Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: kaZoHOT6+FKb+8K1LQgXar3T5aRUb/ZKo07CUikdyIo=
Subject key identifier: E4:B7:20:4F:BC:77:EA:51:C0:E4:26:8A:40:12:63:23:D8:68:FD:E8
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 019CAB34B8EF4C0B6976359301BA51BC8A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 092A
Signing time: Sun 01 Mar 2026 21:01:24 +0000
Manifest this update: Sun 01 Mar 2026 21:01:24 +0000
Manifest next update: Mon 02 Mar 2026 21:01:24 +0000
Files and hashes: 1: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (hash: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: 8QtTVITOq4BiC240nCFI/YpC1GXBMEuctUccl3RUOeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b8:ef:4c:0b:69:76:35:93:01:ba:51:bc:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Mar 1 21:01:24 2026 GMT
Not After : Mar 2 21:01:24 2026 GMT
Subject: CN=e4b7204fbc77ea51c0e4268a40126323d868fde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:36:1e:ca:86:5b:e1:bc:92:28:b5:99:da:c3:
f6:b2:11:97:e6:cd:25:eb:fd:83:00:20:0c:fd:e3:
b1:c5:a0:af:58:58:f8:f8:ae:27:9c:b3:5e:d4:14:
2d:94:7d:70:85:47:b1:15:79:b8:c0:c7:0f:2a:2f:
0d:63:ef:6c:79:bf:fc:05:5b:0f:9e:47:13:d7:0e:
d1:7b:0d:75:88:a4:95:da:ad:42:3f:c0:34:f8:54:
b3:ce:94:fe:f2:1d:e5:ae:b3:69:69:79:bc:64:9a:
6d:bd:0c:ee:46:68:e8:69:7e:dc:2d:40:44:0e:59:
29:02:c4:33:8e:8d:3c:d4:a8:7b:e0:c1:6e:1d:4b:
73:5b:5c:e4:bc:4f:e6:40:aa:b4:65:2b:63:db:e9:
c8:74:e3:61:3f:d1:1d:a9:22:20:d6:a5:3b:b7:4b:
03:d3:36:13:06:cf:ed:1a:44:0b:b4:1c:53:e2:12:
ed:8b:3f:f9:49:a4:4a:1f:b6:c8:d9:1b:27:ef:8e:
e3:fb:af:11:61:26:24:53:35:2f:2b:e4:b0:98:4a:
12:ba:01:cf:64:17:07:0d:64:c3:18:30:76:ad:b8:
f7:4c:23:15:77:b1:ff:33:32:ad:58:09:40:0f:dd:
65:9b:a1:f3:09:62:22:77:50:ad:04:f5:a8:37:1c:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B7:20:4F:BC:77:EA:51:C0:E4:26:8A:40:12:63:23:D8:68:FD:E8
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7e:5c:ca:e9:fc:b0:d8:6c:0d:81:d7:46:10:d5:84:23:d5:
98:8e:1a:e5:33:3b:d6:46:15:d5:e8:18:6e:14:00:8b:5f:3a:
6f:4c:6b:13:07:4c:bf:ec:f5:34:2a:e9:cb:e4:7b:22:3c:3a:
5e:f3:2b:90:9f:b4:91:78:a0:7f:53:78:eb:c2:77:c4:e3:37:
82:ad:41:cd:fe:9d:92:e7:33:46:5b:e6:32:93:62:bf:c8:0b:
de:91:53:55:12:b5:fd:af:7a:64:2d:2c:88:7c:34:ea:8a:49:
91:41:4c:11:91:0f:66:db:f0:f6:8c:a2:d0:ee:4b:51:69:a3:
5e:99:20:31:e5:ff:2b:21:6d:66:01:26:0f:52:06:34:9a:e7:
b1:97:23:0d:7f:5b:28:b8:fe:9d:f2:40:45:dd:45:5f:2e:6f:
4e:e2:65:d0:7a:65:39:d6:34:88:06:1f:ec:49:57:5a:68:59:
2e:a0:40:0d:43:df:16:ef:c9:c6:db:ca:cd:d2:e8:0e:68:c9:
54:f7:2c:6d:28:b7:26:56:1c:df:58:73:92:ab:37:97:03:c2:
04:2b:90:84:f4:d2:f7:e1:97:cd:87:81:32:f0:49:e8:5e:32:
9a:ba:16:6b:89:4e:5b:78:31:88:73:3c:a9:7e:33:15:c5:90:
30:59:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:00 2026 by rpki-client