Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: K9VoQSR+gZTTql+XCRxtbvGa/FwYgx2uMNfd7ZfoATQ=
Subject key identifier: BB:FF:5E:64:F5:5B:72:EC:09:83:D2:00:B1:D2:27:40:AD:F2:BF:46
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019CADC74951C1332B0CA84EE41810B1820E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1588
Signing time: Mon 02 Mar 2026 09:00:44 +0000
Manifest this update: Mon 02 Mar 2026 09:00:44 +0000
Manifest next update: Tue 03 Mar 2026 09:00:44 +0000
Files and hashes: 1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: IX/VS+zwFaHiBRM0fZ3NdXeTLj8Lo98IbBuTFGu3P2g=)
4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:49:51:c1:33:2b:0c:a8:4e:e4:18:10:b1:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Mar 2 09:00:44 2026 GMT
Not After : Mar 3 09:00:44 2026 GMT
Subject: CN=bbff5e64f55b72ec0983d200b1d22740adf2bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:40:6d:86:d9:44:25:f9:cf:d7:64:4a:03:
d1:c4:88:c5:39:5b:2f:e8:be:d5:45:6f:ba:97:b2:
f8:87:43:6d:ec:84:6a:cd:f4:3b:28:ff:8b:cd:e1:
df:46:34:bb:20:01:56:da:a9:e8:6a:f5:7e:01:74:
c7:b6:92:29:ef:5e:32:d3:bd:1f:f2:aa:ce:93:3b:
2e:37:56:3b:22:35:eb:df:3f:2f:1c:4f:a1:00:76:
5a:7f:4b:70:ea:43:36:5b:94:46:65:22:e1:47:4c:
91:fa:e6:04:06:df:03:7c:f8:de:ad:2f:1e:2c:fd:
90:2b:69:f9:cf:65:98:0e:67:31:c3:99:64:b6:ee:
0a:80:1b:5f:41:50:f9:f0:d7:23:49:00:7b:17:c0:
d5:76:4c:e8:5d:76:fb:63:54:38:88:57:a4:98:11:
eb:a1:08:d4:0e:90:30:4b:a6:ba:6b:35:7c:6e:4a:
bc:07:a2:ee:c9:1a:22:85:41:cd:08:b0:6b:d3:7d:
c1:99:7f:ee:c6:63:d6:6e:9a:55:79:5e:6f:86:ad:
13:ac:8a:4a:66:86:f6:dc:41:bd:7b:67:0e:8a:11:
6b:d5:fb:b0:68:ab:33:81:3b:1a:29:fa:e9:2f:a0:
e6:ba:c1:8d:55:f7:59:44:67:22:5c:0d:b5:b4:66:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:5E:64:F5:5B:72:EC:09:83:D2:00:B1:D2:27:40:AD:F2:BF:46
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dd:d0:24:a8:bc:c1:cc:88:96:2c:82:76:25:a2:bd:b2:d8:
87:fc:44:ca:92:df:99:0d:9f:a6:3e:d0:6f:76:a7:3f:63:32:
bd:39:65:54:d1:87:38:17:c4:fa:54:f3:58:34:65:bf:05:93:
85:a6:79:a2:8d:ae:e7:a4:fd:8d:10:8f:a8:af:23:f7:d5:08:
b6:9a:3f:cd:ff:3d:11:bc:81:6b:5f:7b:2b:00:a8:b1:46:14:
65:18:45:a9:21:c2:9c:81:e3:03:d9:3d:d7:88:75:37:cc:8d:
06:71:bf:bc:1b:ff:e8:ce:0f:9b:b8:80:a4:4c:ca:f8:ff:4d:
60:9f:b5:6c:f9:76:7f:42:70:85:25:3f:92:42:05:73:25:c2:
d0:b1:43:a3:18:12:11:d7:f4:db:e4:e6:de:a1:f8:d0:16:d9:
ab:1c:cc:45:3f:f1:4a:77:af:32:45:28:b5:8b:e7:69:57:59:
0d:07:8a:3b:c4:ef:79:ed:a0:e7:f0:07:c0:49:93:5b:60:52:
0b:1f:f0:8f:4f:d4:29:79:56:a0:ad:4c:77:2e:81:1a:f3:1e:
37:40:50:43:73:e7:19:07:52:c2:73:7d:8a:af:32:09:60:1b:
c4:48:fb:31:62:56:fb:c3:cd:cc:2b:c7:1a:ab:3b:b7:ab:61:
7d:f4:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:15 2026 by rpki-client