Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: 8Zze+EA87ontn3C4rGKGMzKz8GR+Ab+By7O5ZD1jqgI=
Subject key identifier: D2:BE:6B:02:68:D1:BF:35:85:FE:35:94:13:50:7F:22:78:25:38:1B
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019CACEB8CA4BD01A91B59BC4222AF2A065A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 014F
Signing time: Mon 02 Mar 2026 05:00:43 +0000
Manifest this update: Mon 02 Mar 2026 05:00:43 +0000
Manifest next update: Tue 03 Mar 2026 05:00:43 +0000
Files and hashes: 1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: PYJWkR0ieuBG/htFe5QwYXrJgFZP//DZO7GN2+I85Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:8c:a4:bd:01:a9:1b:59:bc:42:22:af:2a:06:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Mar 2 05:00:43 2026 GMT
Not After : Mar 3 05:00:43 2026 GMT
Subject: CN=d2be6b0268d1bf3585fe359413507f227825381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:37:a6:5a:d6:56:de:02:42:d0:1c:93:b7:
01:06:b5:af:21:34:c3:c5:4a:02:5d:32:37:98:bf:
c0:3c:c2:a4:fd:0e:70:85:40:41:88:08:a2:9f:9d:
92:1d:0b:9f:fe:8f:7b:6c:d0:a4:25:0f:86:bb:8c:
c1:3a:9e:f1:3a:9a:3c:65:98:62:6b:83:32:aa:f3:
08:83:f5:c4:7f:6b:88:f0:2f:81:d6:4c:43:3e:1d:
d1:5b:77:78:82:ab:4b:3b:9d:2f:08:eb:23:74:2b:
7b:56:8c:dc:50:77:a8:a9:59:a6:aa:74:7d:05:fb:
11:39:e8:84:0a:23:02:92:98:f3:bb:e4:34:07:ce:
aa:5d:a0:f8:0b:5c:5a:73:9c:ba:83:fc:5d:8d:25:
fa:1a:9c:00:f7:26:69:c6:b7:8b:8a:6a:e7:b4:12:
fb:7d:81:8e:77:dd:8f:f7:06:c2:b4:c3:10:79:96:
ac:db:78:6c:74:f8:e2:5d:e9:14:08:52:e5:a6:8a:
a6:01:9e:35:43:fb:fe:7c:5b:8b:c6:d5:ea:3d:8f:
05:44:8c:5d:27:cc:fb:2d:a1:b3:12:fc:2e:62:96:
0b:74:4d:5f:07:24:26:4c:d1:1a:6a:8f:18:c3:b8:
53:ff:5f:6b:2d:45:b3:62:15:2f:84:a6:07:af:ea:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:6B:02:68:D1:BF:35:85:FE:35:94:13:50:7F:22:78:25:38:1B
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:f2:67:83:9f:38:c4:f3:f0:ac:fb:3f:cf:32:57:87:6e:cb:
17:25:e1:07:b7:02:4f:ba:9c:9a:49:9b:ab:fa:30:10:82:43:
85:40:4f:58:b8:16:2b:44:3a:af:21:97:48:31:36:4c:ba:1f:
85:2d:a6:af:17:92:a9:7f:44:52:af:54:42:a5:54:94:47:c6:
5e:c3:8c:6f:a1:ab:6f:0f:d8:19:8b:51:5f:fd:a4:e9:66:39:
49:38:ca:5f:d3:91:d6:00:54:b8:54:23:5b:7e:62:e1:ca:2b:
5f:f4:9d:89:4e:ac:f2:a9:94:35:f0:bb:57:2e:97:e6:cb:b6:
0c:8b:71:40:ab:ab:48:0f:93:b2:eb:ec:15:d9:76:5a:c3:b7:
34:53:17:54:9a:77:11:43:52:a2:ee:d6:60:59:94:47:cc:35:
89:f2:02:6f:60:f7:e5:b0:a2:50:a8:25:0d:75:88:4d:6f:b5:
10:22:19:77:72:7c:c1:24:3f:4f:73:29:d0:73:c3:96:b1:d3:
fe:30:c3:97:df:b5:32:9a:38:e3:4f:cd:d3:c6:b6:c7:5f:8c:
51:39:1e:08:e6:6c:cf:0b:fc:b5:51:da:9c:21:f7:63:c2:c7:
39:9e:6b:46:0e:aa:f2:f9:60:89:70:df:15:67:f4:46:4f:ac:
1a:b0:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:52 2026 by rpki-client