Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: QkC20lLH9vnWFf1VbPPDUyw83W3d2syT0MwU1mcF2J8=
Subject key identifier: 59:D2:61:68:07:CA:9E:3D:26:84:71:4A:57:D9:6B:2F:E9:15:82:37
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019CAC4780C878DE01CE33503699FFE34901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 099A
Signing time: Mon 02 Mar 2026 02:01:33 +0000
Manifest this update: Mon 02 Mar 2026 02:01:33 +0000
Manifest next update: Tue 03 Mar 2026 02:01:33 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: n0d2NSsHrwYhyIqGb1GFtQFbikH9ubI3IzQEplmp1Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:80:c8:78:de:01:ce:33:50:36:99:ff:e3:49:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Mar 2 02:01:33 2026 GMT
Not After : Mar 3 02:01:33 2026 GMT
Subject: CN=59d2616807ca9e3d2684714a57d96b2fe9158237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:87:9e:eb:a6:2a:57:28:46:ec:2c:c5:ac:
a1:9f:8e:c0:3e:09:06:78:79:98:cf:bb:78:74:9f:
df:86:bd:25:7b:b6:26:b8:3d:d6:09:a6:38:2c:f7:
0e:bb:41:f5:75:bc:da:fa:99:8a:22:15:47:2a:c0:
4a:6d:43:43:d5:33:ef:31:1f:6b:e0:2c:84:6c:e9:
fd:c6:61:5d:d1:54:94:a1:f9:33:92:9c:d8:18:73:
77:e7:24:1b:85:55:9b:43:fc:08:49:57:a2:a9:5a:
35:67:11:09:16:13:d5:4c:06:3e:8b:6f:b3:e4:17:
2e:4c:29:70:80:5e:45:15:7e:25:9b:8b:20:e4:8c:
2a:6b:42:df:e4:2b:b2:c2:b6:e2:11:a8:ea:64:2e:
0e:d9:94:8a:b4:c9:d8:40:30:a3:08:e1:f5:0d:03:
b7:66:44:96:b7:f0:96:f0:33:05:b6:0e:f1:37:0a:
f9:c3:92:a8:09:96:d5:f4:6b:48:fa:b0:5d:fa:d9:
3c:7e:65:4f:db:46:fc:fe:85:77:7a:07:69:70:8b:
f9:d7:68:27:ba:7c:5b:57:28:dc:e0:f0:be:a0:8c:
54:a7:f6:a5:b8:b6:55:26:32:b6:0e:fe:17:2c:be:
24:02:78:d6:d1:bc:1b:1f:13:9d:8d:a6:1d:93:1d:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:61:68:07:CA:9E:3D:26:84:71:4A:57:D9:6B:2F:E9:15:82:37
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:36:d7:74:2d:49:f9:48:0d:f4:2c:f5:69:93:b3:eb:67:23:
cc:0d:7b:04:f3:5e:cd:2f:f0:5a:52:bc:26:22:d4:6d:9b:83:
ee:2a:00:9d:39:ab:40:98:21:95:7d:9e:52:f4:37:a1:d5:8d:
54:05:56:a3:d3:6b:18:88:90:54:68:67:66:32:81:fd:db:a6:
ce:03:91:0d:3d:e5:f4:3f:89:06:07:4c:44:6e:fa:54:07:2e:
05:2d:ae:98:0b:7e:87:db:0c:4b:0d:5f:db:85:e0:16:c5:71:
36:09:bc:cb:64:32:bf:d9:de:41:fc:bf:6b:b5:a8:5b:1c:4a:
23:c9:ca:6b:d5:9f:10:01:bc:fc:95:58:b6:8b:b0:17:51:53:
8e:e5:54:9b:b2:9d:93:98:ed:31:e2:28:2d:9e:e7:51:d4:7e:
4b:72:57:7f:43:0b:33:d4:4f:b8:b1:17:e1:b9:da:74:cc:34:
19:a5:5f:5d:6a:ff:db:11:33:56:2c:83:19:94:65:e9:6b:3b:
5a:d4:08:b7:0d:00:02:5c:42:41:24:6d:fa:d8:f6:57:4a:cd:
69:2d:41:b6:b3:4f:70:94:8b:55:fd:31:15:6e:5c:d0:90:19:
ad:65:31:b7:ef:ce:70:49:0d:f8:bd:8b:62:f4:db:ab:64:ca:
25:78:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:17 2026 by rpki-client