Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: 9Xt3bzgg5UG4s2dnOKvN2SLwS5QQL+OQBAcnX9GdSl4=
Subject key identifier: 13:B8:C7:97:81:D0:23:6A:40:22:EE:60:8A:6E:BD:EC:96:01:0D:EF
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 019D2816A125CCD47EB5812F70F0E224168B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 12C9
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
2: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
3: X0C-jW-JvrYRehOUZc1q8qR_Alg.roa (hash: kkuwe92elfxQBb6MWA1wN1ame7fs+u6hfUmN0ZMLiZQ=)
4: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
5: bR0NHkHbblmEtwb2_nY_6Q1NAmE.roa (hash: KrJc5AmVNKuLrZUthurXLuq1KgVncKQfKVwT8ndsj4c=)
6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: FOjPHymiMNFVZAil9ngqU26EKiOMGUx0CFuOEerhsrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a1:25:cc:d4:7e:b5:81:2f:70:f0:e2:24:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=13b8c79781d0236a4022ee608a6ebdec96010def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:ff:e5:6d:19:e5:a7:cb:f0:4c:f4:38:b0:
85:2b:75:c4:3b:1a:ad:cc:b9:0b:9a:d6:d7:fe:07:
35:01:a0:fd:77:a0:fb:a7:da:b6:22:82:d7:ef:1a:
3e:2a:c0:0f:09:b2:bd:56:4d:53:31:47:47:da:04:
c6:87:76:8f:22:44:ec:ef:68:64:db:a1:14:32:2e:
72:5f:45:f6:31:99:c8:dd:8f:a0:84:77:86:54:a1:
04:9c:c0:78:89:e6:a6:92:1f:fc:97:fb:7d:ff:c3:
38:a6:28:6b:9b:f6:aa:be:bf:14:c7:0b:a5:cd:1b:
da:02:30:66:08:ac:70:6e:c0:5e:94:3a:2c:cd:83:
8c:e6:30:79:10:30:76:c2:32:51:97:32:70:b1:64:
2b:b8:6c:87:b5:37:25:71:27:cf:2b:30:f5:53:2a:
3c:27:a2:da:69:49:38:62:b2:76:8c:92:7f:d7:3b:
5b:62:64:62:55:32:d9:05:22:6a:5e:f6:8e:38:bc:
ca:cd:02:d4:62:2d:9f:fa:74:70:75:61:0c:4b:0f:
9f:78:d9:bb:1a:99:89:e7:c6:fa:e5:6a:32:22:82:
31:4a:ec:1b:12:a0:32:4f:c2:cc:e2:57:72:42:97:
0e:fb:15:99:26:25:dd:2c:10:10:11:d4:ee:ee:81:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B8:C7:97:81:D0:23:6A:40:22:EE:60:8A:6E:BD:EC:96:01:0D:EF
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:1d:05:02:75:fd:42:7d:3d:21:83:32:d3:f7:37:cc:e0:4b:
d2:f1:1f:52:5c:bb:25:cc:cd:ac:46:df:43:9d:9b:c4:2a:94:
ae:88:68:15:38:b3:a6:a1:fa:e1:23:40:0d:a5:80:0f:4f:31:
24:e6:ef:2a:1a:e2:b4:9a:69:b1:90:b6:52:e3:57:c9:0d:10:
06:e8:4e:e1:99:62:02:ca:fa:c7:90:de:2f:82:76:27:85:b8:
08:d9:64:99:08:97:8a:56:7c:04:7c:8c:c8:d8:34:22:79:09:
86:79:aa:e7:06:23:bc:94:c6:34:58:c7:a8:53:80:e9:88:08:
d5:a3:07:0a:26:e5:3f:57:41:f8:12:f5:b9:10:14:74:72:74:
8c:2c:6c:36:95:b9:d7:d5:b5:05:43:0d:ce:d5:b9:c3:64:e9:
86:22:f1:89:7b:e5:32:d3:24:8c:b5:ee:c8:8d:ed:74:fa:bb:
f1:8c:97:6c:d8:39:76:ae:51:43:21:aa:8b:36:b0:cc:28:e3:
03:9e:0b:60:6c:c2:37:a0:4e:e5:84:20:7c:55:25:6d:1a:ac:
61:74:94:43:8a:f6:b3:e7:47:16:b9:37:7b:0c:9b:c6:6f:08:
03:21:ce:90:65:5a:62:06:39:0e:59:81:87:87:ed:56:cc:31:
eb:3e:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:54 2026 by rpki-client