Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: a3UVybCJkaeMR2NBj+ecUNYVxUk4O88nKBVinE79efU=
Subject key identifier: BB:68:1C:11:4E:C3:E0:F7:50:47:A4:FB:78:75:B3:02:1D:77:09:E9
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019CA9EA9A9C958BB84B19C253E80A48D84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0D0D
Signing time: Sun 01 Mar 2026 15:00:50 +0000
Manifest this update: Sun 01 Mar 2026 15:00:50 +0000
Manifest next update: Mon 02 Mar 2026 15:00:50 +0000
Files and hashes: 1: VBLtb5anXu8mfDZEd2sf0Q3rh38.roa (hash: ZdPYXywTN4OXgthFTsawnGv2wOYDeomubZS+6zVQngE=)
2: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: kY0shsDi+HkDbbSiGK+ZdaToAL1C2wgvrig7KJ6MGDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:9a:9c:95:8b:b8:4b:19:c2:53:e8:0a:48:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Mar 1 15:00:50 2026 GMT
Not After : Mar 2 15:00:50 2026 GMT
Subject: CN=bb681c114ec3e0f75047a4fb7875b3021d7709e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:34:49:f9:3f:32:24:60:3d:f7:b7:78:15:
a2:7a:63:08:b4:23:6c:5d:2b:f4:7b:31:eb:cb:e1:
2c:08:0b:1a:8c:5f:f5:8c:2a:b0:e6:c0:94:5d:92:
3c:33:fb:47:1c:30:da:b1:9f:21:6b:c3:74:63:9c:
fa:7e:b8:8c:46:1e:57:09:6c:2a:b3:77:07:ba:43:
d6:78:3b:75:3a:d9:56:de:4f:f7:08:e4:ca:3f:8e:
26:78:f6:18:4d:ad:ec:4f:83:3c:8e:3e:90:89:fe:
db:a5:6b:17:1e:9d:45:d6:bc:1f:96:81:3b:ae:67:
2a:4d:93:39:5e:49:33:db:07:84:c4:61:f4:dd:7b:
26:05:ac:60:96:e4:11:a0:10:29:3e:2b:e9:e1:a5:
95:a9:0e:61:6d:37:69:16:cc:d8:a1:10:2c:a6:85:
b4:ab:0a:38:69:71:09:0c:b9:c8:33:7f:63:ff:a8:
d4:b0:64:25:59:87:b6:74:4e:d2:45:e4:45:0f:4c:
f4:dd:71:10:28:f1:a3:d1:b9:8b:51:48:b9:10:01:
c6:fa:56:96:df:1d:81:95:00:b9:c1:69:52:5e:70:
2e:d5:8d:cb:cb:4d:9d:93:ce:47:80:17:22:ac:27:
6f:03:ce:2b:0a:eb:be:2e:8d:2a:5c:b1:b6:b3:0a:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:1C:11:4E:C3:E0:F7:50:47:A4:FB:78:75:B3:02:1D:77:09:E9
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:10:72:75:d1:22:44:16:6b:8e:2a:4c:f4:93:6c:a3:1a:16:
10:d2:4e:41:c8:6e:e0:d4:ef:e7:ff:f7:69:5e:e6:d9:a3:06:
80:2b:12:f7:39:53:67:72:f1:44:aa:4d:46:ed:0d:35:54:fd:
5b:f9:a6:55:13:73:f2:09:f7:a8:33:7c:dc:00:32:8a:59:7e:
85:1b:49:80:dd:ef:b5:ee:e2:63:33:c2:59:46:8e:d4:e6:41:
cb:87:33:6d:bc:54:fe:e3:46:37:8c:90:d8:2e:cd:4f:49:21:
50:c1:c4:eb:c0:b9:c2:3c:40:a0:99:14:4b:75:29:15:65:91:
c3:7b:82:ea:ec:10:97:fd:d6:0c:93:fd:a5:13:41:63:df:fa:
37:64:14:cc:06:4e:3d:b1:c8:ee:00:89:d9:69:d7:1c:9b:b1:
35:09:60:ad:85:29:49:4d:94:ef:1e:4b:a3:f5:cf:8a:ce:32:
54:92:89:25:21:dc:93:6c:70:fc:0d:52:2d:95:fc:75:38:ea:
5e:b5:76:e5:49:8d:c5:f2:ea:82:99:0c:b5:55:24:05:e9:56:
7b:56:b8:63:04:93:e2:80:1f:f5:e6:94:c2:65:80:05:eb:9a:
d6:19:fb:63:bb:99:d5:a7:2f:db:31:e7:c3:65:f9:5d:89:30:
c5:16:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:39 2026 by rpki-client