Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: R9u/TBuN3O14g6vioyvUQgsMrqcKEnD5BiJUGuNAAeU=
Subject key identifier: 2D:CB:49:7C:80:3B:FF:8A:8B:66:10:2B:1F:F8:19:C6:F3:DE:B1:89
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 019CA9B36109AD3605599A3F8B0D6D68988A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 14:00:31 +0000
Manifest this update: Sun 01 Mar 2026 14:00:31 +0000
Manifest next update: Mon 02 Mar 2026 14:00:31 +0000
Files and hashes: 1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: LRpZVtZpAwf78yrlak0sJKqlI4X3yOY77a71nOBlHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:61:09:ad:36:05:59:9a:3f:8b:0d:6d:68:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Mar 1 14:00:31 2026 GMT
Not After : Mar 2 14:00:31 2026 GMT
Subject: CN=2dcb497c803bff8a8b66102b1ff819c6f3deb189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:21:44:07:90:4f:b1:d8:cb:84:22:03:2d:2f:
27:8c:1d:8b:72:4e:eb:8a:4d:77:6c:11:c8:a6:d0:
b8:a4:56:1b:45:db:0f:1c:43:45:c7:0c:e5:40:b4:
f7:8b:39:d7:f1:bc:d9:69:ef:18:07:9e:18:d1:fe:
75:c0:bd:fe:97:8f:ca:19:a1:fc:df:48:25:78:8f:
72:2d:7a:af:b1:74:85:3b:20:ac:3c:e7:cb:c3:85:
44:db:db:ec:93:6d:6e:b1:15:b1:2b:44:88:63:d3:
43:5d:bb:3e:45:8b:5c:3c:cc:39:a7:02:ba:b5:c7:
9f:25:37:9c:cb:c1:ce:5c:a4:e4:fc:bc:0b:ab:41:
ee:7b:21:61:4c:e7:be:1e:d2:13:ad:31:01:50:d7:
3e:3c:8b:be:9a:89:46:32:f7:5a:55:ed:4c:5c:c9:
f7:0d:f2:9e:66:52:6e:83:de:58:09:96:3a:eb:68:
4b:a8:d9:26:46:d1:67:5b:10:39:f2:8a:d7:f3:ec:
09:43:2a:b1:8d:9e:54:23:4a:59:35:81:be:7e:73:
16:7a:9e:9a:10:e4:b2:42:f8:25:52:da:f8:10:7b:
f8:b5:94:72:40:db:07:48:26:7c:cc:2f:2f:61:04:
c3:0f:cc:ef:d8:19:06:f3:d7:40:4d:5d:9a:9b:03:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:49:7C:80:3B:FF:8A:8B:66:10:2B:1F:F8:19:C6:F3:DE:B1:89
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:b5:f0:a9:47:7f:63:80:62:41:a9:ca:ec:9f:e4:2a:4a:
c2:f8:5f:f9:d6:d6:17:ad:ec:dd:31:45:bf:36:bd:bb:79:9f:
65:6e:dd:77:3d:2c:19:88:14:32:a8:ba:f9:cc:83:e7:4b:c0:
3b:a3:00:70:e3:b8:e3:23:50:16:b1:3b:44:c9:39:19:82:8b:
a7:cf:d5:da:fd:7c:93:68:79:62:90:a3:7c:ca:f4:88:82:fa:
45:e2:4e:6c:0e:6d:c0:12:64:01:7e:f9:d7:53:bd:43:fc:38:
54:c6:91:50:5a:5d:da:b4:0b:03:aa:86:9c:79:c0:8b:d8:86:
f2:da:e1:b1:bf:02:9c:17:68:8c:ce:6d:7a:db:ca:c5:a1:cf:
f3:0f:d0:6f:9c:9b:28:0b:e8:80:2b:c1:d8:f3:a6:31:9b:5f:
db:a6:33:4d:c5:8e:84:e3:ce:09:70:9d:4f:ce:b3:33:04:6a:
09:d9:40:ad:db:38:28:a8:7d:8e:71:d1:98:ee:cb:2b:1a:f1:
a6:28:aa:41:4e:a4:97:4e:9e:5d:0a:65:02:9f:0b:35:9f:0c:
e8:01:77:cb:4c:ad:73:dc:6c:3d:9f:4f:00:d2:e2:3e:91:45:
da:57:c3:ff:1d:b0:14:c2:83:d4:39:eb:a6:e3:e7:5f:82:c1:
8a:30:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:20 2026 by rpki-client