Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: 4IasJICM9Wgb9AfL4OFaDB/biWzuwaCm9dvZoliHdH8=
Subject key identifier: C1:BD:BC:69:C9:94:FB:10:92:AE:FC:0F:7F:DD:6B:31:B3:48:AF:18
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019CAA8FBFBE9655944A171BD6C1956043F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 157C
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: ZLAxEh4litD4nIq8JP6jHqrQBEI.roa (hash: wOnTcEEXKGcVn5w5YtBIgaG5tAO0klLqAJlQ/7xmzWI=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: 8RAhR/RJbGyxuAd9thLA1RXV5f9Vep/RO8Ov0n5wlVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:bf:be:96:55:94:4a:17:1b:d6:c1:95:60:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=c1bdbc69c994fb1092aefc0f7fdd6b31b348af18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:ad:c2:3f:dd:f9:bb:c0:36:dd:82:82:c6:
d1:fc:74:af:db:e2:8d:bc:db:84:d6:fb:70:79:fb:
3a:02:51:c6:6c:4d:90:00:e1:60:3e:a9:35:d0:22:
1d:0e:6b:6d:db:80:13:f4:e0:e1:ba:95:ad:20:1e:
b2:d0:e1:37:d3:e9:b2:8a:7d:93:b7:61:3e:ed:47:
57:ea:c6:7f:72:92:23:50:e7:93:f2:16:b2:25:b4:
4a:43:d0:9c:37:ee:32:33:eb:dd:9e:34:c7:8b:2a:
45:cd:8f:a4:88:f0:c4:34:2f:81:7d:08:63:fb:5e:
1f:cc:7c:bd:22:7d:c9:c0:83:3b:8c:50:e1:5e:04:
58:03:47:9b:b1:ae:7e:ca:52:6e:dc:4f:75:5f:16:
e9:8d:97:a9:e7:aa:2c:47:8e:ca:e8:55:02:bc:4c:
96:d4:29:4d:c4:ec:af:0e:36:05:23:81:b1:54:1e:
0b:84:fd:87:5b:c7:99:21:a2:97:5e:d5:c7:36:c5:
9e:3d:50:38:1d:15:3d:01:81:81:aa:13:ed:1d:2e:
49:3d:4e:6f:85:5e:e5:7e:0d:8b:db:03:ae:2e:52:
a2:d4:89:94:e3:8d:27:4f:f7:73:54:f8:85:93:ee:
c5:4b:e4:cf:d1:4a:8d:91:82:ee:a5:23:23:08:59:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:BC:69:C9:94:FB:10:92:AE:FC:0F:7F:DD:6B:31:B3:48:AF:18
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:38:91:6f:0b:16:4b:55:93:5d:3c:a9:e8:b5:05:86:03:51:
b1:07:b2:46:fd:ed:9c:1f:bb:e3:9b:08:44:2e:8e:98:27:90:
e0:81:39:2f:a0:01:73:3c:5a:e5:7f:84:4f:a8:26:43:56:22:
34:fa:ec:13:14:72:85:0c:5e:41:e5:cb:51:eb:22:e6:67:65:
af:06:80:96:39:93:f8:09:ab:97:f0:cf:c3:f5:b9:c0:d2:a9:
fb:27:39:7d:15:cc:24:76:8d:09:a3:c4:6d:30:8e:be:6a:be:
42:5c:01:10:07:11:b4:01:c2:cc:5d:f8:0d:c4:66:80:ae:1e:
4d:10:80:4d:6f:e6:bc:b6:55:b8:ce:4b:a2:2d:06:ca:1c:50:
52:78:34:e8:ca:64:09:03:1e:9b:21:fe:c3:4e:70:33:d1:1f:
ef:10:d5:77:c3:7f:89:bf:dc:51:c7:1c:03:fc:95:34:a9:46:
cc:77:5d:1d:3e:0e:b4:34:25:7d:a6:a6:5e:c0:97:f7:2f:73:
7b:04:04:1a:da:55:60:0b:c0:51:47:bf:20:3a:10:5a:41:f3:
a3:35:8a:2f:dc:59:b9:85:7e:4b:d8:d8:8e:a8:2f:0c:4c:60:
78:52:cc:49:05:34:1f:ff:74:97:50:6f:b3:5d:e4:de:88:b9:
2a:5f:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:51 2026 by rpki-client