Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: jLPYH52DP9ufaP3893iMfVnRzHFJKlp0+wb7cuH2oIg=
Subject key identifier: FF:55:C9:19:CD:A9:86:00:56:74:0B:66:32:B7:EE:CE:33:75:EF:C1
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 019D273B152EF68FF9B7D66081D74D347D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: ZwzfP2SL+8Jf/HNPKqXp3OKvmIL9mwuNj1NJxeyzpuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:15:2e:f6:8f:f9:b7:d6:60:81:d7:4d:34:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=ff55c919cda9860056740b6632b7eece3375efc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:72:76:4b:ec:79:55:c9:08:57:c3:19:ca:
14:e8:e4:54:06:18:c1:17:36:7f:02:ce:0f:97:d3:
cc:c6:f4:fb:fb:dd:43:88:99:42:90:92:af:2e:7b:
51:27:8c:71:a7:81:4f:7d:f4:47:ef:c8:60:40:97:
d3:d2:56:3f:4b:a8:93:03:ee:0c:4e:42:c9:63:fc:
ca:e5:63:68:f1:16:15:20:ce:b2:57:77:76:92:95:
5e:65:ed:d0:cf:ef:dd:7a:e1:78:78:59:71:fa:ce:
3f:67:51:ed:d0:cc:ed:75:dc:51:fc:3f:18:de:68:
ee:4c:b1:35:42:5c:2b:47:49:d7:b6:e9:d4:27:44:
a9:28:4e:f8:11:f3:a7:53:52:42:e6:ca:f6:ed:89:
35:75:82:5f:ad:e8:d3:5a:5a:99:7f:f6:34:07:95:
58:75:fb:bf:23:b6:e6:58:52:0f:82:3f:b9:22:9b:
59:c4:7e:26:dd:68:84:75:86:0b:4d:0f:7b:a5:bd:
fa:ec:ea:91:6e:28:f2:2a:49:b1:66:0c:04:1d:b9:
7b:2a:2d:35:a8:00:16:fd:7f:49:74:7b:82:dc:6b:
ea:e2:3c:5a:14:3a:82:e2:41:a6:b9:89:93:81:17:
0b:9e:a3:97:33:a8:7b:70:36:15:de:88:17:47:db:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:C9:19:CD:A9:86:00:56:74:0B:66:32:B7:EE:CE:33:75:EF:C1
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9b:31:a4:dd:86:c2:be:4d:aa:72:a3:56:50:19:12:ab:a1:
b0:0d:6c:de:2c:12:6d:af:e1:d9:3d:df:a2:37:65:aa:23:da:
98:3a:e4:d6:e3:bf:dd:c4:0d:b5:df:72:45:b5:fd:59:9f:45:
44:e8:b0:9f:21:6c:da:a0:b1:35:5d:2e:51:dc:47:58:13:cf:
d2:c5:bc:9f:2b:e5:34:8a:df:da:20:10:b3:a1:6d:c3:07:f4:
65:5b:49:8c:d3:11:a2:08:39:2b:9c:9d:be:76:e5:a3:2b:00:
61:71:2b:57:d2:b6:ac:a5:1e:46:03:f4:a6:cd:5b:71:df:32:
0d:f8:44:95:07:81:ba:c3:62:5d:0d:61:18:f2:4e:00:42:e1:
3a:e2:1b:f5:c6:0f:46:74:9f:ae:8b:f9:97:b4:43:d3:29:54:
14:61:fe:22:ad:71:16:dd:53:55:5a:39:1c:1e:2e:d4:96:fc:
22:8d:35:39:eb:c9:f5:9b:f5:a5:10:95:10:95:ed:4f:6b:0f:
51:de:09:7e:09:27:37:5b:12:32:c7:da:0e:d9:13:ae:57:0a:
67:7e:0c:6e:be:d8:34:d8:84:5d:a1:bb:96:1c:d7:ae:a4:9e:
63:85:27:ff:f0:25:d0:c1:5c:44:49:2c:db:c1:91:44:20:ba:
b9:5d:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:33 2026 by rpki-client