Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: Oroyysgi4kwv6lLJ/5so80542PCcJUShCsik2LhlBrw=
Subject key identifier: FB:86:04:8D:87:08:FD:CF:C7:DC:B5:E6:83:F2:4F:36:50:64:4B:19
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 019CAAC69D42554121A7EFFAD0A95979F569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 08A4
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: E5K/pVjMMkcWTDkBwgvKccsvN2jyNaby2G4uTYGZeDk=)
2: q8akKFKswGsTj_WpjK3bxZW99G8.roa (hash: bvAmYcYZDJUEx6RPMDdQf7Ot5ZQUyjU6PmIDVWJ3Sco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9d:42:55:41:21:a7:ef:fa:d0:a9:59:79:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=fb86048d8708fdcfc7dcb5e683f24f3650644b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:1b:2b:80:3e:12:7b:72:02:88:4d:e1:12:
20:46:f4:4f:4b:9b:81:14:9b:2b:bd:d8:99:34:54:
4f:61:0d:93:85:58:4d:e1:e6:48:04:8b:33:b7:e2:
87:34:b4:03:f3:81:64:f9:76:61:08:1c:b1:ff:b5:
9a:c6:19:03:52:57:bc:79:22:8a:8a:54:4b:29:93:
39:8a:5d:e6:94:55:97:fa:d1:77:93:21:8c:08:4d:
b3:f8:66:29:7f:06:5c:79:9d:08:38:61:30:44:5b:
41:62:ce:32:7c:6e:c7:35:4c:bf:3e:4b:aa:b8:c6:
3a:57:2d:98:c9:bf:91:ec:d1:8d:a1:9b:f9:4a:03:
c6:27:46:2b:40:66:bb:0f:77:c5:21:43:d9:17:2b:
e4:27:2c:eb:a2:9c:e5:c6:0d:87:4a:46:64:61:e6:
bb:74:e4:52:8e:75:1b:e1:15:69:18:c0:e0:43:dd:
fe:f3:e8:59:07:20:77:66:ab:cd:83:e3:93:78:ac:
58:da:80:a6:c1:91:40:40:98:c4:72:46:44:09:6f:
5f:77:0a:18:02:ba:8e:52:c9:bc:b4:60:5b:95:7a:
95:17:76:54:9b:79:13:1f:a8:2f:d5:6d:ba:b7:e0:
4e:38:6e:d5:db:e1:bc:f0:06:ca:d4:a9:f9:30:45:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:04:8D:87:08:FD:CF:C7:DC:B5:E6:83:F2:4F:36:50:64:4B:19
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4d:ba:f2:c9:d6:02:7c:25:25:6f:6b:d8:3d:2c:bb:0c:93:
25:83:f2:b1:ed:3a:7a:38:1d:8f:cd:2b:8d:f7:6e:14:e5:58:
1c:c4:d2:af:14:d5:22:b1:16:f5:a2:ca:38:88:80:33:0c:65:
a2:85:c4:c6:91:80:73:87:2a:a3:5e:eb:60:03:bc:fa:65:7d:
b7:db:d1:ac:53:7a:86:6f:46:55:16:3c:b3:ff:35:87:c4:94:
58:b0:0b:42:6f:f1:ac:c6:1f:68:51:2a:c7:64:08:23:5a:73:
28:86:2f:11:fd:75:43:38:3f:9e:e3:1a:8f:f9:c2:70:bd:a9:
73:94:44:43:ab:96:8e:1a:e1:ae:5b:39:4a:03:14:99:fe:23:
f8:ac:3a:9f:ad:84:0e:e6:38:8c:ee:22:46:09:24:28:a0:e6:
6b:d1:3e:63:74:5c:67:53:67:48:25:86:8c:f1:72:22:74:bf:
2e:bc:3c:89:c0:63:3a:22:56:8e:bd:a4:ad:2e:80:80:0c:0c:
56:26:ef:8d:03:42:d2:dd:f9:d7:6a:b4:e4:61:b3:cf:d5:85:
52:13:76:65:3a:c1:50:c6:62:0b:34:2d:ec:d8:d8:a9:e2:11:
ec:75:2b:28:69:17:9f:28:e9:e0:e4:bf:21:13:70:d5:4d:75:
6e:33:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:54 2026 by rpki-client