Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: dAPIu5JvI2yP1psmWnT3T0v5RW7aC0s+j4BdmgWzHMM=
Subject key identifier: C7:15:07:24:F3:17:2F:75:FD:24:E9:7D:BA:86:5B:0B:FA:60:B0:47
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019CABD9C1EE46D495F0497E0F08EC738D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 09D4
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: H/aqyJPpGgtAar0iye9VrnX+dh1m9e9HK6tAePFAIec=)
2: vRy4dtwuzcoaMObZOrhsdgekFn8.roa (hash: EEHH4lnEcaLiLMDse86Umm3P044hYY8hcdkDDqvn/M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c1:ee:46:d4:95:f0:49:7e:0f:08:ec:73:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=c7150724f3172f75fd24e97dba865b0bfa60b047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:98:d3:34:c0:cb:ca:a0:ca:70:d7:f8:9f:
b1:1c:28:35:16:c2:51:48:0b:95:34:17:40:a9:a9:
71:c1:1e:0a:22:05:d1:f3:0f:14:e7:36:4b:b7:05:
92:04:3f:d6:63:b1:ff:ab:82:f8:bf:f2:b2:26:3f:
ef:bd:15:0b:f6:0e:c8:9c:c8:aa:94:61:18:88:2f:
31:cd:e9:ff:ed:90:19:9d:bd:3f:80:8f:7a:ae:10:
09:84:d4:2f:40:78:d7:44:c8:8c:2c:d0:56:53:1c:
8b:ad:3b:f7:90:96:cb:bf:f8:02:21:ba:ba:63:11:
7d:f3:9a:aa:54:64:b8:79:35:07:94:28:46:1b:61:
b2:58:57:50:19:c5:22:87:ea:dc:9c:e7:7d:77:ad:
76:85:50:91:78:79:6f:72:b2:57:d3:93:aa:05:9a:
c0:50:c7:9c:c4:74:72:e8:eb:cb:c9:74:4a:ff:e7:
c0:a5:b2:8e:25:8a:b8:3b:d3:1c:1f:c9:5a:cf:9e:
e5:97:4a:ae:ed:cc:29:85:a8:5f:43:c5:05:b6:60:
2e:18:f8:ea:c3:09:f8:c8:b8:9a:d8:77:83:b3:c6:
f5:8f:c1:7b:cb:f3:f9:23:a6:c6:aa:ac:a8:96:e6:
2e:7c:f8:cb:f7:c4:ba:6f:44:c0:b3:aa:e0:12:d5:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:07:24:F3:17:2F:75:FD:24:E9:7D:BA:86:5B:0B:FA:60:B0:47
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:37:2f:b0:f1:3a:ed:5e:b0:4c:70:12:47:bf:11:c1:36:
70:d4:33:ca:0a:1a:51:71:a5:0b:22:fc:3b:b6:e2:8b:44:d2:
92:be:44:05:f5:bc:35:f3:c1:e5:6a:10:56:3e:e2:bc:64:4c:
38:a1:c6:e3:69:ce:e9:62:9f:17:c0:e4:5a:59:1a:9b:ec:f7:
24:66:9e:a5:b5:f3:a0:8e:ff:e5:45:0d:d0:4a:1f:25:a5:83:
c0:e9:9d:57:e7:57:62:ee:41:21:01:8c:19:96:ef:e9:85:b1:
41:0c:2b:e4:62:0b:a1:b8:c0:74:78:4a:59:9f:90:eb:1c:3a:
53:ff:fc:ed:31:c1:ee:ff:1c:c5:4a:6b:a0:8d:ad:ab:2f:96:
5a:ee:c0:88:a0:2b:fe:17:c1:c2:99:1d:df:af:8a:68:82:9d:
f9:8a:8b:f1:f9:a1:17:f1:39:19:58:1a:5c:77:06:8d:f4:d2:
9e:f5:32:a7:f5:85:6d:8b:11:b4:0c:e9:5d:49:e4:3e:af:07:
f5:8e:7c:9e:c4:c8:0c:88:9c:7e:c1:bf:f3:1b:b7:ec:79:af:
94:7c:0c:d4:bc:3d:aa:97:40:6f:d7:96:7a:0b:54:49:c3:d2:
98:8e:69:8d:d9:7f:38:d1:77:b7:a6:62:2f:ae:af:cf:29:0b:
9d:91:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:16 2026 by rpki-client