Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: zQkdlr0LWQ4nfdT8JD4/7UM/BfuL5VUOWDwY6Zvpqmc=
Subject key identifier: 77:CB:75:62:4B:BE:F9:DA:9B:ED:28:FB:CD:C8:2F:EB:C0:6C:10:C7
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019CA946051128D988012984766EFF1DB18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1884
Signing time: Sun 01 Mar 2026 12:01:04 +0000
Manifest this update: Sun 01 Mar 2026 12:01:04 +0000
Manifest next update: Mon 02 Mar 2026 12:01:04 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: xF7YarL8HNeQCQanVxE2EW/DOZACf5vmjbXoSqG07jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:05:11:28:d9:88:01:29:84:76:6e:ff:1d:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Mar 1 12:01:04 2026 GMT
Not After : Mar 2 12:01:04 2026 GMT
Subject: CN=77cb75624bbef9da9bed28fbcdc82febc06c10c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:4c:19:c3:72:6c:a5:eb:c9:27:e2:d9:f4:
8f:ac:1e:b5:1c:45:6c:7d:1a:56:f3:2b:3e:52:0e:
48:f1:c2:7b:7d:49:be:76:d3:dd:15:c5:06:ef:87:
4c:9c:f8:e1:50:cb:6e:78:3a:fa:95:f6:5c:7a:fb:
39:1f:40:56:82:12:3c:85:96:d7:f0:73:45:06:77:
89:a4:b6:f1:f4:7f:45:c4:ac:3c:ae:f4:bb:6a:57:
19:22:fb:2c:7b:ea:35:e8:86:cf:83:12:5c:56:43:
bc:0c:81:82:fa:b3:e9:e1:93:1f:1b:18:56:53:6d:
3c:ae:f0:2f:f3:31:4b:3d:1a:fd:e5:96:56:00:1e:
b6:b8:9f:16:eb:82:ee:db:00:c5:f9:19:02:1c:6c:
3d:0c:4c:2f:9c:c8:ec:34:fa:32:ab:d9:b5:8d:6a:
83:69:b1:f1:c9:13:7e:44:3d:dc:22:43:96:8b:95:
c9:96:6b:29:23:f6:5a:a3:d4:1c:e2:7a:5d:7b:ff:
bb:25:1c:a2:03:60:c7:7b:90:17:ac:c4:53:d2:30:
c1:ae:d9:5a:e3:4b:fa:34:fe:f4:c7:99:9c:03:d6:
1b:e5:56:6e:ab:4c:cf:f5:01:38:36:38:3c:9e:32:
12:6a:0d:25:5e:65:c7:9d:15:d5:99:68:e6:24:0b:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:75:62:4B:BE:F9:DA:9B:ED:28:FB:CD:C8:2F:EB:C0:6C:10:C7
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:bb:81:4a:a6:27:0e:c9:1d:03:f5:93:f5:3c:58:4f:84:
fb:8b:fb:88:71:24:6d:b4:f2:4c:9d:37:8c:3c:30:14:a6:02:
2c:52:07:d0:62:35:59:44:64:0a:aa:4a:01:6f:26:ae:93:1e:
2c:5a:ea:ad:56:99:e9:02:35:f2:79:3e:63:db:6e:6e:66:da:
97:f0:a8:45:36:fd:6d:bb:21:44:77:e5:ec:e3:ec:d8:63:49:
35:b2:7e:30:38:29:b3:b0:a4:33:81:2e:13:88:67:d5:d0:c7:
13:d2:d5:96:d3:88:06:29:e7:87:32:e0:58:5e:c7:4e:01:f0:
60:8e:8e:6e:0d:86:6a:7e:de:6e:f9:41:bd:ea:ae:61:6a:7b:
f7:a2:75:a2:78:11:6b:94:f1:46:4f:0a:c6:39:23:40:57:66:
56:b8:98:c0:7c:6b:99:66:8e:ba:38:0f:c1:8d:55:dd:5b:54:
22:4c:6e:89:7f:d5:c4:83:d5:4d:8d:8a:42:91:87:c2:4b:31:
d1:8b:01:a8:44:e9:15:a6:88:12:b4:d2:2d:50:90:c2:11:b0:
13:e3:f3:b7:89:ba:53:69:71:1d:12:0b:1f:8b:1e:de:d1:57:
62:16:08:b8:d7:92:a7:80:4a:ac:2b:df:47:41:cd:36:a3:34:
29:2d:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:43 2026 by rpki-client