Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: 1xj5E0awD2aPqQoLd9TW1NHumSlBlMJBY3ntjVEJn28=
Subject key identifier: F2:95:20:1A:ED:2B:E8:DC:6D:AE:5D:37:B3:30:01:91:43:2D:8C:3A
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 019CAE3583BD886D4F54B168344E747DEF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 11:01:08 +0000
Manifest this update: Mon 02 Mar 2026 11:01:08 +0000
Manifest next update: Tue 03 Mar 2026 11:01:08 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: oShN1+8eW9rNlRSx7rNLbuDIJ946/acspo+e/JzyBYU=)
2: v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa (hash: QMYJkrHaL3LBI/CVAcdwz2saxueqHf/IvlmxIHaRqm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:83:bd:88:6d:4f:54:b1:68:34:4e:74:7d:ef:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Mar 2 11:01:08 2026 GMT
Not After : Mar 3 11:01:08 2026 GMT
Subject: CN=f295201aed2be8dc6dae5d37b3300191432d8c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:73:6b:7e:3f:3c:4b:ae:5b:9c:c2:3f:b3:
fe:0d:e7:c3:03:a3:0b:ad:2a:b7:be:c1:69:b5:c8:
13:b8:7c:8e:35:82:1d:fe:c1:d6:43:50:76:c9:b3:
f8:12:05:3d:8e:70:87:bf:48:a1:6c:37:04:70:5a:
f7:4c:83:c4:61:b2:6d:77:8f:3d:5b:d2:72:54:d7:
9e:33:d6:fd:71:b5:8b:d6:d0:e4:58:20:2c:b9:46:
d4:ef:e2:91:31:8b:ff:46:ed:0e:1a:f4:cc:27:45:
51:6b:3a:95:1f:eb:08:c1:13:52:4b:df:f4:48:5e:
2b:89:c0:8d:28:54:a7:c4:a9:64:1b:1d:dc:d2:99:
8a:4e:99:00:5b:51:8d:c4:c2:6a:bb:45:9d:cd:c3:
8b:46:d7:73:ac:3c:b7:b7:15:9f:31:35:7d:20:22:
e0:71:65:e0:dc:e1:a8:05:06:a3:07:13:c9:25:37:
1e:ac:19:7f:66:df:3f:00:36:cc:4e:5b:8c:fc:ee:
dd:a6:ac:db:eb:8a:b5:9f:68:b8:69:9e:22:b1:47:
58:65:8a:c4:76:77:5e:3d:0c:6a:bb:c6:72:e6:e5:
32:a0:e0:63:eb:8e:82:cb:82:ff:1a:31:17:1c:e4:
8e:c0:70:cf:b8:e9:5a:f5:e7:ea:7f:53:1d:c7:c6:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:20:1A:ED:2B:E8:DC:6D:AE:5D:37:B3:30:01:91:43:2D:8C:3A
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c4:35:6f:4f:91:ab:d5:b2:33:26:d3:98:8a:06:c0:f5:5d:
08:f6:29:26:b8:d4:f5:e7:52:e6:07:86:df:25:dc:b7:f0:f7:
3a:0a:de:21:e0:d0:4b:f3:cf:32:75:c4:95:aa:df:d7:16:61:
56:2f:6a:f0:08:83:67:bc:20:3b:89:3f:7f:e8:69:0f:f5:d5:
60:9d:29:a4:2d:f4:f1:f3:21:38:d3:b3:f5:1a:95:b3:7d:09:
7c:f2:62:6b:20:b0:97:cb:43:bc:9e:e5:49:a9:f4:d4:6a:91:
d8:6c:f2:ca:1f:70:3f:5e:f0:d9:62:15:18:3d:98:0a:81:39:
be:94:45:0b:8f:91:cf:18:5b:ef:92:b2:a8:03:49:a9:47:91:
a7:69:eb:09:67:04:3a:94:dc:d6:4a:48:cf:d4:fc:4f:a7:ac:
86:03:ef:e1:4d:42:e2:3a:12:ff:36:08:06:93:07:14:7e:40:
1e:a0:05:60:db:58:f5:73:6a:d4:9b:a6:d1:12:32:19:8a:13:
c1:35:e6:46:89:ae:cd:aa:6a:72:10:7d:86:29:91:b4:d3:40:
fb:d9:c4:ee:cc:e7:df:73:86:1d:40:db:f5:4c:97:1a:c3:1f:
94:88:4b:ea:88:33:2d:1d:52:51:c4:62:e6:0b:f0:9f:fa:7f:
0f:f4:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:20 2026 by rpki-client