Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: XSX7y9Igxnm802ccNWkDZdJVOp2cyJQIdQUvrh91+9A=
Subject key identifier: F2:D2:B6:0E:03:41:E6:97:73:B9:0E:6A:9E:08:94:F3:4B:7B:E6:F5
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019CA9B39634804A2EE90B193F28BC7CF3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: GVWjmw3R/sDiMTlgyrkrXMkbv0QvfoJNuzrxnabpcLI=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:96:34:80:4a:2e:e9:0b:19:3f:28:bc:7c:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=f2d2b60e0341e69773b90e6a9e0894f34b7be6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:a4:ed:d6:1d:7f:17:7c:01:87:2d:08:ff:
23:a5:09:20:c8:88:2c:09:82:4d:f7:ea:2d:e7:47:
9b:d8:a0:f7:50:16:96:90:dd:4d:9a:0c:c8:85:22:
9f:cf:9c:66:77:aa:9c:19:cf:e1:6a:2b:d1:a0:bb:
e9:37:e4:04:5c:91:8a:af:bb:51:b8:1a:57:db:5c:
2b:20:11:b3:c1:31:1a:c3:05:d7:57:15:f3:96:a0:
27:21:06:db:8c:56:d6:0a:11:b9:e3:9c:66:11:98:
5e:e5:49:ae:3a:61:9a:73:19:f5:1d:2f:cf:02:0d:
db:af:e2:7c:8e:5b:fa:44:52:26:ba:20:8f:ee:e7:
fd:6a:01:c9:ef:16:0c:81:53:fa:6f:26:fd:07:b9:
d8:56:c3:b3:98:c0:18:67:f8:68:02:7c:3f:2e:44:
a1:56:b3:8b:01:c4:95:bb:9a:02:2c:32:47:d3:32:
7f:ab:62:d7:7f:9a:d9:d3:93:41:73:44:16:6c:e2:
3c:9a:62:ac:f1:18:37:6a:49:6f:28:0a:2f:06:20:
34:1b:80:b9:a0:04:2e:b7:20:ff:74:c4:f9:c3:f5:
cd:88:cb:d8:f7:57:53:75:49:00:c2:41:36:32:00:
2f:da:c6:59:0d:fa:32:fb:ec:31:a1:ef:16:be:78:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D2:B6:0E:03:41:E6:97:73:B9:0E:6A:9E:08:94:F3:4B:7B:E6:F5
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:6c:12:c1:93:d5:46:25:ad:06:ab:43:5d:20:33:03:db:
8c:6f:93:a4:fc:28:a1:6d:35:f4:ad:b5:de:11:c1:a4:de:59:
c3:6e:a8:17:d5:01:b3:ff:f1:28:49:0a:35:38:9a:fc:fb:cd:
65:79:e0:04:37:b2:4d:e4:b6:03:c6:02:cc:17:7f:b7:a7:3d:
8d:3c:98:d1:16:c1:d9:5e:48:04:22:8f:cf:82:92:19:83:bc:
23:22:00:fb:49:11:f6:9a:05:06:87:93:a0:f7:5e:06:00:7c:
a1:d7:9f:9b:03:50:52:30:30:69:f3:23:e7:d8:6f:a8:2f:6a:
88:40:ff:4c:c2:af:96:c8:98:4e:10:6d:83:ee:b9:d4:c5:de:
52:bd:52:b2:82:12:bb:0d:50:27:13:71:03:6e:58:08:42:54:
0c:fd:76:71:ca:b9:93:54:a2:59:eb:a3:9e:67:b3:6c:e2:a4:
14:04:e5:89:11:89:18:29:91:ea:62:da:b0:76:30:1d:52:86:
b1:46:e3:ca:ac:5d:fc:9e:0a:25:62:ad:bc:5b:a7:88:69:86:
f3:ba:8f:7f:7c:83:13:55:cc:9e:ab:68:50:a1:ee:a4:fa:30:
95:c7:db:54:52:4e:0a:e0:52:0d:1b:40:48:52:c2:6b:ed:2e:
45:29:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:36 2026 by rpki-client