Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: Lasfv7TrcJOojOjCICaX9Is/4zlP4N3eeG2N6VNDcY4=
Subject key identifier: 69:3D:36:D9:11:FA:1D:79:F7:50:64:7C:89:15:E0:34:8A:04:2A:E9
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019CAA8F7C03B67990A8A9F74718F1D6B3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0F2A
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=)
2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: hFI3JkGVzoMTuXAlkyv3fnj2X+Ah3oDswYv5XlFOoVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7c:03:b6:79:90:a8:a9:f7:47:18:f1:d6:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=693d36d911fa1d79f750647c8915e0348a042ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:03:60:41:b4:70:02:74:b2:3b:3c:34:77:
33:b4:84:32:cb:b5:0d:9a:6c:e5:5a:cb:e1:b4:fa:
db:4a:de:92:13:36:6d:f5:9f:e3:31:76:7d:94:73:
23:61:6c:d9:74:7f:f9:f9:08:85:ee:cd:e4:83:d8:
bc:4c:ee:23:f7:9f:a9:d3:78:c9:37:bb:03:af:3b:
09:60:66:16:ec:19:92:d8:4d:ef:3d:4f:e8:5c:27:
91:69:5e:35:24:10:ba:ed:57:b3:6d:91:aa:d5:d7:
76:04:49:0e:a0:7e:52:05:6f:ab:71:e4:ba:31:a6:
cf:a2:d5:2a:5a:1a:17:3d:96:97:31:6c:e8:3c:a5:
32:3b:7d:5d:57:6a:10:34:37:0e:85:97:a4:b3:1f:
72:69:66:15:8d:7f:6a:f8:05:31:fe:cd:d1:8f:34:
c8:3d:7f:f5:36:b4:c7:4c:53:be:43:3e:bf:95:8a:
6f:f6:1e:8a:09:cc:23:1b:ba:3f:5b:03:78:eb:72:
d9:83:db:74:c0:94:55:2b:df:d2:de:01:63:63:a9:
df:3f:f6:19:f4:3e:9a:f2:73:18:23:c3:97:00:8b:
86:bf:94:e5:24:ae:d6:e2:3f:7b:f1:50:af:5a:86:
c2:a6:f7:92:1a:ad:cd:df:22:75:e3:93:76:0a:78:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:36:D9:11:FA:1D:79:F7:50:64:7C:89:15:E0:34:8A:04:2A:E9
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:ad:3a:14:fd:47:fc:1f:b2:90:ac:9a:9f:fe:1f:f9:9a:
60:89:20:3e:f7:39:b7:c7:20:0a:3e:26:9a:3a:2c:79:0a:36:
74:61:15:c0:58:1f:88:b7:8a:b7:c4:82:30:3a:9f:d8:fd:be:
ee:ef:70:79:08:14:ce:36:13:d2:fe:20:68:fb:04:15:1c:8f:
6f:bb:cc:9c:1a:70:ea:98:61:ee:f1:fb:e1:f4:f4:38:40:6b:
78:89:76:14:50:d2:20:45:73:35:2d:1c:d2:d3:90:a4:fe:9c:
7a:23:5f:27:1b:bf:3b:9a:71:42:e9:72:df:46:bb:fa:0e:f0:
3f:f0:20:d1:60:41:b0:45:f4:ec:5f:8e:6a:66:74:2f:74:90:
b8:66:02:71:da:48:21:7b:4a:7d:ab:cd:7a:33:39:b3:d7:2a:
03:a6:c4:3c:75:75:af:fd:3d:ad:c3:39:00:9d:0a:5c:b2:59:
9a:17:3f:7b:00:32:28:f9:fd:f8:2b:73:82:ae:8a:77:72:f9:
57:05:7b:8f:e3:9e:c0:cf:10:12:c8:c2:9f:e8:b6:48:be:74:
30:7b:ec:c1:72:0b:f8:c0:c4:8d:69:87:91:71:85:92:88:7a:
aa:fa:96:ac:32:b5:10:d5:b4:b3:66:88:49:92:12:4f:2b:b5:
e1:75:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:52 2026 by rpki-client