Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: W6TlEY+z5ZXMtta1itRSgIFu85Kv3GgNEJr4O0qaXBI=
Subject key identifier: 4A:A3:45:59:0B:B5:3D:69:9E:13:D0:A1:3E:C1:38:9F:F8:8F:8E:BB
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019CABD966A693E995856EB5571C1D445D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 06CB
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: L7s0ED57mNbRMv5scEab-MWU-0g.roa (hash: UTR/1aEsEtkTlQxKjpcPzSUv65QlBCtFASF3Ua17FGM=)
2: RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa (hash: YHl21kGfBScrHLWB8nH7LfwSKrFDkFd1MvbGkxb2nBQ=)
3: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: n3PVFK9pQSYTiJvzg9KQelHpGIxfJxYc5FfBSuNfRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:66:a6:93:e9:95:85:6e:b5:57:1c:1d:44:5d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=4aa345590bb53d699e13d0a13ec1389ff88f8ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:20:ff:cb:c7:a9:38:82:d0:ce:98:1f:77:
4d:34:9d:4a:25:cd:f0:09:6d:4a:b7:a1:a2:6f:15:
a7:bf:f4:64:d7:70:3a:4f:21:4b:ab:7f:86:27:8a:
0c:2f:0e:ab:23:70:88:ac:e8:01:ae:c2:d5:b3:be:
6a:7f:19:89:ee:f8:4b:3d:ea:15:6c:b9:38:88:36:
24:ea:43:4f:34:5f:e8:95:d2:37:46:63:4a:aa:22:
46:98:01:39:5d:9c:21:a2:5b:e5:a7:5d:72:08:7a:
e4:26:fc:6a:98:bf:7d:39:70:a3:4e:28:dd:d6:d4:
da:17:1a:b8:64:45:c4:c0:5b:ff:8f:f2:38:9b:d0:
fd:45:e9:02:2d:55:00:65:aa:a2:a1:de:51:7f:7c:
fd:05:92:ab:7c:9e:62:53:40:68:ae:88:6b:79:20:
1d:65:42:50:6e:ad:14:41:1d:36:86:db:a4:0c:3d:
b6:b1:b9:58:01:59:77:44:f4:a6:cd:7a:4a:e9:b6:
2f:bc:d9:ae:20:6d:04:69:d2:7c:7a:6b:06:37:51:
9e:6c:d9:e1:e1:8b:25:bd:c5:de:63:a2:6a:5b:48:
41:2a:34:7b:da:04:97:5c:75:1e:4b:7f:7f:96:0c:
e0:86:cf:dc:24:54:f9:2b:50:5c:fc:e5:09:68:b5:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:45:59:0B:B5:3D:69:9E:13:D0:A1:3E:C1:38:9F:F8:8F:8E:BB
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:f0:55:b6:8e:9f:6e:47:ef:35:f3:db:ba:eb:c7:ae:4a:
98:89:36:5d:93:7c:0a:8b:cf:fe:02:24:df:bd:37:23:e3:9e:
4d:be:9b:2e:66:12:a3:f5:32:4f:6b:64:f5:7b:7b:c5:c1:36:
1e:82:13:c7:3b:f9:c5:84:90:48:4a:e8:65:b7:1c:b6:b5:17:
a5:7c:e1:1c:9d:b1:72:6e:3f:dd:10:b5:41:3a:9d:45:07:83:
09:37:f7:18:3e:e6:87:b5:3a:ea:6f:29:78:d7:21:99:b1:f8:
17:18:47:74:17:3f:e2:6b:e2:39:57:e8:fc:ae:5e:b9:7b:0d:
2c:82:eb:33:da:87:af:ee:35:e5:72:a7:12:65:81:e0:9b:ae:
48:cf:2e:88:44:83:68:2d:2b:10:fe:47:e5:d8:9d:18:f4:a4:
95:c4:a5:09:13:88:36:04:cd:57:0b:0c:c3:b2:2d:3e:34:2b:
a4:b7:01:8f:47:d6:bc:18:bc:0a:98:11:06:b8:55:c6:70:08:
10:a6:8b:ee:b5:d1:35:26:52:fb:d7:6e:8f:21:0a:df:f1:ac:
cb:16:b6:0c:ec:16:b0:76:b4:4f:fa:b5:cf:ea:0a:18:2b:68:
e4:e4:97:d2:52:7c:f1:ce:fc:fd:d5:05:7e:38:9a:21:5f:64:
77:31:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:38 2026 by rpki-client