Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: sKkmX2O0v5600YmzT2qrjKiyRqTUBrDdwmhON+H72TE=
Subject key identifier: 78:90:0A:8D:B2:7C:C7:59:CB:39:30:19:DF:0E:D9:C7:D6:2C:AE:28
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019D31F5D335BAA1B566B63C81C012D95FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 181E
Signing time: Sat 28 Mar 2026 01:01:27 +0000
Manifest this update: Sat 28 Mar 2026 01:01:27 +0000
Manifest next update: Sun 29 Mar 2026 01:01:27 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: kRvOzZ1851kYKZg76FfnVT/yRbsSHTjMaOLraBC7ROI=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:d3:35:ba:a1:b5:66:b6:3c:81:c0:12:d9:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Mar 28 01:01:27 2026 GMT
Not After : Mar 29 01:01:27 2026 GMT
Subject: CN=78900a8db27cc759cb393019df0ed9c7d62cae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:58:73:d6:ee:49:fa:e6:b3:6c:7d:9e:78:
43:6a:e0:b5:66:c3:39:02:f6:92:ed:a4:37:fd:99:
e5:26:97:fa:91:0c:ed:39:a6:80:ad:c5:20:0e:e5:
a6:1e:89:7d:21:3e:ed:04:99:ec:07:51:59:49:39:
d7:e3:e7:9a:1d:67:ba:03:eb:aa:28:2c:e4:54:c5:
ee:bc:d4:47:bb:df:42:a5:cc:29:91:d6:dc:f7:94:
c2:c8:69:ff:a9:07:3a:ec:01:70:f7:99:c1:54:bc:
14:e5:5e:73:8d:bb:d1:08:61:86:07:d5:30:7d:04:
20:96:f0:b3:7d:73:51:7c:cd:88:fd:03:e4:af:a8:
94:94:70:69:60:31:0e:67:b7:e7:ac:b6:3f:70:7a:
14:44:cd:5e:1d:f4:6f:f2:9e:ad:f7:5f:ba:72:38:
26:24:df:9d:9b:16:94:64:cb:63:71:71:0b:c8:32:
89:d1:97:7a:75:57:ab:a0:86:ad:4c:10:0a:c4:e2:
14:80:56:a2:68:2d:d7:4c:e7:30:db:50:07:10:4e:
23:fe:90:2c:12:82:0e:e2:d4:b1:6b:90:86:93:2b:
42:b5:5b:fe:c7:d4:a7:81:3f:ad:60:d4:28:f9:e8:
32:d4:70:02:67:ed:c5:c1:aa:de:a4:64:93:79:38:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:0A:8D:B2:7C:C7:59:CB:39:30:19:DF:0E:D9:C7:D6:2C:AE:28
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c7:6d:53:cd:3e:ff:65:03:6d:4c:17:38:f1:e3:7e:1f:e7:
06:24:7b:06:26:6b:c7:8d:84:d2:6d:a0:9c:09:9d:d0:92:af:
d5:c8:db:b9:f1:92:90:1c:7a:70:de:32:09:1b:c1:81:e4:90:
12:f6:2d:67:01:c6:57:2a:bf:db:ea:3e:c1:e2:2f:9a:03:e7:
7f:fd:9e:37:c0:b8:c3:7e:81:c6:32:bb:63:5d:f7:5d:37:ea:
4c:f0:dd:3c:84:7c:2a:9b:1d:da:eb:9c:5f:b0:ac:b2:39:dd:
88:40:73:c2:77:c1:c9:61:1a:61:27:54:44:90:ec:61:de:48:
fe:f2:0f:20:69:7a:93:ed:db:6f:ba:38:59:33:23:9a:c1:27:
a2:24:71:b8:37:ad:b2:6b:a4:c8:43:f1:57:f6:21:8c:c6:40:
67:0d:2b:6f:0d:7f:c0:55:80:70:e8:a3:6a:af:00:34:6a:2b:
37:80:0b:5f:8c:84:33:a8:bb:12:68:fd:eb:84:5d:48:dc:6c:
b6:d5:9f:63:90:d0:13:44:32:8d:10:13:7a:e7:80:2f:c9:d9:
3a:84:7c:d4:2f:3b:a0:e8:c0:97:c5:52:a1:b3:04:56:74:c5:
73:78:3c:d9:07:7c:bd:0a:a4:c9:a4:d0:ff:79:83:33:cb:a2:
a7:ea:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:44 2026 by rpki-client