Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: SgSSm1acTPq0GtgvwNEghEnpBpsZ5bI44ta53P6C5LE=
Subject key identifier: 69:11:48:9C:98:3C:F4:9E:41:A2:A2:D6:0C:E9:87:BD:4A:F3:04:10
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019D27A8CA3F0D682036AAC764DA5042E3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 0454
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: 1-YhcIhEEArw6IoG9b79g8foLA58.roa (hash: pZFDtYibY4f6p1KpnyYKR++X/1rjAASd4QgMl9sz5X0=)
2: hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa (hash: ITLAoU923u7FKi0+iXA4NTM9zJ20lGavrZ5Z4X2QkmY=)
3: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: rO4NPzh/d0Xn3Pefta46jTnxXbe/3DMiXpiT79G/RVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ca:3f:0d:68:20:36:aa:c7:64:da:50:42:e3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=6911489c983cf49e41a2a2d60ce987bd4af30410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:49:88:ce:8a:8a:99:fd:d1:db:b7:66:1b:
29:77:1f:68:b7:9b:6f:2e:6d:d9:09:ba:7a:ee:ac:
4f:12:00:e2:e0:5d:1d:14:85:ea:6c:80:2d:40:40:
2a:a2:c6:dc:7e:5a:71:09:de:7f:9d:a5:cd:b8:ae:
4a:4b:aa:0b:3b:c3:33:39:e7:f4:9c:93:db:13:ba:
a4:be:ed:cd:8e:77:d4:6a:a5:38:f2:4f:01:5b:b1:
86:94:d7:22:69:a6:63:71:ad:35:ed:7f:55:cc:3d:
a9:ab:1a:43:20:cf:6f:57:ad:2d:99:60:14:85:b1:
c0:75:7b:fd:39:eb:a5:5e:02:11:e0:ac:65:0e:31:
79:35:af:9f:5e:8a:fd:ed:e5:a3:9d:09:f4:c0:08:
ce:a5:31:c4:af:f1:49:b7:31:bd:7c:e4:90:d1:7c:
4a:50:f5:c6:46:47:4d:bd:7d:b1:15:22:83:c8:79:
13:93:ed:83:a4:36:8e:c3:71:03:28:20:b4:80:bc:
fa:98:f1:d1:cb:c3:6e:d8:49:8d:fe:17:09:c5:41:
3d:e9:50:46:63:9e:45:94:a9:41:6c:f3:51:64:6e:
28:af:07:8d:40:92:ce:4c:19:03:13:4e:aa:c7:cb:
87:49:22:7f:e7:e5:5b:32:35:db:8a:1d:b6:14:0d:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:48:9C:98:3C:F4:9E:41:A2:A2:D6:0C:E9:87:BD:4A:F3:04:10
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c8:dd:c0:21:f6:a0:3b:8c:60:76:e1:33:43:a8:bd:44:7c:
ac:e5:e3:9b:77:15:1d:9b:d3:30:f8:48:21:bd:d7:83:d9:21:
bc:0b:00:c8:2a:e8:de:ad:79:e2:91:8f:11:92:4a:07:eb:88:
4c:fb:c0:c4:ba:4c:16:a6:5d:b3:76:3f:0c:45:e7:36:11:29:
f0:45:2a:7c:97:11:f1:bc:84:3c:38:a5:29:1d:ed:c7:e1:4b:
54:f7:2d:bf:48:5b:9b:8a:75:c9:5d:ec:17:65:4f:8b:05:77:
81:fe:75:0c:5f:e8:4a:6c:63:12:8a:9d:e0:a6:52:3d:2c:74:
d5:f2:8d:d1:1e:12:b6:87:56:0f:e4:f3:6f:63:50:2a:29:c6:
10:8a:d4:57:e9:6b:16:29:4c:57:40:bb:85:19:84:27:7a:9b:
be:2e:3e:20:22:12:a0:5c:e6:a4:53:99:d2:70:5f:c2:07:0f:
5d:74:dd:c4:f2:f0:74:70:3a:3c:95:e4:21:e8:eb:cd:c3:ce:
c3:64:1e:f0:14:06:90:d2:67:e9:76:fb:78:e3:21:51:06:aa:
12:e7:6a:46:de:08:25:79:2a:96:e3:4c:d0:8d:6e:58:50:52:
1c:28:e8:80:f6:6b:90:28:56:0b:35:3f:d9:8a:6e:e3:33:7e:
3d:8e:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:47 2026 by rpki-client