Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: jMj7Myvx2Px+KwDIWsgYyM+dmE/vMPi0oP1QC2j6NOE=
Subject key identifier: F2:FA:B7:31:2B:AA:85:90:F4:19:74:3E:A0:9D:C1:E5:E3:7A:4B:0E
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 019CAA8FE9130336C1904C2515F5167BA564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 0940
Signing time: Sun 01 Mar 2026 18:01:23 +0000
Manifest this update: Sun 01 Mar 2026 18:01:23 +0000
Manifest next update: Mon 02 Mar 2026 18:01:23 +0000
Files and hashes: 1: Ac2g8HVyNDYwzqmo6Q0KVIwOBDo.roa (hash: Um65HfZZDJKesTmcrahWX7j2iQcfK801xXJSJGbgafE=)
2: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: 4QSNSGhuRLtzvTfo3V1uKXlkmPvuczP3qgUI6L4uTFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e9:13:03:36:c1:90:4c:25:15:f5:16:7b:a5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Mar 1 18:01:23 2026 GMT
Not After : Mar 2 18:01:23 2026 GMT
Subject: CN=f2fab7312baa8590f419743ea09dc1e5e37a4b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:f1:94:65:ed:0b:60:6c:25:cf:4e:66:c3:
d1:27:37:30:7e:71:c4:fb:2c:91:98:36:71:84:58:
b8:b8:f2:51:af:d0:5c:80:fa:70:c0:1d:ee:6b:7d:
73:87:ac:60:3e:be:a1:db:29:8e:aa:54:0b:27:6b:
ae:80:49:ad:1d:c6:06:f2:72:30:10:14:c1:55:52:
41:01:1e:c0:79:d2:cb:63:78:53:ce:eb:b4:b8:9d:
ed:83:48:bf:66:7f:ee:36:3f:c0:8d:e7:6f:72:91:
7d:91:dd:b4:9b:47:f8:07:71:f3:fc:a4:13:56:3a:
6e:5c:88:71:c1:05:a1:22:5e:39:c8:1b:1e:ee:78:
31:68:b8:8c:6f:6c:7d:41:dc:02:df:97:66:42:da:
a8:af:05:d5:f5:f5:84:83:2d:65:cd:80:4e:42:18:
5f:79:65:dd:87:f8:83:f5:b7:e0:1e:12:4b:5e:5f:
30:0a:c9:7a:90:15:3e:48:de:a4:98:ac:2b:ec:ed:
ee:3a:4c:d9:62:f9:3d:a3:a6:a7:89:61:5f:9f:6f:
0a:26:e4:6f:99:27:ff:aa:47:e9:67:7e:27:d7:64:
1e:a6:cc:38:5e:bb:b0:03:74:9f:27:04:15:25:5f:
f4:d3:b1:1a:c0:59:bf:77:50:fc:2e:ad:51:9e:f6:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:B7:31:2B:AA:85:90:F4:19:74:3E:A0:9D:C1:E5:E3:7A:4B:0E
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:e3:8f:c4:72:6d:18:e4:5d:2b:19:1c:8a:0c:f7:55:66:
1f:be:09:11:70:7d:bb:8c:43:fd:69:0a:69:c1:41:61:7d:91:
7f:72:98:97:28:f7:d8:91:7f:57:85:79:de:6f:fa:30:c3:b6:
5a:b7:e8:87:c4:65:85:f9:71:c9:22:10:42:c8:bb:f8:b6:8d:
3f:0d:1b:1e:ed:68:71:9f:c3:40:3a:4b:2c:ce:3c:78:30:4e:
40:43:8b:63:d4:bf:f2:dc:ae:ef:ba:59:4c:e4:15:14:c9:93:
fc:c0:09:2d:40:9b:7b:66:5c:fc:d1:c0:2b:49:82:82:b4:08:
64:e7:2e:28:15:41:9d:c2:9e:6d:26:0d:9f:0b:54:b5:90:24:
98:d6:2b:70:91:c2:30:61:52:61:0d:d8:aa:30:ad:7d:c5:79:
3d:6b:0c:a2:7a:91:c7:48:a0:29:2f:6b:84:d6:47:98:4b:86:
55:3b:02:8c:63:b7:91:03:ce:a4:e9:e6:56:42:34:31:57:c5:
8a:6c:7c:09:61:60:4e:4b:c6:b5:9f:9f:27:0b:8e:68:ca:d5:
4e:1c:dc:5b:d7:0e:d0:bc:c9:69:03:a9:28:f0:05:ac:5f:0b:
18:c3:72:73:e2:70:bf:0c:c0:23:3a:f1:1d:02:05:00:bf:d7:
1f:d4:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:50 2026 by rpki-client