Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: IRJEGEs+FLxUKJD16uzh80MEuEZw0BzVfh8t1VITnmw=
Subject key identifier: F5:71:EA:A0:F2:2A:61:33:4D:EE:CD:B2:EC:F1:6A:00:09:3D:AB:2A
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019CB05B1ED928AD4E43333339B28417B949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 124D
Signing time: Mon 02 Mar 2026 21:01:27 +0000
Manifest this update: Mon 02 Mar 2026 21:01:27 +0000
Manifest next update: Tue 03 Mar 2026 21:01:27 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: 2Gpx+qozRd+Zd65cZFq3AuzmaVOR/OtxzcnLcsAd+VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5b:1e:d9:28:ad:4e:43:33:33:39:b2:84:17:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Mar 2 21:01:27 2026 GMT
Not After : Mar 3 21:01:27 2026 GMT
Subject: CN=f571eaa0f22a61334deecdb2ecf16a00093dab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:0a:0a:85:56:58:5a:cc:62:b8:6c:b8:49:
95:f6:1a:5f:4b:7c:af:cd:aa:fe:5f:22:1c:28:c3:
53:75:df:3c:b9:b3:8a:b2:f8:5b:26:91:92:70:cd:
4a:f4:c7:88:af:4a:ff:17:f9:55:72:32:fd:7a:ac:
83:f0:34:83:56:8e:72:ba:64:3a:a0:e9:48:84:82:
37:ac:7f:b6:92:21:8c:25:7b:c8:0c:81:1e:4f:43:
e7:52:7f:cc:84:80:10:b5:b3:ae:b2:98:94:01:ea:
ca:5f:06:bc:d9:79:1f:d3:0a:d9:22:c7:c5:65:cf:
56:df:91:2d:05:44:95:7a:72:a3:1d:7a:86:15:78:
58:51:9c:dd:63:6d:48:49:99:9a:0c:5e:8b:1a:df:
54:e3:13:39:21:c1:75:f9:74:d0:f9:6e:9c:41:69:
99:87:cf:7b:f6:e9:ec:9e:06:37:2f:97:19:37:af:
c6:46:c4:e6:8d:0b:3b:2b:f9:ef:91:44:23:fd:b1:
95:67:7c:8c:61:65:47:4c:8e:34:ed:82:e9:f1:43:
b0:87:3f:7f:7b:50:80:23:57:97:d0:e1:12:8e:8f:
7d:41:fd:53:f2:fe:1f:5d:89:df:65:16:5a:e9:77:
54:0d:9a:74:ae:64:cd:ae:17:20:45:49:a3:75:b7:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:EA:A0:F2:2A:61:33:4D:EE:CD:B2:EC:F1:6A:00:09:3D:AB:2A
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:58:37:94:93:18:72:6b:93:94:f6:99:55:39:81:ed:b1:
26:81:36:37:00:b9:61:70:44:f9:f3:ec:b3:77:ca:9b:ff:ed:
49:76:b9:0d:15:3b:38:42:c7:b0:19:84:98:da:96:dc:a6:a6:
9c:72:5a:ec:64:dc:4e:df:da:cd:1d:4b:1f:79:83:bf:ea:8c:
2f:43:3b:8c:5a:f8:c5:b9:b1:34:9e:1a:7d:6f:af:aa:5b:8c:
a7:a7:47:be:59:23:e9:5f:89:35:5b:d2:96:12:45:23:f5:11:
40:a1:07:a4:fe:2c:8c:0c:73:0d:c1:a0:8e:22:2d:48:88:59:
14:51:6f:87:cd:74:34:4c:90:c1:72:35:96:86:65:ba:4f:0d:
55:d1:87:47:9f:57:37:85:b6:30:c0:8e:0f:48:8f:bb:53:7e:
58:f2:0d:78:76:92:eb:4c:88:f5:05:87:6e:f6:8e:d9:df:3e:
86:81:ec:14:06:bd:d6:21:6e:c1:53:ad:f4:5e:2b:54:14:46:
59:64:c0:d5:d0:a4:10:ae:f2:d1:fe:9d:78:15:b3:54:2e:6e:
66:b9:8d:56:f4:f3:53:18:d4:97:9a:f3:86:52:56:3f:2c:4c:
f5:e6:fe:45:10:1e:f9:cf:95:74:ba:db:70:72:0f:cd:e7:1d:
e7:88:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:31:44 2026 by rpki-client