Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: 56+F76ejtEoqC3URa4aeWkOFkJpeROhSuSB99IesSxw=
Subject key identifier: C6:91:98:13:07:1B:92:37:E9:9E:02:AC:18:B1:44:1F:91:70:D8:40
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 019D28F2DD9C74A60A386992219F890426DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 091C
Signing time: Thu 26 Mar 2026 07:01:38 +0000
Manifest this update: Thu 26 Mar 2026 07:01:38 +0000
Manifest next update: Fri 27 Mar 2026 07:01:38 +0000
Files and hashes: 1: 8gaFDPVm7425HwLUH8kmf-jVUCE.roa (hash: U1D2gfVixMPcnJRary8djiMaZdiJbp1bCUJ4yOL20hY=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: vfHPlyu3ba3vrldJUbgr06mkq4ZfPP+Q4W0a3z3gJsc=)
3: ydGFE-vOjkRoY9XDm0d0hrrNVz0.roa (hash: ip0u+uChx3w8r1t9QF+aKgGRt/jAva0+561xQaWYRlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:dd:9c:74:a6:0a:38:69:92:21:9f:89:04:26:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Mar 26 07:01:38 2026 GMT
Not After : Mar 27 07:01:38 2026 GMT
Subject: CN=c6919813071b9237e99e02ac18b1441f9170d840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:1f:0c:82:0b:c0:18:e6:e0:d4:9f:f0:14:
b6:3d:14:8e:e7:ac:6e:88:33:b9:e2:ec:80:17:c5:
fb:a7:55:30:7e:38:26:61:1d:32:b7:f9:f3:37:e9:
94:9d:17:79:35:55:aa:5e:a5:29:91:61:d7:31:c3:
41:e3:0c:e7:d9:48:6d:d5:56:61:45:57:bb:bd:c0:
7c:80:40:34:39:17:94:ff:ac:f2:e7:99:b0:d0:64:
b8:d3:e4:da:f3:05:5d:8c:2c:4b:07:f6:a3:bf:26:
13:d7:70:8b:d8:ab:36:fe:88:e4:ca:34:41:6f:3c:
e5:bf:9a:db:3c:42:f9:51:a1:a4:c7:06:51:13:6a:
68:9c:b5:73:cb:c0:a5:c8:82:79:7b:af:af:d5:80:
42:38:6b:c6:1d:bc:69:af:06:ba:52:12:f6:05:5a:
fc:bb:64:c9:1c:d1:cb:bf:6a:62:9e:7e:9e:50:2d:
27:65:9c:cc:31:a8:ec:97:66:9c:da:a6:af:44:6a:
a8:fd:ba:d1:1e:2f:d8:07:ec:b0:ad:03:67:18:73:
23:07:ad:56:52:f6:70:25:db:42:2b:59:7d:d4:96:
fe:bb:f1:8f:d0:81:fb:ca:6b:2f:22:ed:a1:87:61:
7d:63:b0:ed:8c:60:77:72:bc:e6:5e:14:ac:fc:55:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:98:13:07:1B:92:37:E9:9E:02:AC:18:B1:44:1F:91:70:D8:40
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8a:cc:89:dd:c5:46:52:9b:0b:7c:59:7b:f8:3c:69:39:18:
fb:52:ad:68:5c:9c:6c:a4:25:51:9f:cb:42:f9:94:85:99:8a:
65:1b:ea:c3:18:67:b9:7b:ab:55:1e:fd:fb:a5:c2:ff:98:7d:
f6:59:32:ad:22:30:b8:12:2e:55:eb:42:41:e5:6a:b1:0f:90:
67:21:b2:7e:fd:01:bb:7d:84:09:88:66:5d:e0:85:85:c0:d8:
20:43:5c:14:c8:21:a4:d6:44:60:11:e4:ae:b2:14:e0:45:ec:
22:0d:79:72:06:5f:b5:36:0c:e0:db:e6:52:d4:5e:d6:23:ee:
e8:b9:04:95:ae:d5:5e:c1:3b:9f:b1:e0:24:2a:b0:cb:0d:55:
31:98:86:84:e8:9d:61:a7:ca:37:09:5a:ed:52:1b:cf:eb:f7:
fd:85:2e:54:3c:7d:06:91:09:fb:cd:d0:2d:70:64:34:b3:0f:
b8:20:86:d0:1f:12:53:31:3a:4a:6f:05:b1:6a:38:ca:8b:de:
41:17:82:e3:99:78:96:0c:47:4a:ed:d4:fa:2c:0d:07:a8:6f:
81:1a:cb:7d:59:ea:dc:d5:81:25:90:c0:7b:89:a4:eb:10:c0:
39:4d:57:a1:8d:0c:c2:d1:7d:4a:f8:f0:62:5e:78:72:63:a8:
99:e6:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:40 2026 by rpki-client