Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: wzr8HuLs2KPfJ+8vy/pGwwrs/8gp+75izI42QYijtXQ=
Subject key identifier: 21:EE:02:9C:BA:BC:2A:85:96:85:A2:64:CB:88:7F:8A:F1:E0:73:EE
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 019CAC7E0845923780722F80B188558DB44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 181C
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: Fq0gC+7VKG8iIdZe+LcI+10NVl/mAaZANXr/xod6gPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:08:45:92:37:80:72:2f:80:b1:88:55:8d:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=21ee029cbabc2a859685a264cb887f8af1e073ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:7d:d2:78:1f:ca:6b:23:12:05:ff:04:8e:
1a:07:50:69:65:81:35:8a:04:06:7f:e5:33:de:e2:
16:f8:4c:29:0f:11:a0:78:c9:f3:50:1e:6a:3a:06:
73:36:36:b0:69:fe:08:fa:ef:2f:a1:b7:bd:ab:d9:
86:e3:c8:17:50:7a:d1:76:82:06:b9:8c:85:8e:76:
86:d0:c6:64:83:52:29:76:db:39:4e:e9:96:d1:a7:
67:02:44:66:dd:de:0e:1f:ac:bf:e0:e9:cd:e1:6b:
e4:9d:ff:ec:d5:d0:1a:6e:00:00:b6:7d:69:02:d5:
99:41:a9:54:39:69:45:f1:f1:2b:5b:7d:87:80:f6:
c0:65:88:27:b1:ed:2b:c5:c9:e5:4a:33:85:2c:28:
3e:a1:50:27:00:4f:e5:e7:e3:55:48:f0:8e:dc:bc:
69:5a:c5:8d:30:b9:7e:91:1b:c1:bf:17:bf:27:93:
bb:97:f2:54:c3:a4:ee:52:4d:01:db:e2:c8:0a:f0:
33:21:55:c2:85:cf:d8:64:d7:4a:83:c7:2a:20:ca:
7b:33:e2:50:89:13:fe:cc:05:57:c4:81:93:47:97:
1b:5f:6d:0d:58:d4:10:55:da:a4:07:af:cd:4e:b4:
ab:44:82:35:32:6f:6e:0b:5f:03:f6:ab:06:8a:5d:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:02:9C:BA:BC:2A:85:96:85:A2:64:CB:88:7F:8A:F1:E0:73:EE
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:ce:f5:19:c6:db:a4:86:a7:a3:55:09:53:1e:e7:06:9c:
69:dd:93:20:b7:0d:90:b5:7e:ec:b4:bf:97:bb:2b:6c:39:2e:
35:b4:26:6b:e8:6c:5d:10:1a:b0:83:4c:38:43:11:da:aa:2a:
a6:52:c4:61:c7:1d:f1:26:52:41:26:26:3b:cf:e1:69:99:87:
2e:88:e5:0e:89:ca:15:3d:55:8c:ca:a1:9f:d7:00:60:ef:6e:
2e:7b:95:aa:5c:a0:71:82:d9:cc:9c:aa:47:d9:6c:c1:70:cf:
67:00:d3:92:51:03:51:f0:0c:dc:b3:0e:51:db:b7:47:8f:0e:
39:37:7d:98:21:49:1d:06:4e:f0:d5:68:de:8b:9c:c2:5f:a6:
32:12:67:c1:a6:a3:f9:a4:87:21:41:6c:21:5a:48:de:d4:6f:
64:d6:13:51:41:a9:66:2c:6f:d5:79:b5:01:62:17:4e:34:7b:
6a:a0:7a:94:ca:54:e5:04:f8:70:91:b0:0b:f1:d3:8a:77:2a:
d6:d9:80:3b:18:a4:c8:0b:28:d7:34:61:c2:7c:26:70:80:04:
4c:8c:48:3d:26:88:a6:9a:32:e8:76:b1:05:cf:33:e2:e2:94:
53:a1:87:d7:77:26:17:95:24:2b:9e:f8:09:bd:9a:3a:69:68:
ad:70:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:49 2026 by rpki-client