f3:d8:74:dc:a4:be:e1:21:71:cd:f0:
04:c0:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:58:13 2026 by rpki-client