Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: QPTO54GVzorMvhfmwUrHlLs8U+VKpVVyneVR32fwpYc=
Subject key identifier: AD:C2:EE:23:7F:F2:97:83:0F:0F:B2:0C:AE:31:10:21:E8:A4:06:77
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 019CAD228F4E1CD40F0FDCB70D15D7CEA9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 146B
Signing time: Mon 02 Mar 2026 06:00:49 +0000
Manifest this update: Mon 02 Mar 2026 06:00:49 +0000
Manifest next update: Tue 03 Mar 2026 06:00:49 +0000
Files and hashes: 1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: 5CrwDF3FejK/Siyzai2ciYQmU9tg8KC93YItv2yD6sA=)
5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:8f:4e:1c:d4:0f:0f:dc:b7:0d:15:d7:ce:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Mar 2 06:00:49 2026 GMT
Not After : Mar 3 06:00:49 2026 GMT
Subject: CN=adc2ee237ff297830f0fb20cae311021e8a40677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:62:2d:df:71:47:77:a9:60:e8:7e:36:64:
61:8c:19:8b:39:65:3f:c2:7c:0b:9c:72:71:0a:67:
15:b0:5e:66:cf:d5:35:64:a6:1d:c9:c6:04:f7:8f:
f7:9b:9c:b8:8d:96:0a:4a:66:d1:a7:f7:bf:93:e1:
01:65:f9:c5:43:34:9e:67:25:22:e5:2b:d9:03:4b:
67:00:12:9f:03:6a:e7:d4:f5:88:2d:b3:11:58:97:
4f:d1:0e:fd:28:d1:05:2e:c1:6b:7e:7f:9c:b2:39:
68:8e:70:01:00:61:6e:3f:c4:03:94:a6:0e:1e:2b:
4a:d9:a8:41:f5:e5:98:f2:09:9d:d2:8d:6f:b7:31:
17:c6:a0:93:7a:f9:56:50:c4:99:9d:93:bc:5d:b3:
7f:1a:88:7d:6d:27:e6:b2:87:40:cf:77:2e:c4:d3:
e5:36:d6:38:8f:e7:9a:7d:13:e1:bf:7c:72:30:2e:
17:9e:e2:e9:8a:f9:f9:93:f1:1f:9d:19:4d:10:29:
b8:84:50:2e:ae:1e:0a:88:3a:80:f7:9d:92:c7:f7:
ba:8b:b4:27:3f:f5:bc:1c:0d:4c:4d:2d:23:8a:00:
8c:87:1b:15:99:68:9a:0a:1f:c5:61:f6:d7:d0:0d:
1d:60:23:7c:2c:28:6e:88:ad:9d:96:83:cf:f1:2b:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:EE:23:7F:F2:97:83:0F:0F:B2:0C:AE:31:10:21:E8:A4:06:77
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:99:37:4f:99:5c:3f:4e:d5:a7:dd:ab:5a:3c:a7:7e:d3:
91:de:54:cf:ad:9e:e5:5c:7e:e2:39:7d:8e:69:58:a0:22:10:
a8:ba:72:63:a4:ff:6d:4d:51:83:e6:8a:84:16:b4:26:b3:3f:
12:9a:e9:b0:09:79:12:0e:9b:14:bd:f5:48:d4:eb:ce:2b:81:
e7:61:a0:ad:1e:e3:78:c1:7b:17:7f:97:16:48:f0:9b:03:1a:
77:f4:e5:52:36:40:20:85:59:ce:19:5e:44:b2:99:65:d0:80:
cb:ff:50:0c:ee:50:0c:da:43:dc:05:01:db:f4:59:ed:48:1e:
7a:e4:d1:65:6d:62:ae:cd:18:35:c0:fa:6e:c0:b4:83:f5:33:
be:5f:14:9f:39:38:d6:65:0d:92:02:37:ab:eb:7a:48:e3:7a:
4a:bf:17:c4:74:3b:75:ce:83:c1:2b:49:d5:d6:20:5e:bc:35:
55:02:65:85:9c:f2:a2:12:f8:0e:a3:17:0e:bc:63:56:67:4b:
89:8a:1e:35:81:20:34:2f:30:bf:b4:46:14:93:72:d1:ab:32:
69:89:4a:27:80:80:3c:35:75:0f:cc:b4:b0:7c:7e:f3:d4:4a:
90:74:b6:88:64:34:f3:c6:41:c1:81:44:cb:8e:19:0f:00:ba:
81:42:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:28 2026 by rpki-client