Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: 5E60t4vI/KED9BV4hmfEpey5rE8uqhBMPWLvN8QP07M=
Subject key identifier: E9:A9:00:82:3A:1F:8F:DF:99:1C:52:23:1F:15:B2:9A:14:74:27:A0
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019CAC4776ADAE5EE992B0DFBEA41D389BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 12E8
Signing time: Mon 02 Mar 2026 02:01:30 +0000
Manifest this update: Mon 02 Mar 2026 02:01:30 +0000
Manifest next update: Tue 03 Mar 2026 02:01:30 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: Vm0nTLc6Zjd0JlE5RoIasRQGOcs9l4rDbJjsyUK/ymw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:76:ad:ae:5e:e9:92:b0:df:be:a4:1d:38:9b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Mar 2 02:01:30 2026 GMT
Not After : Mar 3 02:01:30 2026 GMT
Subject: CN=e9a900823a1f8fdf991c52231f15b29a147427a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:8f:b0:11:87:3a:7d:05:32:7f:48:f5:4b:
a6:26:1f:5f:de:1b:df:5a:5b:40:a9:6b:f6:a8:bd:
62:9e:c4:05:fd:b7:36:cf:39:15:f1:b9:12:cd:6c:
d7:f6:30:7f:d3:6a:24:05:49:d6:60:88:4c:18:a5:
0f:54:78:0a:df:0b:b3:22:b4:69:23:d3:80:6c:59:
a8:cd:cd:94:9f:b4:38:4b:e9:d4:f9:e6:d3:13:f1:
90:ed:b7:5c:30:dd:5b:cc:95:0b:1a:fe:08:c6:16:
20:39:c0:4d:d3:c7:d0:94:33:00:1a:3e:62:24:b4:
d0:f2:ee:ec:33:1f:8c:fb:05:d6:10:0a:12:cf:3f:
51:29:89:3c:86:ce:b1:f7:fb:e1:c0:00:32:b6:5e:
69:4b:56:4e:8b:cb:ad:98:8a:d4:ff:1c:ff:da:8a:
00:a8:d4:43:d0:29:8f:50:9a:4f:79:87:1c:df:9b:
bd:8e:65:1f:d7:eb:04:fb:ea:26:fd:a1:1a:8f:1f:
9a:9b:36:f5:65:34:d3:42:23:35:3f:1c:b8:c8:19:
2c:51:5c:79:ef:71:11:63:58:b1:f1:ba:5c:7f:85:
91:2d:5f:57:48:a7:08:1a:ca:db:05:c8:25:e5:59:
8e:7d:5f:f4:d3:42:b2:4e:82:6a:7c:6a:8a:d5:1a:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:00:82:3A:1F:8F:DF:99:1C:52:23:1F:15:B2:9A:14:74:27:A0
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b4:1d:fd:cb:75:74:9e:61:8d:9b:16:0a:0a:9f:94:60:98:
41:81:d6:33:67:21:14:72:32:50:ea:99:a3:29:15:e4:b6:d3:
6e:20:5c:69:46:e6:1e:39:92:b2:74:ca:6b:4d:82:70:dd:6a:
5f:94:86:c1:02:e3:b3:10:62:61:a9:e6:dc:a2:59:88:7c:c4:
a4:dd:4c:55:42:4e:09:3f:ff:61:c6:8f:b3:42:9b:f7:c8:f2:
9f:ac:07:e9:f9:9c:0a:bd:91:4d:20:36:26:4f:6a:11:bb:bc:
de:c4:d5:f1:83:51:c7:8f:31:23:20:b5:65:90:cf:48:8d:c4:
ef:4c:92:4a:bc:ff:d9:0d:12:f1:9c:a4:5c:3b:84:ec:c0:f6:
37:bb:91:5a:8c:64:df:db:e6:2a:f4:72:e0:4c:02:17:e5:f4:
39:62:84:93:d9:0a:ed:d3:c4:d9:2b:e6:d7:9a:0b:95:3e:ea:
fd:70:30:79:8c:85:52:9c:50:06:99:c7:3e:69:a3:fd:b3:0f:
cc:23:79:49:3f:4a:11:ad:32:58:e3:84:57:af:78:64:2e:79:
de:02:96:fb:2f:4c:1f:43:27:41:97:97:e9:46:0c:3d:86:32:
f5:c1:28:d3:25:50:4f:e3:4f:56:b7:9b:aa:b3:00:da:70:65:
58:c2:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:24 2026 by rpki-client