Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: YLTVKO5116Iinkj05oy0k9TG3rcjlsKaeohiwY5I+Tw=
Subject key identifier: C1:90:59:44:FF:32:B3:38:0F:BB:CA:BB:99:79:56:3E:C5:6E:5E:8C
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019CACEBB99DF29C7CB9A3F553431796CCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 14FD
Signing time: Mon 02 Mar 2026 05:00:55 +0000
Manifest this update: Mon 02 Mar 2026 05:00:55 +0000
Manifest next update: Tue 03 Mar 2026 05:00:55 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 8ZTjHwZNHPJNh2tUioqmP5ofkkwwTe0MDEbmGxp24Z8=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b9:9d:f2:9c:7c:b9:a3:f5:53:43:17:96:cc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Mar 2 05:00:55 2026 GMT
Not After : Mar 3 05:00:55 2026 GMT
Subject: CN=c1905944ff32b3380fbbcabb9979563ec56e5e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b0:d0:6c:3a:9f:55:d0:c4:53:13:71:dd:20:
c1:4b:38:ed:38:c7:e0:36:c2:a3:ee:16:ad:9a:9b:
05:7c:ad:e7:fd:b5:62:c0:94:a7:09:23:90:ba:d0:
99:67:25:1f:df:45:be:c3:38:76:10:c9:c1:9d:c9:
64:73:f3:3f:ac:b7:0c:d7:78:cb:90:c2:09:47:c7:
dc:83:e5:1b:d2:39:47:f4:40:f7:d0:b8:9c:ac:5d:
71:06:b5:19:07:ab:b1:b3:ed:44:a9:8a:fd:32:99:
76:79:27:78:cc:cf:8f:05:43:46:93:0a:a6:25:7e:
94:aa:09:c6:d3:55:d3:d6:8a:72:d4:78:50:73:c6:
5e:26:00:99:e2:98:ed:43:56:50:92:75:08:68:7c:
9c:a8:fd:ad:d0:3a:c9:72:ed:09:6a:70:c4:a4:76:
93:36:fc:9a:5e:6c:9a:a0:b6:75:6c:9b:0c:a8:31:
f6:98:15:bd:8e:9d:b3:b0:39:08:7b:46:79:d8:2a:
a4:85:c6:e1:7a:2c:16:3b:31:b1:1d:6d:fa:b8:b1:
95:c9:5c:48:b7:a0:48:9c:c7:c6:f3:f7:2b:14:81:
58:2d:65:2d:44:86:47:eb:cd:0d:08:99:87:c5:7a:
75:93:0e:38:3f:f1:74:f4:fc:fb:af:fb:42:ba:c4:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:90:59:44:FF:32:B3:38:0F:BB:CA:BB:99:79:56:3E:C5:6E:5E:8C
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:68:b1:4c:26:c9:19:0f:ec:73:11:20:33:41:57:74:65:
04:df:9b:ed:1a:1f:78:a3:ac:17:f7:81:09:b5:8e:d2:a5:70:
25:e9:02:57:15:2a:29:4c:ce:7a:d7:d7:12:df:21:80:aa:43:
26:6d:17:66:64:28:0e:32:53:7d:4a:d8:ec:c7:3e:86:ff:bd:
5f:f1:67:60:33:9b:12:cd:e7:c3:05:b9:0a:4b:46:86:9f:53:
64:c5:03:22:ac:f5:5c:1e:87:3b:b8:f7:50:f0:1a:2d:4a:e2:
2b:02:22:4b:81:51:97:f2:79:84:f3:7d:98:18:89:83:94:58:
71:00:26:36:84:41:fd:5b:dd:bb:fd:8a:bd:51:f3:ff:4a:3c:
ba:1e:88:94:0d:f6:45:70:b8:04:a4:8f:ff:c4:78:fb:42:40:
fc:d2:f4:6e:ce:c4:f6:15:0a:a1:d3:56:50:ad:b2:4f:74:a3:
e5:6e:b9:cc:d0:bd:28:fe:aa:a4:06:63:08:65:c2:ef:c4:b7:
11:b5:5e:18:00:65:34:0b:4c:a2:a0:af:d5:ec:47:95:4a:d5:
3f:85:a2:11:b4:a1:00:35:e3:60:0e:4f:53:10:bc:31:7c:e3:
92:a1:ef:54:37:04:b2:52:95:d4:bf:ab:c3:11:b8:73:3b:51:
82:b1:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:23 2026 by rpki-client