Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: fC2En/VWwU32nDfRCnpDwCILoD6i9+JlHLAOpZTTNK4=
Subject key identifier: 13:10:80:E7:43:B6:24:17:64:C4:B0:0C:C2:31:D7:43:1F:B1:4D:12
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019CADC81DF2B5486766BC16C8054745B865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 14F1
Signing time: Mon 02 Mar 2026 09:01:39 +0000
Manifest this update: Mon 02 Mar 2026 09:01:39 +0000
Manifest next update: Tue 03 Mar 2026 09:01:39 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: UWXo68a9og0oopY/bElwUO5SB0rh7Rf1mgxEZ7fi28E=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1d:f2:b5:48:67:66:bc:16:c8:05:47:45:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Mar 2 09:01:39 2026 GMT
Not After : Mar 3 09:01:39 2026 GMT
Subject: CN=131080e743b6241764c4b00cc231d7431fb14d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:6f:61:bf:5b:1a:ae:01:d4:33:3a:b3:bc:
19:ff:ee:6b:34:0b:a2:5f:2b:14:71:bd:c2:44:8c:
c6:24:b4:52:1f:9d:44:45:25:a5:24:c3:49:bd:e8:
8b:70:4d:7b:21:df:ec:98:9b:83:2f:c2:82:0b:ed:
66:5d:be:4b:e0:75:05:7f:87:f2:4e:0e:5c:b8:d9:
a2:3a:67:23:6a:04:8e:ce:3d:1c:94:38:3b:3c:c9:
cc:d6:90:05:69:c2:4e:2e:6f:e1:9a:16:d4:28:3e:
57:5c:43:8d:73:c2:0a:4a:cd:a9:a3:28:0a:30:7d:
58:23:3f:d4:96:27:90:2c:35:af:80:79:82:2f:2d:
6b:7b:51:d3:78:95:dd:8a:ff:39:8b:5c:65:64:28:
93:71:30:55:45:89:58:ac:2c:da:e6:27:df:ae:3f:
bb:96:4a:62:8c:17:f5:76:6c:9c:78:5d:f6:c9:01:
3c:35:02:86:4a:48:5b:f6:f4:ca:07:71:da:7d:41:
43:ce:30:71:56:23:c7:02:2b:71:ed:32:e7:92:3c:
55:e1:ba:e9:4b:aa:78:57:00:d4:03:54:4a:2e:b7:
1f:c6:1a:ce:92:c2:30:4f:21:81:1e:ee:23:25:25:
c7:a1:0d:29:fe:b4:cf:a2:ec:77:49:be:45:e6:eb:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:80:E7:43:B6:24:17:64:C4:B0:0C:C2:31:D7:43:1F:B1:4D:12
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:99:d0:de:0e:f7:0a:0b:76:de:2f:6e:00:4a:1c:4e:49:0a:
0d:d1:e2:6c:27:4e:27:55:10:fa:18:96:7d:13:2c:d2:2c:66:
7d:a9:db:04:87:72:bd:b3:83:b1:d7:ea:77:20:a4:de:b8:6e:
7d:9b:66:3d:18:2a:12:af:62:f6:87:3b:9d:40:2a:ce:49:88:
75:74:a8:d0:62:c3:db:c0:da:f6:89:ae:e5:08:73:a4:a5:06:
ab:ae:cb:01:36:c7:af:41:b5:09:70:71:dd:48:30:81:3e:27:
48:91:d2:f3:64:59:b8:44:e2:38:c0:8e:c0:73:82:48:ff:d5:
75:0f:0c:fb:29:00:27:3b:98:bb:19:88:be:63:07:0e:02:b0:
e0:8f:7a:04:23:ee:94:aa:01:c7:7a:9e:02:57:6d:26:07:89:
5b:41:2b:3d:b0:8f:bc:cf:91:70:f6:69:b8:39:10:f4:a9:0b:
25:3a:a2:bc:bd:eb:2d:6b:24:d7:40:18:b8:33:18:5b:21:22:
a5:04:03:e2:07:34:c0:37:39:00:a1:bc:f2:44:e0:8c:9a:45:
47:9a:cb:3f:d0:97:1a:4b:17:30:45:0b:70:41:28:78:ed:41:
ca:be:bf:23:af:49:c1:16:9d:cf:cd:83:f7:74:c3:30:b1:99:
62:35:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:29 2026 by rpki-client