Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: 7cHUXhZ2vBR7G1xgFNU4c3lrgHYLAbFpOAQeKkqznqI=
Subject key identifier: E7:30:32:25:8C:2F:DF:3C:30:D2:8F:BF:36:BA:51:79:39:56:FE:22
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019D270443320A2D77FA411D1FC5555078A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0F23
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: _zlIXE7-h25_ow4E9RjKnNQhPj8.roa (hash: hpvg+CFOE1drWZR6fUE97UGt95Uv377gPrIZqvoM3kw=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: unc72zDHlendcvSitxo7A4GCvKXVpr3xUYElMiAM6bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:43:32:0a:2d:77:fa:41:1d:1f:c5:55:50:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=e73032258c2fdf3c30d28fbf36ba51793956fe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:a5:7a:01:cb:2a:c0:f0:23:4c:c6:c8:6e:
e9:c5:89:05:eb:08:af:be:b2:79:07:8a:5c:d6:3c:
6b:d5:8c:91:19:ef:51:d5:f1:7a:0a:8f:d8:41:9c:
65:77:7f:36:4e:f1:41:85:8f:67:93:54:62:7b:c9:
ad:b6:54:06:d9:5a:45:d9:a3:bf:39:31:a9:a7:d9:
ff:29:ec:4f:f3:8b:09:a9:e9:75:62:cf:35:31:fb:
52:a5:1d:a1:5b:89:d9:de:da:e9:99:8b:0e:d3:79:
2b:f9:c7:75:05:c6:a0:e7:d2:b2:d7:9e:3c:f1:1f:
3f:d5:c1:a4:d3:43:ba:dc:83:37:8c:91:01:d3:bd:
96:50:da:bc:a6:aa:c0:52:f5:b3:67:c7:15:e0:b5:
c7:93:b1:c8:d5:54:14:3e:fe:0b:ce:b9:20:96:43:
b8:3c:12:f4:e3:58:82:f3:ce:12:69:d2:a4:3e:e0:
d8:09:f0:8b:e5:85:d7:37:a2:70:66:f0:57:ac:1e:
be:17:b3:3e:fe:fc:c4:d1:5a:c0:4e:3b:07:33:99:
95:e5:df:dd:5f:89:66:67:8c:ed:24:92:65:fb:5b:
59:87:e3:ac:34:10:5d:f1:bf:55:7f:09:ad:b1:e9:
c5:a2:99:ef:e9:10:63:60:b2:11:8a:80:b3:c1:90:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:32:25:8C:2F:DF:3C:30:D2:8F:BF:36:BA:51:79:39:56:FE:22
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:ba:3e:d6:34:4d:f3:a1:98:e0:59:9c:78:59:fc:8d:9e:
6a:8d:7f:1e:43:62:47:6b:5d:a3:b6:5a:bf:7a:91:08:51:bd:
71:72:ac:73:5d:3a:fa:9b:2f:d6:7e:e8:ea:b0:28:bb:b7:ca:
ab:93:ba:da:3f:4e:e4:e3:a0:47:63:23:dd:3a:d3:57:a8:56:
cf:61:c4:f0:2e:60:d9:47:cb:02:7b:21:b7:93:a6:e1:df:8e:
00:4d:17:3a:61:26:fa:09:4b:72:8b:2f:2f:83:5a:d6:c7:7d:
33:8f:cf:01:c1:b2:c0:e8:77:2d:3a:f9:e1:9a:e2:87:8d:b8:
43:45:03:c5:cd:3e:76:8a:4f:f1:25:7e:07:cb:51:38:c9:03:
19:ec:ec:e8:9d:73:f2:79:6e:03:89:24:64:d2:1d:d2:78:21:
3c:90:40:b8:2a:a3:b8:54:23:ef:f6:70:3b:77:de:c4:6e:46:
7d:ca:36:b8:02:7a:77:16:88:d9:18:0f:ea:1d:b7:c9:6a:5f:
f2:1b:8b:f1:d4:48:d4:1e:25:81:f0:59:95:db:55:bf:62:89:
fe:ad:c7:a7:b1:2c:dc:68:f7:30:63:45:35:69:04:30:28:d8:
23:11:24:b6:a0:39:4a:84:96:34:25:d1:a5:07:a2:45:e5:11:
79:f1:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:20 2026 by rpki-client