Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier: Pzd/Ha8KJdAbx6Yiq6uwcIzoCrf2NEcEkYAaLbOvhPE=
Subject key identifier: 96:A2:EE:06:F4:9B:02:E0:A8:6D:35:57:D2:07:FE:31:CB:F8:8F:B6
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer: /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial: 019D265FEFD232488EB881CDBFB3C18E5F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number: 01B7
Signing time: Wed 25 Mar 2026 19:01:54 +0000
Manifest this update: Wed 25 Mar 2026 19:01:54 +0000
Manifest next update: Thu 26 Mar 2026 19:01:54 +0000
Files and hashes: 1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
2: ETMpToqTleOoqImfhhOrXw4lz3Q.asa (hash: CY0wY17SWUl1vZ+zGcUwbXDJHsRR/4ff/AIuJo1+GZo=)
3: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: fjJIKSFs8TMYIl6WEksXmDYH/RhqK6jIwJCIdHZ3yjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ef:d2:32:48:8e:b8:81:cd:bf:b3:c1:8e:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Validity
Not Before: Mar 25 19:01:54 2026 GMT
Not After : Mar 26 19:01:54 2026 GMT
Subject: CN=96a2ee06f49b02e0a86d3557d207fe31cbf88fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:b1:0a:26:c7:f5:13:5b:c5:cd:e6:63:bd:
85:4d:2f:f1:ed:9c:e0:6a:5b:f4:b8:36:d8:dd:8a:
59:2d:fe:c5:8c:90:dd:99:44:4b:83:78:03:da:a3:
9c:e9:b1:ba:e1:3b:ef:6a:b5:9d:ba:63:fb:ba:72:
46:40:1a:2c:85:39:aa:3c:ba:31:51:ce:fa:68:50:
01:d2:03:47:a6:ba:7e:c9:9f:cf:92:4c:28:a8:99:
26:f1:90:b5:02:0f:b4:6b:f3:2e:b0:d1:d4:ba:df:
ff:48:55:75:9f:8a:1c:be:45:b0:dc:0e:ca:f6:1f:
a4:13:79:8b:92:3f:12:e8:30:39:18:56:67:54:ea:
49:71:e4:d7:bf:78:0e:44:d6:af:ae:46:eb:7a:8d:
11:72:ee:32:c1:99:b3:b5:7b:cb:26:97:8d:d9:9f:
27:b2:43:34:21:fc:29:84:a9:79:c3:02:cc:28:de:
ad:26:f0:38:59:0c:9d:fd:59:cd:42:bd:e1:ce:e0:
2d:32:b7:c7:66:74:57:96:e9:ee:61:82:22:17:8a:
61:c6:d7:ac:91:fb:5e:65:7f:4a:e5:2b:bc:5f:cc:
54:51:d0:4d:0b:4b:a8:67:aa:0b:4e:70:94:eb:5f:
26:f5:66:c0:44:62:90:c4:cd:79:f5:be:a3:fa:70:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A2:EE:06:F4:9B:02:E0:A8:6D:35:57:D2:07:FE:31:CB:F8:8F:B6
X509v3 Authority Key Identifier:
keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:4d:1e:16:eb:70:dd:1f:fb:63:d4:3a:2a:4a:4b:9b:5e:
80:48:d7:97:eb:21:6e:68:27:7c:5a:67:98:50:ef:5d:ca:62:
e3:04:4b:0b:e6:c1:4c:6d:0e:ef:32:58:36:47:dc:13:a4:aa:
f2:c7:9d:f2:0f:a3:b6:88:2c:90:ce:93:f4:51:10:09:4a:66:
48:86:44:b5:47:2a:02:e6:fd:d3:a2:56:fc:cd:3f:ff:db:9e:
27:5d:53:c4:26:8c:54:2a:aa:15:6f:ed:ec:05:ee:c3:13:f7:
4e:0d:6c:4b:46:5b:98:92:1b:32:8c:47:f6:f4:e7:e2:32:df:
6f:5d:00:9d:a6:a0:5b:32:f0:96:bb:d6:67:02:3e:23:fb:6a:
f5:14:28:70:33:18:d0:cd:ad:9a:8f:85:a0:98:92:67:0c:a6:
4c:3e:a0:46:b6:e7:6c:dd:92:96:d4:bc:33:57:34:2d:0a:27:
7c:c7:d6:ba:24:d9:35:0c:50:38:eb:2a:cf:74:cc:dd:38:91:
49:d8:4c:03:d4:1d:05:4e:9e:7d:aa:ce:4d:7e:ff:94:22:8e:
fe:91:e9:9d:44:f3:b8:d5:0c:e3:52:cc:01:07:11:aa:c7:27:
7b:49:d4:1b:07:59:68:a7:f0:c3:17:87:d8:df:91:fb:1a:66:
84:ad:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:59 2026 by rpki-client