Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: h8kH6npCBsc/8PwwejLmYLIzfjtMnzLvbV/5tx1Iy34=
Subject key identifier: 68:ED:4D:32:55:73:48:15:2D:D6:CC:D9:34:32:59:C0:79:09:A1:1A
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019CA8336444C238E337A10B308FC67B8F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 0184
Signing time: Sun 01 Mar 2026 07:01:06 +0000
Manifest this update: Sun 01 Mar 2026 07:01:06 +0000
Manifest next update: Mon 02 Mar 2026 07:01:06 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: BhI7eCvHyR11NYf6DwR8nlKrYJm4R4gtN4xi9uBE3uY=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:64:44:c2:38:e3:37:a1:0b:30:8f:c6:7b:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Mar 1 07:01:06 2026 GMT
Not After : Mar 2 07:01:06 2026 GMT
Subject: CN=68ed4d32557348152dd6ccd9343259c07909a11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:89:f7:ca:1c:7c:c5:dc:68:30:d5:98:ef:
79:3e:0c:32:7e:92:3b:2c:7e:2d:43:5e:d1:7f:22:
e5:d6:2d:da:39:35:28:a8:e1:32:c7:2a:d9:fe:45:
56:22:b7:1c:97:0a:ab:f5:0f:49:fd:37:33:a4:32:
eb:fa:41:ed:7e:99:99:24:c8:1d:5b:a1:82:4a:ae:
1b:6c:d6:1c:a9:90:7f:a1:8c:c9:ab:4f:7b:28:00:
b3:1d:1b:3e:7b:64:fe:98:e5:9e:8b:d1:cd:79:e1:
6e:66:31:6f:e3:34:de:58:79:e0:5a:b9:c4:62:16:
13:73:e0:ad:e2:ce:83:f1:fc:e9:d8:22:21:bd:55:
37:fa:a1:8b:d2:e1:5f:48:53:f0:9c:26:1b:66:7a:
fa:e3:58:6d:6d:a4:a8:43:1c:da:f4:ac:da:2b:07:
63:7d:b1:5c:13:61:5a:2e:3d:a4:b3:40:71:4b:79:
f1:e7:09:27:bc:39:93:e6:4e:91:31:fa:04:63:55:
a2:d5:de:fe:18:e1:aa:8e:36:ab:32:ff:7c:e1:9e:
78:99:12:98:e7:d8:aa:90:dd:8f:da:d0:1e:ac:db:
cb:aa:37:5b:96:44:25:57:4c:9d:bb:79:f8:44:91:
b4:e6:b4:0f:d1:ca:55:3b:5a:fa:81:3a:8d:9c:b0:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:4D:32:55:73:48:15:2D:D6:CC:D9:34:32:59:C0:79:09:A1:1A
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e7:2f:d1:66:2a:dd:b1:85:fe:d8:bf:1d:f6:1b:4e:8e:12:
de:d2:5a:d1:67:72:94:59:85:0a:1a:ba:31:c4:66:53:d1:7d:
a5:aa:6f:45:bb:90:1b:9d:72:eb:6a:a8:4d:78:ba:9f:81:50:
4e:7b:b0:c6:2c:8e:fd:20:72:9f:12:16:bd:38:f0:ce:cd:7f:
f4:89:34:41:38:0b:66:00:d2:f6:5d:fb:59:a3:75:5b:d9:8d:
79:1c:83:04:e2:c7:aa:85:25:0d:1f:6f:f6:67:c5:55:55:07:
63:21:ed:86:19:ba:49:7e:82:1c:99:07:21:6f:e3:fb:2f:36:
d3:62:73:ea:5a:30:0e:eb:f4:31:36:71:8b:ae:6d:a6:0a:fb:
20:f5:64:0d:4e:f7:f9:95:ce:72:23:54:06:88:db:0b:0f:2e:
7e:e0:89:d8:ea:03:69:21:03:3d:70:01:66:2b:b0:31:05:c9:
1b:b9:60:6c:29:a6:ea:d0:02:8e:b2:78:e4:d5:b9:25:25:b7:
f2:ed:e3:06:51:7e:f1:b4:19:db:39:cd:bc:26:71:92:22:ac:
2b:88:06:f8:b5:1c:7c:f1:3d:72:09:18:27:0c:60:d7:84:12:
5f:ee:4d:eb:29:b4:52:96:39:a6:67:dc:17:f5:21:da:8a:c7:
2f:70:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:09 2026 by rpki-client