Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: 5stE4abjpgNEihAIVsOCGXwcoSW8UHZsBBpHwUlUC58=
Subject key identifier: 20:E2:11:00:1A:30:D5:8C:4E:28:42:C5:99:6A:BA:34:39:F5:8F:F3
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 019CABD9F098E79835607D5EF3CF2459E0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 0872
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: cIAjOguDSgqReQ62gGNwhDs3FsM.roa (hash: TFf8FnZKCR2DKzKeOZFiA2ziGDoeOIEoz46aZNZ0n6U=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: HR81e3+hDLj8v0CkoaR72Pwbs/z5Zn9BtOcqMHYX6TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f0:98:e7:98:35:60:7d:5e:f3:cf:24:59:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=20e211001a30d58c4e2842c5996aba3439f58ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:a2:ed:53:20:ea:2c:bb:5a:54:c1:59:a6:
81:52:b3:11:87:ec:41:1a:06:74:5c:9b:0c:74:0b:
28:70:f5:5d:e5:7c:8e:cf:fd:ce:80:27:8c:d8:a1:
0d:a4:db:3d:b2:84:dd:c8:35:e8:e3:9b:b8:28:3d:
3f:f8:18:e2:b5:b0:d5:28:52:5e:70:eb:4b:51:87:
f6:ed:6a:e1:46:6a:f4:1b:4b:ea:ab:85:9a:8a:af:
28:07:9a:7a:1f:4c:90:c1:88:60:c9:3c:88:64:46:
34:1e:c3:9f:36:8a:3e:ca:93:cd:cc:fd:a1:47:99:
2d:1f:d5:e1:30:2b:37:8b:75:07:83:26:b1:1f:ee:
0b:df:78:58:6d:12:25:d6:75:23:09:7f:b5:56:73:
3d:b0:0a:86:23:96:9d:99:6c:d6:54:b7:a5:31:5b:
1c:30:e7:96:1f:75:1b:2a:21:a9:4c:8b:e6:e1:6b:
b7:e6:76:c5:78:7d:f6:cb:ae:7d:d1:d4:56:f8:58:
63:d6:b4:ea:54:16:b2:e3:e2:2a:47:46:64:f0:3b:
e0:3a:3a:fd:45:37:6e:12:b4:29:5b:e0:c4:36:6f:
4e:61:2b:dc:15:bf:42:70:8f:c6:71:aa:5c:ba:c2:
77:e3:e7:95:bc:8c:b8:06:86:c6:2c:29:e4:29:15:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:11:00:1A:30:D5:8C:4E:28:42:C5:99:6A:BA:34:39:F5:8F:F3
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:97:4d:f5:0f:22:5f:14:f7:71:be:f1:8b:64:47:c0:22:81:
13:20:14:fb:01:b4:50:56:bc:bd:b0:a7:74:10:c4:82:23:c4:
db:55:c4:38:fd:89:9b:3b:d1:85:e3:3e:bd:1f:1a:8d:1f:c8:
4a:9f:3e:d5:f5:1c:9f:f9:f8:c0:2a:c2:69:50:36:57:6c:99:
ee:c1:00:91:33:df:6e:a7:5d:39:b2:76:32:f3:85:d9:6b:3c:
87:76:f8:be:fb:13:2a:63:5d:9e:cc:0f:e4:ab:ba:19:b6:86:
2f:5f:40:f6:9e:f9:60:ad:42:f9:98:26:0d:a4:93:57:06:e4:
04:3a:09:76:e3:b1:bd:16:43:6a:63:7f:c2:68:63:db:a8:e2:
3f:c3:53:3f:69:46:92:8d:7c:da:eb:b3:bc:71:05:e9:e6:98:
87:44:d2:23:9d:6b:8b:e9:33:13:00:e8:d4:b8:d5:30:a5:30:
12:a4:70:c4:29:55:7b:21:a3:7d:7a:a2:51:03:54:b0:37:78:
3d:ff:a0:e4:50:1d:01:1f:51:62:63:d6:58:3c:cc:c4:e9:0d:
3c:48:6e:3b:96:46:42:cb:6b:6b:5d:c9:76:b4:78:88:a1:8a:
80:64:a5:5e:b3:57:62:13:4e:e3:37:58:ee:da:d3:c0:45:c6:
f3:1c:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:40 2026 by rpki-client