Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
File: hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft (raw, json)
Hash identifier: pHRQRzydTnPWutMk0REP1n9VuPGQqgxCuIQr4lN4hl4=
Subject key identifier: 6F:C5:D0:5C:51:59:D3:CB:67:82:D8:43:5F:5D:D1:37:42:3E:AF:5D
Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
Certificate issuer: /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Certificate serial: 019CACEB86151F5971B1EAEB2A482980BC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
Manifest number: 1283
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: 4dg4kAKJ8YSOGy8c68PKhEx34vE.roa (hash: ry2ttY5wtlmGli2qcFEKHyBaFD3fHmgeyUWAJ6+46jE=)
2: hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl (hash: h7IGMxFzaIV7y8M0zMbP/tIt6uUKLoyNmuE15PziYB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:86:15:1f:59:71:b1:ea:eb:2a:48:29:80:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=6fc5d05c5159d3cb6782d8435f5dd137423eaf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:0c:d8:75:9a:ed:58:41:a3:92:79:5b:f5:
37:c6:21:d3:0c:bc:d2:f0:12:3b:60:a2:96:59:e8:
27:0c:33:68:74:7e:4e:b3:5a:db:84:c0:04:5a:4b:
ac:a0:53:9f:88:00:db:9e:93:04:bc:e0:72:62:2a:
d4:d1:88:07:7d:f8:89:0d:8a:76:53:5a:a1:19:af:
8a:b1:ae:b4:b9:0a:39:73:59:98:69:94:d0:6e:77:
1a:fc:b3:34:fe:9f:d2:8d:dc:33:59:30:45:be:10:
15:0f:22:92:4c:55:2d:bd:fa:06:30:76:c6:a7:49:
f4:9c:28:46:03:a4:cf:e5:56:c4:69:65:f3:dd:77:
b5:ab:2c:d9:92:69:63:16:4f:9c:3e:0e:6b:ab:39:
84:aa:1e:27:5f:f1:8c:c7:08:2e:98:04:1c:06:c9:
bc:1f:52:24:97:9e:b9:ac:fe:ea:24:9e:75:97:a2:
7d:ed:43:cc:81:8e:59:5e:00:a9:94:85:6c:d3:b8:
fc:75:f9:a7:0d:20:75:5b:92:dc:ac:62:8f:3e:e0:
c4:51:d0:00:d3:61:56:90:7d:00:3f:67:71:06:02:
28:54:07:99:50:4a:e6:f2:a5:94:e1:f6:1a:fe:f7:
ad:34:b4:6f:40:ff:bf:c6:8c:50:03:f1:c5:07:03:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:D0:5C:51:59:D3:CB:67:82:D8:43:5F:5D:D1:37:42:3E:AF:5D
X509v3 Authority Key Identifier:
keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:b7:3c:8d:82:c1:b7:b6:1f:98:f1:17:c3:01:07:77:d2:
58:b4:d0:51:c0:39:44:07:b7:40:ef:c7:f2:f1:f3:e6:a0:98:
7d:8a:de:dc:b0:e1:42:17:3e:15:ad:92:d6:2e:eb:bd:17:6f:
4e:5e:01:c5:2e:4e:9b:26:68:6b:bc:19:0d:fb:7f:50:6d:47:
f6:e0:5f:5b:cf:df:70:6f:f1:6d:46:d9:69:db:6a:2d:b8:32:
bd:71:74:f5:a9:c1:07:95:b5:b1:e2:7c:81:54:d5:95:34:6d:
76:57:bb:41:0f:81:ba:1c:99:90:88:59:8c:f6:0c:4f:28:6c:
92:a8:d4:94:a0:c3:e5:76:2b:14:0a:0a:99:23:86:5a:e6:8e:
ac:2c:d0:d3:c1:00:c6:0c:a3:de:1c:e2:7b:b9:e3:84:6d:8e:
7f:4c:13:ee:53:bb:91:34:6a:5c:df:3b:2a:6f:83:d5:a8:ad:
16:29:4d:cd:44:a6:02:b9:77:52:98:e6:a9:76:24:3b:f0:64:
53:89:e4:f2:a3:5d:44:83:6d:3f:73:eb:b7:ca:4c:c2:48:e4:
49:67:d0:89:6b:89:38:1f:c2:ed:f0:fc:75:7a:e3:69:c2:5f:
c0:78:a7:c4:7a:0a:fa:58:c3:99:ed:fb:1c:2d:75:c4:28:79:
bf:b7:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:57 2026 by rpki-client