Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: rUUkfy68sO7GvjB7x7LwHJRYC6gBbuwoO7p8RIjGnMk=
Subject key identifier: 79:BA:6A:D1:91:00:10:E9:4C:B1:73:16:3A:E2:9D:13:8E:60:97:49
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019CAC46F6DE736A8F262BD25A67269E0B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0E15
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: PPitSZuRvTIuYET2fTr2uybz-Tg.roa (hash: 3kuiLKHDLxUf6+yboDVRpg9YOVajrkYmPy+E5r4q0G0=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: TSdJ3oqXM4UIewONgqZJx6nnRD9uDlVWAbcDw9HFCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f6:de:73:6a:8f:26:2b:d2:5a:67:26:9e:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=79ba6ad1910010e94cb173163ae29d138e609749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:d7:b9:2c:7d:57:ba:9a:2f:c4:77:f5:1f:
3c:22:58:a6:2e:36:e0:74:27:e6:92:8b:43:d2:51:
45:fc:42:fc:ff:81:d5:3d:ca:0a:fb:73:74:69:b6:
b8:e0:cb:66:d5:92:df:7e:12:be:2c:68:cf:9c:9f:
48:21:94:85:da:47:f2:89:2b:98:44:04:75:69:44:
4e:2a:5b:c9:51:71:b3:96:b2:d0:2a:b9:8c:f0:37:
8b:09:5e:67:d5:67:0f:3a:9e:be:48:db:31:67:9a:
32:0a:3a:db:03:0e:2a:ef:dc:58:19:30:a1:b0:67:
b9:7e:00:bd:40:42:fd:08:ba:2d:4d:25:69:3d:1c:
77:82:b1:fe:94:ec:cf:c6:c3:f7:9c:08:88:c6:a6:
74:7d:5b:da:92:50:88:d1:2a:9e:c6:ce:fd:53:53:
d9:92:d8:65:b0:c4:38:ad:56:09:8a:94:1c:fc:a1:
bd:e1:af:d9:04:ce:d7:12:05:36:4b:86:82:d1:cd:
28:80:1f:4a:f8:5f:69:56:21:d5:f7:4b:0b:63:5d:
18:0d:51:35:ba:34:09:f3:3d:d3:5c:29:40:06:4a:
f0:d9:bb:4a:5a:d1:f2:15:63:db:01:31:91:7e:f2:
fa:b8:5e:be:78:56:4d:99:d1:42:50:8e:78:07:e2:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:6A:D1:91:00:10:E9:4C:B1:73:16:3A:E2:9D:13:8E:60:97:49
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:de:70:13:e8:50:05:74:6c:34:d3:b9:53:69:6a:50:f5:5c:
8c:b1:9b:ab:d6:0b:99:aa:7a:eb:6d:c0:a1:ee:02:ad:3f:ef:
12:49:75:af:76:9c:e9:8a:88:fe:37:44:46:d5:09:66:50:c4:
55:78:21:c6:77:e4:43:b5:08:95:4d:57:9c:b2:68:37:a4:b9:
df:70:70:0e:a7:7b:81:ff:de:24:bd:a5:39:84:76:e5:9a:ba:
4b:a0:c9:dc:0c:95:36:41:b2:48:0e:6f:75:a5:e1:91:3c:3f:
3b:90:78:5a:5f:5d:d7:bb:53:4c:a5:64:58:85:fc:d2:61:07:
ce:62:1e:74:d4:de:a1:35:0c:6f:e5:d0:60:d6:09:2f:f3:16:
4a:b9:6d:4e:dc:40:3d:57:be:8b:50:3b:a9:d4:46:80:69:76:
e7:05:b8:3b:0d:82:4e:80:7f:69:ea:74:35:f0:87:15:d5:03:
29:52:93:4c:32:24:b9:be:09:1b:dc:3c:b8:59:7a:f7:96:35:
88:fc:07:a9:05:84:d5:a9:a2:3a:77:37:02:4f:d9:6a:55:07:
76:21:c5:8c:c8:a0:2d:ad:cc:dd:15:59:9c:bf:74:49:97:68:
6a:d1:44:50:bb:70:3d:e7:47:d8:da:37:b7:9b:bc:74:fb:25:
3b:35:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:54 2026 by rpki-client