Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: +cdwaKzcVr2QTkAAhJYUiNmU3i/6baMRV0Y6FhegSSw=
Subject key identifier: 1F:E5:91:73:05:30:8E:C7:DD:A8:13:20:E9:47:A2:65:6D:D0:16:53
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019CAAC62A3C8C86716BA6C1A02C2E63C959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 11A8
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: S6tA5hd7JdL3Evsp2XKie2fKN/qgvnvAYcg4lQJBzpE=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2a:3c:8c:86:71:6b:a6:c1:a0:2c:2e:63:c9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=1fe5917305308ec7dda81320e947a2656dd01653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:92:bd:52:af:00:4f:9a:8e:00:52:36:dc:c7:
ff:7b:29:f8:25:7a:47:ec:3b:29:9f:f0:77:f4:ec:
9a:4b:61:17:9b:d3:81:df:2f:0d:5f:be:f0:65:46:
7d:36:e1:e4:49:ef:20:a6:01:fb:aa:b9:87:12:72:
d6:57:3e:87:22:11:f7:c7:3d:c8:fe:cf:65:34:1e:
1a:86:f5:c0:b1:6f:e4:a2:3e:0f:28:dc:14:ac:da:
b5:a8:aa:c5:8c:b8:42:a7:f1:dc:a4:28:09:83:e9:
d3:de:c4:60:d0:7e:8e:55:8a:6b:75:74:98:05:03:
e7:09:3e:fd:8b:21:20:83:67:54:3f:da:90:d2:88:
1a:28:d4:78:83:24:1a:49:21:bd:10:5d:6f:68:52:
06:bd:23:cb:2f:1c:aa:7b:86:df:49:1c:4a:5b:55:
d1:f7:7f:17:6f:29:46:48:18:27:20:d6:1f:fc:ce:
02:09:d4:b1:51:93:a1:21:c9:94:ca:9d:a4:3e:cf:
6d:63:6a:73:02:c0:ff:ec:8d:20:12:d1:81:d5:99:
8a:a5:cd:72:8d:9a:54:98:69:ad:33:4d:f2:ad:41:
44:68:83:91:a2:56:e9:5b:75:37:83:cd:c8:32:e1:
4a:a3:c8:9d:2c:90:4e:43:38:3e:e6:59:c2:76:9a:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:91:73:05:30:8E:C7:DD:A8:13:20:E9:47:A2:65:6D:D0:16:53
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:5a:d5:f4:94:a2:8b:2c:8e:c2:e0:2a:dc:c0:70:66:56:
34:73:bf:a1:55:31:35:11:8a:92:96:44:bc:10:83:aa:c9:09:
83:78:37:a6:52:14:5a:17:87:48:54:a2:fd:98:4e:14:f0:26:
9f:4a:95:46:c1:e0:96:34:d1:1b:17:84:ab:d4:72:f0:91:f8:
01:e2:aa:3f:6a:a5:fc:6c:70:e6:01:1c:16:22:45:23:e0:1b:
ac:e2:97:d8:c7:a1:18:d9:67:35:59:44:ab:1d:e6:28:44:41:
6b:6b:4a:22:7b:55:09:a9:2f:d2:f2:c3:54:1d:42:b0:27:4d:
e8:1a:74:8f:3f:42:d7:f5:39:7d:83:39:10:4a:9f:11:f0:a7:
51:44:b0:e9:59:17:56:92:87:e5:b1:62:95:b0:fb:8d:00:8f:
02:d9:be:45:bc:48:72:10:da:06:7f:79:2a:5b:8f:d4:e8:2c:
37:44:59:05:a6:56:de:1e:42:6e:70:0f:77:ed:68:1f:40:f9:
73:73:56:62:8b:07:c7:bc:b8:9b:09:8c:19:19:04:fa:52:d4:
e0:c7:a8:81:2e:2d:9d:d8:dd:80:f9:d4:bf:17:94:cf:ff:1c:
41:e8:a2:b6:2a:6f:20:57:37:86:0f:f8:0e:62:69:de:6d:a5:
ef:e2:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:06 2026 by rpki-client