Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: q9bBufFqGqyuM4rCovrjODY0+DT2OdbxEg8GKmR4JN8=
Subject key identifier: 0C:5C:D8:27:A0:93:4A:92:E0:37:46:FB:9F:2E:15:D7:31:A5:44:5D
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019CAB344173EDC84F46872BF320D885F353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: W1aAib0Jo4mXteeTp77noRm31e1WNleOo14JnFE2bGg=)
4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:41:73:ed:c8:4f:46:87:2b:f3:20:d8:85:f3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=0c5cd827a0934a92e03746fb9f2e15d731a5445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:6e:ab:be:99:55:e7:63:0b:04:26:c0:9f:
52:2a:bb:36:d4:cb:79:1f:a2:0f:a7:51:5c:0c:37:
1f:e2:36:0b:b1:11:39:55:1a:97:bb:5c:25:ed:53:
50:e0:66:53:f8:46:bc:a3:16:bb:72:ef:cc:d7:21:
45:e3:df:25:33:eb:61:69:cb:33:53:cd:12:fb:5a:
1f:95:6e:9a:67:51:92:8d:b0:78:f9:01:ba:5f:1f:
75:f5:e1:b3:1c:a0:95:e0:4d:f5:0f:aa:b5:d8:e9:
78:30:6b:70:8d:71:f9:5c:a8:b3:6b:cf:92:50:98:
dd:13:59:b1:93:dc:7d:55:c1:fa:72:61:1d:82:61:
99:fd:da:53:26:94:ed:99:a1:cb:cc:16:29:93:52:
98:2a:3f:33:e6:77:a4:2a:50:f1:69:19:1b:e0:6c:
e3:8b:96:d6:ed:37:4c:10:4e:07:e4:52:cf:eb:fc:
74:70:f3:c7:50:2d:20:b4:d9:0e:9c:e4:68:5e:83:
8e:d1:ad:4b:b8:27:3e:af:7c:54:cb:4d:ad:81:cd:
65:71:79:e8:2f:64:9f:4e:4a:fd:78:32:19:37:32:
b4:20:11:23:e0:9f:6d:a0:fd:6e:33:d3:c7:52:a0:
4b:c8:6b:0d:55:ac:aa:de:6b:50:da:e0:4f:ba:48:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:D8:27:A0:93:4A:92:E0:37:46:FB:9F:2E:15:D7:31:A5:44:5D
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:31:2d:fb:02:63:65:ad:70:ed:f8:ee:e3:7d:28:65:67:d0:
80:e2:08:d1:ff:fb:ba:a9:96:be:8b:05:b5:78:8a:f2:68:9b:
4d:a6:98:f5:6a:3b:25:93:97:c7:e5:b0:e9:c9:a5:5a:f4:11:
a7:15:a0:d2:9f:75:a8:7b:e9:32:cf:81:12:4d:25:f3:10:56:
0b:89:82:11:0b:71:d4:e6:bf:12:04:2a:37:fb:27:b6:a4:69:
9a:f7:6a:87:14:0e:b2:6d:6e:22:90:ad:e7:f2:5b:59:4d:0c:
ca:4b:54:5b:16:de:0c:8d:57:3a:f2:9c:31:f0:8b:39:25:ab:
c3:b8:fd:23:09:ce:20:6f:80:e0:d1:a7:33:77:28:55:b4:21:
2f:dd:77:02:aa:78:83:6c:0a:ab:21:cc:29:77:d3:90:90:07:
1a:dd:2c:18:f1:14:f6:1e:ec:74:d2:e3:70:13:9e:f5:63:cc:
29:dc:00:43:5e:0c:0c:58:c9:bb:47:5c:da:ff:43:53:6f:15:
82:03:42:d9:d3:3f:df:b1:03:eb:03:32:f0:4c:35:a1:ab:4b:
92:0d:97:10:09:c7:3f:f6:63:31:6d:0e:54:f2:25:4e:7f:d9:
7c:4a:db:b0:6b:bd:0c:ed:ea:7c:a9:13:0e:3d:c9:a6:e7:d9:
ad:05:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:21 2026 by rpki-client