Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: rdakVRjiwhIp+KSYQeKMbme6NnpEjIdyfbjgRs4mqz8=
Subject key identifier: 35:AE:9B:68:37:26:2D:A3:CE:B6:AA:BE:36:BD:A9:E5:B7:E5:12:85
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 019CAAC606D68F76BFFC31E9EFEB84872F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 1045
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: aAZbyo9tG2Q09YYcvC8vm/ZZGIR0056pBM04ya7qa/M=)
2: uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa (hash: QxKS8bSN/E8e24rYpMJlqnlvbfWN9J/AEQcwrR8l3P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:06:d6:8f:76:bf:fc:31:e9:ef:eb:84:87:2f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=35ae9b6837262da3ceb6aabe36bda9e5b7e51285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:b1:b1:4d:f4:61:56:19:e5:d7:3e:f7:ba:
be:f1:4f:5f:98:08:2a:cb:f6:06:66:af:9b:92:4d:
86:0b:d2:7f:67:5b:52:60:6c:96:09:cb:e5:ac:e4:
1e:7a:ef:90:b5:48:6e:3f:b1:2e:4c:18:59:b9:fa:
35:f6:1a:82:ec:a8:6f:80:87:29:32:19:29:47:ce:
f9:22:2f:46:b8:b2:8d:f3:52:ba:57:1e:41:3d:a5:
b0:ea:d8:a5:ca:8b:64:c3:d9:02:92:2d:e8:6f:7d:
e0:1b:f7:98:1f:59:d0:eb:66:8d:f6:b1:45:54:50:
e5:7b:d6:cd:10:3a:f8:67:18:6b:b4:a0:dd:65:fa:
dd:45:4c:e8:cc:4a:ea:21:34:d6:96:59:40:a3:57:
42:fd:66:87:95:65:99:14:fa:f8:73:c8:90:e3:3d:
54:4b:93:b1:54:db:9e:1b:cc:39:2d:ad:ab:f5:73:
f1:24:dc:eb:d2:bc:51:bf:fd:39:20:a7:2d:70:ae:
3e:59:22:32:5e:e0:29:b4:db:09:1a:a1:50:2b:0c:
1d:d1:e4:d0:ef:a7:6b:e7:92:26:7a:48:68:40:b2:
05:67:df:2c:3e:b9:b7:9f:3b:d9:00:10:ba:c1:9d:
db:b8:db:29:6d:52:ea:d6:46:dc:e0:07:df:d7:9d:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:9B:68:37:26:2D:A3:CE:B6:AA:BE:36:BD:A9:E5:B7:E5:12:85
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:88:6d:07:48:72:92:fc:a9:32:7c:1d:cb:f8:09:b8:23:ca:
d7:bf:fe:99:1d:94:90:6c:b1:2c:92:57:99:95:e9:91:b2:7b:
6d:8e:3b:e4:c0:11:ec:3b:2e:fe:bb:5d:46:1d:09:86:d1:2c:
54:fd:f5:79:c7:00:80:4b:67:61:3c:2f:1f:12:9e:ca:fc:fa:
ce:be:d1:18:36:4c:05:32:28:82:26:1b:fa:93:a1:e7:67:ab:
90:d0:c8:d2:5d:c5:4b:d8:20:aa:06:92:c8:d4:55:cf:11:15:
09:a8:d4:32:e0:f1:15:69:5d:f3:76:6a:a6:17:ac:a4:8e:b3:
4a:40:81:52:bb:81:43:0a:ce:b5:ef:8e:81:80:43:b1:2e:9f:
1e:5d:5b:19:3f:5e:42:18:e0:75:69:ab:e7:bd:8d:cc:64:47:
29:99:6c:9d:1c:73:1c:8e:a0:dc:2a:d4:15:cd:7e:90:5c:45:
10:4e:f3:96:85:64:55:31:23:68:db:10:3e:6c:9f:d2:23:ca:
e4:9a:51:52:a5:66:70:17:3b:e1:78:90:0d:9e:d2:18:8a:be:
ab:27:43:bc:fd:d2:e1:79:11:46:eb:83:17:c2:64:0b:ad:56:
ce:be:d7:dd:17:be:39:40:6d:27:9b:b8:48:bc:a1:04:3c:d2:
94:46:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:19 2026 by rpki-client