Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: PbzX/nJ+r1mOAEHZrGqGxNSLxbDv2Uw50J4FYtDxrQ0=
Subject key identifier: FA:AA:AC:B7:C8:4B:79:04:A1:C3:FC:51:C8:F3:29:5F:6D:A2:F9:C1
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 019CAA2134BDBDA7D3601646E8625E76CD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 1153
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa (hash: +Lydi0u3DmQC51EDG4oe1+EHym7x1Ea0qYfFm6X8wzQ=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: ckOrn49oPyYE0HqrnuRCppA6ydTh6y2ykYQCxieOtiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:34:bd:bd:a7:d3:60:16:46:e8:62:5e:76:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=faaaacb7c84b7904a1c3fc51c8f3295f6da2f9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:4a:d8:16:a7:a1:59:25:14:8e:7f:eb:01:
d5:13:33:f8:53:10:cb:9c:7b:e8:b4:61:85:9b:e2:
0e:bb:46:44:ac:5c:40:5c:b6:f2:0d:ad:d0:df:b2:
64:a6:09:74:1d:01:7c:15:62:c0:61:3a:49:74:ad:
30:f5:2d:6b:8e:a8:9b:9b:74:ee:55:79:d4:d4:72:
63:8d:c8:ac:09:fe:3a:09:8c:60:78:b5:f7:93:f9:
d8:de:41:3e:ed:0e:f2:12:cc:31:b1:31:d6:73:27:
60:c3:1b:b7:5f:63:11:b2:e3:69:c3:9a:32:25:7e:
a8:36:00:dd:67:c0:8f:c6:5b:22:a5:96:d6:07:98:
e2:7a:78:64:56:12:9b:7e:33:b3:61:b5:7b:ff:0b:
d0:40:fa:ed:fe:1d:a2:88:0f:ab:5f:3f:b6:4a:47:
1a:60:16:18:ce:24:97:74:e0:30:e7:d7:51:f3:19:
f4:8c:77:c0:ad:9f:b7:74:40:82:79:01:64:54:69:
14:4d:8a:c4:73:0a:b1:72:99:53:e8:48:d4:94:cc:
dc:26:a2:ab:9b:87:45:02:64:4e:43:f3:8f:67:80:
b1:af:32:2d:cb:77:1e:a9:b6:4f:e8:bb:5a:4a:33:
d3:de:cc:75:25:f4:27:66:6c:3e:02:98:97:82:f3:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:AC:B7:C8:4B:79:04:A1:C3:FC:51:C8:F3:29:5F:6D:A2:F9:C1
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:aa:a5:8a:fa:98:78:cc:08:f8:9a:cf:f3:f7:80:ed:68:
0c:d1:72:10:f5:da:ed:ad:1c:3e:e2:67:81:4f:fb:cc:c2:53:
ed:6f:75:df:70:e4:2c:8c:c3:7d:16:15:95:00:1d:29:89:be:
77:df:2c:e6:1e:c7:e9:3b:0e:c4:ed:ca:e7:4b:1c:c2:c1:95:
08:62:1f:c2:5a:ee:7b:54:e6:41:df:bc:8f:6f:68:74:d6:f4:
4b:79:0a:59:ee:b4:ea:11:4f:cd:25:49:41:60:89:26:ef:66:
bc:3a:af:32:74:87:4a:3f:10:bb:27:9c:11:32:3c:85:e7:79:
c5:7a:35:e3:42:63:7b:4d:fa:c1:e0:f0:26:98:aa:37:13:38:
8e:39:1e:6a:59:da:a9:ee:75:4d:c1:bd:77:12:be:10:54:a6:
b1:0a:c7:2c:32:17:ef:cb:09:09:52:0e:d2:85:f5:5c:d3:a8:
fe:65:70:f2:55:96:66:d1:3b:02:68:0f:53:9a:ee:b3:25:d8:
7e:9c:14:f8:73:28:84:ea:33:71:b1:ee:dd:04:ca:69:c5:51:
7a:86:c2:63:97:9f:7c:a7:3f:6c:36:d3:ca:47:ea:87:21:6f:
0f:96:2d:42:38:91:4c:26:52:20:c2:e7:ef:4f:ed:e3:be:55:
e8:f1:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:38 2026 by rpki-client