Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: dIRGa+7cMk96HIxjVn+6fcLdYb5GYaDbOgDfIiBPyKY=
Subject key identifier: C3:5B:17:7F:99:87:05:C1:B4:A7:E1:7B:20:71:A8:EF:1C:CE:19:E5
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 019CAA8F8588B8DB05A3473EC824C7543790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 136F
Signing time: Sun 01 Mar 2026 18:00:58 +0000
Manifest this update: Sun 01 Mar 2026 18:00:58 +0000
Manifest next update: Mon 02 Mar 2026 18:00:58 +0000
Files and hashes: 1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: 3tzsRaFGQG9sJxlvYjfS/Gi6eWIXOSOXnMg2sWYK7DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:85:88:b8:db:05:a3:47:3e:c8:24:c7:54:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Mar 1 18:00:58 2026 GMT
Not After : Mar 2 18:00:58 2026 GMT
Subject: CN=c35b177f998705c1b4a7e17b2071a8ef1cce19e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:b0:e7:c9:6f:61:72:7e:50:ed:0f:63:41:
26:7d:a5:25:97:00:14:cc:36:a3:09:30:60:9a:cc:
cb:09:47:d1:66:2f:15:e5:7b:64:04:1d:a0:1d:a3:
96:3a:b6:62:cd:95:7e:24:a8:44:f3:a6:be:16:98:
4e:42:9c:f7:d9:44:61:cf:49:f9:93:d7:6b:75:84:
f8:49:5e:e0:c4:d6:07:05:d0:59:3d:15:8b:dd:db:
5f:ac:8a:ab:6c:63:75:68:c4:99:ec:7a:95:fc:8c:
24:16:55:10:99:df:85:4f:88:43:83:09:99:05:a3:
32:f6:07:3e:5e:2a:ab:66:cd:c2:1c:95:09:0f:3c:
bd:e3:98:67:58:05:8f:5c:b0:9e:0c:54:87:82:66:
0a:88:db:ca:de:9f:a1:c7:7f:a0:ff:68:b8:a6:a6:
e3:b6:7a:d1:9b:2a:7d:66:5e:0e:71:56:21:6e:a8:
79:95:2b:07:0b:b8:b4:cb:72:a8:e4:ed:4e:ef:34:
36:10:03:ca:31:b3:a3:5e:73:da:be:1e:87:f7:47:
ed:c2:37:5b:0a:2b:b9:c8:95:ae:18:b1:5c:ff:1f:
1c:e2:e0:30:7f:ad:10:a4:82:b0:e0:d9:ce:11:d4:
a1:27:a5:df:df:f8:42:0a:72:af:25:27:45:57:5e:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:17:7F:99:87:05:C1:B4:A7:E1:7B:20:71:A8:EF:1C:CE:19:E5
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2b:e5:08:9b:aa:9d:9e:15:03:21:e4:fc:30:62:86:aa:b0:
9f:bc:2d:c3:7b:51:6d:07:d1:5e:c8:a1:80:da:87:13:5a:63:
ff:36:53:81:0d:33:28:e1:a9:bc:89:74:07:92:c0:ab:27:d2:
92:64:fc:0f:27:76:54:a6:81:01:b2:8c:de:27:10:51:e1:6b:
42:ad:78:f7:2c:f0:71:13:28:70:09:67:a4:44:03:86:90:77:
ec:3b:87:ce:fe:5d:7f:5b:52:13:66:1f:f9:6e:b1:80:1f:ab:
bd:4c:70:82:ac:76:2d:c3:bb:40:5b:6d:77:92:b4:04:7a:5a:
56:4b:41:47:e0:65:e5:22:84:58:e3:09:b7:64:17:05:e3:88:
0f:1b:eb:9d:eb:a0:70:cf:ef:05:99:e4:e7:18:23:fe:83:6e:
50:11:7c:c0:f2:c0:02:af:08:28:bb:f1:75:64:db:fc:b9:3a:
1d:51:63:5c:25:6e:fe:9e:15:e5:3e:e7:7c:0b:fe:a4:43:30:
37:c1:b3:23:aa:8f:84:f8:99:0a:64:54:e5:34:04:0f:c3:d3:
41:07:a6:80:13:5e:71:ec:56:6b:43:f0:af:52:a0:3f:2b:c7:
80:17:35:e0:d6:dc:e0:92:68:a6:c6:50:ea:f4:82:b8:b1:8e:
d6:12:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:52 2026 by rpki-client