Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: UkZ9OsDitoYytj3IbqT34h3cdjNFIx3AiSpB0zupap4=
Subject key identifier: 99:BC:87:22:57:7E:84:45:3D:79:41:01:4C:76:9C:AC:14:63:EE:55
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019CAFECC37AA8758CE5407FD4EF55D8F2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 0394
Signing time: Mon 02 Mar 2026 19:00:55 +0000
Manifest this update: Mon 02 Mar 2026 19:00:55 +0000
Manifest next update: Tue 03 Mar 2026 19:00:55 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: 7hIhKmOgwXmQHOfZeGkMAkYOkOfYUcJycye7kSzBP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:c3:7a:a8:75:8c:e5:40:7f:d4:ef:55:d8:f2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Mar 2 19:00:55 2026 GMT
Not After : Mar 3 19:00:55 2026 GMT
Subject: CN=99bc8722577e84453d7941014c769cac1463ee55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:10:e0:46:67:6c:da:1b:2c:a4:d5:51:39:
4b:26:74:61:5b:ac:50:8c:6c:db:5f:90:98:86:af:
67:c5:a4:be:58:d4:80:0a:47:ca:84:16:08:3b:dc:
f9:76:1a:f7:4c:02:a1:3c:4d:51:a3:3a:e6:07:e0:
8a:29:d6:a5:32:2f:db:27:84:bc:79:26:5b:15:9e:
fb:0b:6f:15:18:e0:b0:a2:f3:d0:68:d9:70:63:d6:
c5:8e:8d:a8:fd:37:37:35:7e:2f:6a:92:ca:c2:e9:
11:ee:8f:dc:ce:3a:3a:c6:fb:f9:d9:3e:88:43:44:
ad:d7:ec:90:65:51:5b:26:86:ef:19:3d:78:48:d6:
a8:98:ea:73:a1:2d:cb:07:05:7f:bc:c8:0b:d3:8f:
e1:33:06:9c:f6:61:83:23:6b:cf:8f:c3:dc:61:32:
e9:b6:47:76:c0:e9:56:f0:6e:88:14:00:cc:3b:af:
59:a4:65:39:d4:eb:09:c3:b1:3b:00:00:0c:d8:20:
74:58:c9:85:6d:95:75:01:8e:18:ed:fd:06:9f:fa:
a7:e3:08:02:f6:22:72:d5:1f:f2:b1:41:93:15:52:
77:fa:4e:25:84:ee:4c:6c:b0:4a:6c:03:2b:b9:2a:
d0:d2:15:83:c0:ad:a7:74:31:62:05:b1:46:31:3e:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:87:22:57:7E:84:45:3D:79:41:01:4C:76:9C:AC:14:63:EE:55
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:04:7c:bb:82:b0:f3:84:a2:f7:8d:4a:92:c5:44:fe:86:34:
a2:eb:b8:93:b2:e7:13:5a:68:db:d6:ca:8a:86:de:5a:75:7f:
8f:ca:da:c9:f6:ae:0d:9f:31:e5:f9:9f:dc:38:2c:88:71:9f:
52:f4:08:66:47:e6:53:6c:45:12:0f:c7:52:27:b8:f5:9d:b9:
2a:eb:57:4c:47:2b:3e:d0:49:af:60:b1:eb:46:08:bc:ad:e3:
b2:4b:46:cb:20:d3:c2:34:d0:ee:06:b8:f3:b1:a7:63:e9:2f:
29:d4:0e:b5:fd:32:7f:76:31:13:0f:13:4b:d7:53:14:81:06:
78:3a:90:2e:52:a5:86:b8:b2:cc:65:76:6e:74:7b:65:b5:f3:
3d:aa:de:b6:77:bf:0c:3e:33:ca:ab:bc:94:ff:98:9b:04:6b:
cb:e8:ea:d7:8d:15:35:77:56:13:e8:6a:09:e9:71:34:06:99:
f8:49:ff:37:f1:97:c4:96:5e:14:89:ad:d9:9c:c9:8c:9c:27:
84:1c:e6:75:f4:c6:c1:44:94:af:db:25:1d:74:97:68:79:62:
9a:98:b4:b4:13:51:47:bf:f9:0d:b9:67:ef:12:80:3c:44:3d:
69:99:0b:95:2e:ed:13:41:05:64:1d:50:bd:b9:c2:11:66:07:
4f:30:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:38 2026 by rpki-client