Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: 80Cnl8XoPVZwtMNq8Noyr5W9CNLF1a1wjlnYAsDdk2E=
Subject key identifier: 38:65:C9:DF:DC:42:4C:27:EB:FE:79:C0:D9:05:7A:3B:B3:E9:C1:05
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019CAC7E0AA8FB3010A8EC5D7093C33193A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0DBE
Signing time: Mon 02 Mar 2026 03:01:07 +0000
Manifest this update: Mon 02 Mar 2026 03:01:07 +0000
Manifest next update: Tue 03 Mar 2026 03:01:07 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 6QsptxukyTy8dU3GKtF/aubB4427SpuhFm//Z97kLGo=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0a:a8:fb:30:10:a8:ec:5d:70:93:c3:31:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Mar 2 03:01:07 2026 GMT
Not After : Mar 3 03:01:07 2026 GMT
Subject: CN=3865c9dfdc424c27ebfe79c0d9057a3bb3e9c105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:a7:dc:f1:d4:d3:80:d4:60:91:59:b4:e0:
bf:0d:d5:01:90:9e:9b:70:a7:71:52:9d:01:c3:02:
0b:fc:eb:53:89:0e:1e:2c:24:80:e0:f9:e0:cd:06:
33:44:d5:b9:04:a0:f6:22:0a:63:b0:d1:7d:0e:1f:
a9:ae:33:f6:7a:a8:0d:92:77:45:f9:f5:c3:90:a9:
a5:79:b0:78:ae:28:af:d9:bd:d4:32:84:ab:25:f2:
7f:13:4d:0d:24:6f:d2:04:04:fb:89:f1:9c:f9:1a:
8c:ef:e6:9b:54:c3:5b:22:55:61:46:b0:a2:21:14:
dc:95:5d:25:04:e3:77:25:60:b2:10:65:b2:0a:79:
24:4c:3e:93:8e:36:c9:4f:9b:2b:d2:0f:e9:c2:9d:
2e:6d:c1:05:67:15:52:5b:75:16:2a:86:bf:e5:2e:
d9:df:35:39:3f:3c:83:37:38:50:6e:5e:ec:a2:2e:
ac:92:10:6e:01:6a:21:c0:97:87:5c:ef:b6:f9:34:
13:e5:4d:9f:ce:0b:32:d7:95:3c:7f:47:3e:a6:05:
7a:e5:74:e1:31:1e:fb:d1:c4:20:39:e2:d5:2c:19:
9e:35:69:2d:92:24:4a:92:fe:5a:e9:43:6e:18:a3:
6d:1e:ff:13:61:4a:53:44:38:0a:62:16:49:23:a6:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:C9:DF:DC:42:4C:27:EB:FE:79:C0:D9:05:7A:3B:B3:E9:C1:05
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3c:6d:09:46:ff:a2:77:41:2c:3c:43:0f:dd:8b:e0:eb:88:
bc:ce:dc:9f:68:9b:6e:14:21:01:f3:cb:cc:80:d7:30:49:26:
c1:e9:2f:15:b2:d7:f2:75:23:b1:08:2a:57:1a:39:00:bf:f3:
64:43:66:62:7b:47:f7:d9:61:12:d4:d4:44:b0:8f:de:4a:42:
66:ae:30:fe:51:a8:1e:13:5b:e9:69:d7:f7:be:ec:65:d9:f6:
e0:21:be:1a:52:bd:98:3a:59:00:d3:aa:c0:23:7a:84:73:41:
a1:fb:3f:74:d3:1f:0c:f8:0f:fd:06:dc:0e:f9:0a:ca:65:1b:
39:e4:eb:04:df:4f:1f:61:85:8b:d3:64:07:fb:93:78:d2:ec:
20:d9:d2:7d:bf:55:f5:8a:df:23:67:b5:f9:89:b7:1b:3b:4b:
75:50:70:69:98:10:14:6e:3a:7e:08:bf:1e:48:e2:9b:6a:5b:
fe:b3:7b:c6:cf:3d:26:de:94:c7:d1:6d:3c:77:1e:37:eb:1f:
d1:e0:98:f9:f9:1e:d3:89:97:09:c1:ee:ce:c6:89:b7:75:a8:
f6:56:af:46:96:63:d3:eb:a9:60:84:42:6d:bd:f0:b1:e0:e6:
7e:a8:57:72:1b:7b:60:81:2f:f8:eb:98:70:93:e4:ef:b7:ba:
60:72:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:50 2026 by rpki-client