Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: 00G6ZVpwfPNyAYqNQGeOa19UWyNA4vBG4u0nvge3+Pc=
Subject key identifier: 46:98:7B:02:DE:43:DE:30:92:38:05:E2:8F:82:8A:39:72:C7:42:29
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019CAE6C554C0E534A7252EA646D69C8D96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 124C
Signing time: Mon 02 Mar 2026 12:01:01 +0000
Manifest this update: Mon 02 Mar 2026 12:01:01 +0000
Manifest next update: Tue 03 Mar 2026 12:01:01 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: XWNAkVWlZJLy/Z9oH4MCq1tQmki+gEhw/coUltep6ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:55:4c:0e:53:4a:72:52:ea:64:6d:69:c8:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Mar 2 12:01:01 2026 GMT
Not After : Mar 3 12:01:01 2026 GMT
Subject: CN=46987b02de43de30923805e28f828a3972c74229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:f8:50:41:cf:d2:58:ab:20:39:12:cc:ad:
a2:7e:a3:5f:5f:6c:c0:b6:d9:e1:91:54:58:a2:4e:
73:43:1e:e4:90:bb:12:f4:b5:fc:38:55:8f:fe:41:
76:a7:60:17:41:23:54:bb:f9:91:8f:d8:a0:71:5d:
bc:9b:ea:b2:0b:10:91:7e:4e:9d:7b:66:c3:6a:86:
de:c2:df:41:e6:e5:3b:6e:01:b5:56:f0:23:f5:59:
6b:37:51:9e:be:9e:4e:15:d0:1f:16:46:77:8f:80:
e1:a0:88:ae:5c:6b:5a:6c:ca:8f:8f:54:25:d7:6b:
35:c4:a0:5b:92:92:43:7d:84:ab:77:46:58:ed:08:
7a:17:f8:63:07:bd:3e:6d:f5:39:4b:34:3c:47:34:
55:78:6c:5c:54:bd:c9:79:de:64:9f:45:1d:07:55:
85:04:3e:c5:77:e9:9d:49:18:70:e9:94:5f:d8:32:
65:88:4f:6e:c8:48:6a:e6:01:c1:73:ab:8b:50:31:
cf:86:09:8d:06:6b:d5:98:c9:c4:9a:b7:0a:1e:71:
ac:db:b5:4c:6c:c3:97:ad:ff:24:91:96:65:5a:3a:
7e:7a:00:c4:73:46:04:76:05:78:d2:54:c4:c7:7f:
6e:8b:f8:2d:8a:42:f2:34:fe:ca:ed:ed:84:b3:f5:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:7B:02:DE:43:DE:30:92:38:05:E2:8F:82:8A:39:72:C7:42:29
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:93:91:5f:75:e9:82:0d:cf:17:0a:fe:d4:81:bf:d5:a2:8a:
a9:b1:7c:78:31:24:99:11:a7:2b:33:a7:4b:5e:cc:e9:6e:b7:
fa:b6:0c:a3:cc:60:b2:29:a0:78:0f:a1:79:34:d0:47:57:22:
c9:0f:75:8d:5b:b1:ad:e8:5d:ce:2f:78:ab:7b:ff:69:65:42:
f8:05:c2:6d:e3:17:ed:ae:77:ea:77:86:a4:6f:8f:54:18:69:
47:9b:f3:c1:1a:6c:15:6c:fc:c0:f8:fe:fd:57:fb:1a:7e:1f:
41:6c:bd:5c:77:72:d9:8e:1c:a2:f1:74:b2:33:40:8b:11:70:
ff:da:22:c0:4d:09:dd:df:07:34:a4:ac:aa:c4:10:3e:1c:60:
73:45:04:06:e0:aa:8f:2b:29:61:2f:15:fc:c4:cb:4f:45:97:
a1:0f:85:f5:72:c3:a5:9b:5c:8c:b5:88:cd:f4:0b:82:53:55:
fa:f6:c4:d2:3d:0a:0e:8d:4c:33:3d:60:26:1f:83:52:b5:33:
9b:a4:c7:6d:e2:ec:56:53:9f:6b:38:83:e8:3c:a6:e0:eb:3d:
5b:bc:6e:9f:88:ca:6d:8f:5c:92:6b:42:0f:8c:ad:dc:90:bf:
5e:63:26:e8:08:3a:df:bd:84:d7:fd:c0:49:7b:24:8a:65:c2:
3e:72:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:20 2026 by rpki-client