Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: ZCPpqsfxWFuOipfcPy1kT7x1fBzzOf8PFFgItdUcFds=
Subject key identifier: A2:0A:22:64:73:10:AC:10:A6:3F:6E:AB:9B:DA:CC:60:09:8D:9C:4C
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 019CAAFD21E09FCF8E9CBC62CB36C19B9861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 06C2
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: Hwz33O3GEhUPQENUYSweMk7o9iA.roa (hash: 1HTvbTcGZV1b8MpfW8YABdSoijcVRUnqTe0YqNWbdPc=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: QGXm6raFkvMpMKLmp+CWJLe2tvH2saEMUD3Qs01+xrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:21:e0:9f:cf:8e:9c:bc:62:cb:36:c1:9b:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=a20a22647310ac10a63f6eab9bdacc60098d9c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:66:04:fe:95:8b:b8:69:01:f2:80:10:50:
63:23:80:b3:b5:6f:57:38:8f:10:ae:95:57:33:80:
29:97:bd:97:b6:76:d0:7d:33:16:af:5c:98:2a:dc:
94:d9:a0:d5:ca:02:13:c4:27:98:81:d2:bd:ab:e1:
61:e3:b4:80:63:84:70:49:24:a9:e4:b3:85:62:4f:
97:04:61:69:7a:1b:6a:ef:5a:0e:d7:5e:1d:15:11:
25:57:d5:ee:ab:56:97:c2:b4:0a:20:85:86:15:ee:
94:71:22:36:20:29:c9:3c:e2:40:57:fc:6f:52:e3:
64:60:29:52:71:b2:d1:2f:de:65:7b:ca:67:38:b0:
73:e2:95:de:60:77:c5:58:f9:11:dd:4e:df:68:50:
9d:c6:b4:a4:08:ee:85:6a:9c:41:d6:70:f9:ab:78:
2d:6c:49:78:db:23:ce:6c:14:85:08:11:33:34:6f:
de:f9:80:de:f2:a3:2f:ad:df:fa:a6:f5:ca:25:15:
31:93:5a:88:1d:49:fe:fe:c0:1f:17:8e:d9:d0:53:
51:d1:e4:32:52:f3:8f:bd:2b:75:ce:9b:1a:c2:cb:
ca:eb:ad:f8:bc:81:3a:9f:6f:22:26:3b:f8:95:6d:
91:f2:4e:42:a9:66:ff:60:a0:7a:c7:d8:e1:87:fb:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:22:64:73:10:AC:10:A6:3F:6E:AB:9B:DA:CC:60:09:8D:9C:4C
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a1:06:e4:64:ea:ee:d9:27:d1:1b:e8:4a:ae:8b:15:5e:cd:
ea:b5:91:30:05:23:2b:a0:b1:42:e0:b2:9f:d7:6b:80:a7:e7:
dc:29:c8:39:50:50:f3:1c:a5:d1:ba:8f:38:fc:c9:c4:3c:8d:
60:31:1d:16:8c:65:4f:30:7a:0c:e3:b7:85:0c:69:d1:ec:37:
3d:ac:ed:c7:56:9a:2b:05:3e:9c:88:bb:24:16:97:e6:5b:e7:
e9:2c:6d:84:4b:ae:51:b1:ed:fe:25:9a:95:ed:34:63:ef:30:
b0:81:4b:c1:59:a5:e4:3f:38:1e:d6:6f:ee:22:07:93:cc:1c:
a8:64:dd:cd:42:94:68:0c:be:f8:2e:76:42:11:e3:85:b9:e3:
9e:22:cc:d3:7c:a2:ed:06:05:d2:85:77:18:8b:04:80:a0:db:
24:3c:18:85:c1:21:90:6b:b9:de:9c:26:5c:6b:c7:ad:fc:3a:
bd:e2:5e:7f:1d:a6:96:ba:3f:6b:35:01:f2:4c:8f:fb:7c:ab:
c3:4f:de:93:a2:84:c9:67:64:28:65:2a:5a:b7:9d:57:db:af:
0e:ea:65:f2:90:1e:3d:3d:aa:a8:8e:4e:04:a0:d1:db:78:38:
ab:3d:95:15:4e:20:01:4f:c7:5c:ac:3e:0d:33:40:d3:66:28:
ce:e4:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:19 2026 by rpki-client