Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: DgavgUMQcayj60Ny/VgcHfc/usaFfVHX7l+ocEL0T6M=
Subject key identifier: A0:2D:09:7A:0A:98:B9:A1:AF:45:32:F4:93:5C:2C:9E:6C:6F:CC:1D
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019D26967AC28035CAA7D95C9B64F3FF07D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:29 +0000
Manifest this update: Wed 25 Mar 2026 20:01:29 +0000
Manifest next update: Thu 26 Mar 2026 20:01:29 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: tc/m1n6z0XZzd4loCe2Jmr/jGeWI/0gh3h6usnSctOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:7a:c2:80:35:ca:a7:d9:5c:9b:64:f3:ff:07:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Mar 25 20:01:29 2026 GMT
Not After : Mar 26 20:01:29 2026 GMT
Subject: CN=a02d097a0a98b9a1af4532f4935c2c9e6c6fcc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:3f:72:03:24:ae:35:7f:19:e1:48:e3:e3:
65:b5:ac:11:e7:3a:d6:4e:d4:49:f9:34:13:cf:86:
89:db:fd:e0:5e:76:3c:f7:08:e2:fa:e9:ae:8f:24:
17:0a:8a:c4:b2:95:45:e0:e5:3f:ad:9e:0b:e5:c8:
44:f6:6f:40:17:4e:0c:e0:a9:75:3b:eb:e8:2a:73:
5c:ae:3a:2c:f4:bf:31:36:d0:75:a8:88:20:91:f7:
53:5d:ab:fa:45:ca:ef:1e:82:14:92:18:fd:20:13:
32:90:3d:e1:76:46:d4:42:e7:97:c1:9e:79:eb:ef:
4e:81:9c:ea:dd:45:f6:13:dc:41:38:0b:38:0b:57:
30:36:e9:90:e2:0d:b5:af:89:35:ff:d5:5c:7c:37:
96:f0:ce:88:ef:4e:1f:7f:c0:eb:46:93:79:76:28:
de:e2:57:39:63:3f:7f:35:fb:b4:97:e8:15:a7:a4:
ae:a6:8b:bc:b3:d6:2d:c9:1b:ff:c9:98:a4:bd:33:
e1:00:3c:a6:bb:0e:10:4c:10:ce:43:41:6d:5c:c2:
7b:39:ca:5f:e1:f4:99:95:29:73:14:d5:1f:33:92:
9d:82:64:73:54:9f:ef:bb:2b:13:88:05:51:68:52:
40:94:f4:b9:bf:6f:b1:76:6e:4d:1a:44:11:03:cb:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:09:7A:0A:98:B9:A1:AF:45:32:F4:93:5C:2C:9E:6C:6F:CC:1D
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:94:0c:b7:17:5d:68:a8:72:99:8e:6e:ef:06:e6:90:69:
85:84:92:4e:e3:d1:39:0c:4f:e7:5a:45:38:07:c7:1c:74:b8:
1e:d4:7c:ca:dd:34:f6:b8:9b:09:e7:19:9d:21:b9:9e:4d:08:
43:5f:82:6f:a9:f0:a1:6b:98:aa:e0:9a:d4:f8:82:04:61:72:
04:57:49:84:71:41:ca:49:a9:21:4e:34:d5:84:72:34:6a:01:
9e:67:de:38:41:7b:af:70:a8:c3:e7:d7:51:36:ee:1e:82:a5:
2d:ac:61:3e:db:ac:3a:ab:f1:60:16:bd:92:e4:86:94:18:56:
0b:38:72:a5:e0:98:b3:11:72:63:a5:3d:fc:6f:c2:01:09:91:
39:ce:a1:91:94:f4:73:0b:81:e4:99:60:d2:49:86:67:a6:52:
a2:a5:46:37:f4:86:73:93:52:bf:76:e8:a7:63:a5:a5:f3:64:
0d:09:dd:cc:e0:8b:84:22:bf:f6:4d:eb:46:a0:4b:4f:fc:60:
c0:41:cf:8d:0a:3a:ce:3c:18:e2:09:50:ae:d2:de:71:c6:34:
66:25:ed:6d:b3:a5:b2:c2:e6:64:10:8e:29:76:ba:d3:86:19:
1a:1d:fb:f6:a4:41:08:8a:4a:7d:69:19:a5:77:74:49:a1:6d:
ad:6e:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:39 2026 by rpki-client