Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: 7g8jl/36SCk+hd8Ehw7rGMWb5DTi87LSXiaNdmaWC7E=
Subject key identifier: A4:27:F7:91:6E:62:A1:87:56:60:B2:F0:2A:6A:F1:D0:EC:6B:0E:2B
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019CAB6B359013A265FA7201EA0BC9853778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 07EA
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: e0VtX118uet6sGQfdvnsCx2S3r1IFC55xAr84mpDukM=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:35:90:13:a2:65:fa:72:01:ea:0b:c9:85:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=a427f7916e62a1875660b2f02a6af1d0ec6b0e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:38:5b:fc:67:ab:6c:29:d2:db:5f:57:54:9f:
11:91:d4:7b:f2:80:7e:0e:c7:64:83:0b:55:16:c5:
25:c0:14:c2:3a:26:33:c6:6c:58:51:0e:62:aa:24:
fb:15:f9:0b:c5:24:a7:f4:e0:9a:06:2a:1e:8a:f0:
7e:b0:af:e7:6e:a5:ae:e0:48:35:be:1b:37:11:a2:
e7:c6:d2:ab:6c:a0:9a:64:71:1e:1d:65:14:e7:9b:
0d:64:d8:00:3d:23:de:b7:72:57:d5:e9:6f:a3:e7:
da:2a:6c:77:23:8b:16:fe:92:6b:5f:86:6d:36:b5:
35:df:0c:53:a5:8b:3b:6f:1f:6d:8d:a3:89:7a:b5:
8c:ca:c0:a0:1d:6f:f3:75:de:c0:a1:ce:53:0a:93:
cc:45:9c:b0:fc:f4:1a:47:70:6e:db:b8:6f:74:c8:
65:79:ac:2f:b0:d5:bc:f3:99:55:12:15:10:d0:ee:
af:92:5f:43:47:bd:25:45:5b:89:19:f7:0f:d7:0c:
d3:2f:0d:f3:98:3d:3a:01:0b:d8:0d:5f:21:1a:f9:
cf:69:65:c7:78:66:40:c4:38:4d:5b:ef:b2:79:7a:
84:9f:81:06:76:49:c6:09:05:52:ef:bb:77:9d:ea:
3b:1b:ca:32:58:8e:94:83:b5:06:b8:c0:35:a4:82:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:F7:91:6E:62:A1:87:56:60:B2:F0:2A:6A:F1:D0:EC:6B:0E:2B
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:ff:ae:62:e2:ce:54:5c:2d:c9:bb:c4:40:b2:e8:49:b4:
7f:1c:14:09:7d:b0:a9:f7:4a:94:cd:04:38:59:1d:f8:11:9d:
9c:12:fb:2d:55:1b:44:8b:e6:76:51:d1:99:e3:5e:2b:c2:25:
0f:0e:84:82:d9:47:ed:65:d4:b2:3d:f8:19:6d:a8:f1:ce:6d:
db:d5:f5:91:dc:5a:d6:ef:c3:8e:a1:38:df:1f:f9:8c:a0:e9:
23:05:56:22:b2:13:31:40:02:77:a4:bc:c4:72:13:80:ec:b2:
79:2e:e4:f9:ab:13:df:fa:67:2a:ff:b3:21:86:bb:78:bd:19:
b8:c2:b7:81:e3:43:7e:03:ec:87:99:ca:1c:d8:05:dc:ba:b2:
d3:ea:01:68:dd:89:bc:97:66:60:b6:2d:d0:09:68:56:fc:a2:
49:88:9a:41:91:a5:56:c2:84:e3:b2:9e:44:00:90:31:51:8f:
5e:08:eb:5b:d8:7c:be:c3:91:a0:fd:49:49:97:3a:a3:6b:ab:
07:0a:21:50:fd:8e:3d:1e:fd:21:6f:ab:a8:ff:76:17:86:33:
62:0d:c4:60:65:62:8f:1b:84:ed:f2:0f:1c:f8:81:ed:ab:66:
4e:e6:e3:98:0a:57:77:a6:03:e3:8a:f9:4c:ed:3b:b9:a9:8b:
75:5b:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:18 2026 by rpki-client