Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: xW7mbTiR9P1w67esNjr0mIw+xuTpCr3ZV8SLh6zCV9I=
Subject key identifier: 76:19:F1:E3:E2:BC:00:A1:72:08:BC:A0:DE:0A:C5:88:4B:B9:E9:50
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019CAAC63DC9CE030A103CC7E51AD9770813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: HU2fZ0HcG2w8ifDiROIVEiZ5ICMXV8m11ZMVTHgfM4k=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3d:c9:ce:03:0a:10:3c:c7:e5:1a:d9:77:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=7619f1e3e2bc00a17208bca0de0ac5884bb9e950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:1c:b5:1b:e6:2d:36:fa:0d:1b:3b:af:8e:
2c:88:14:2f:5d:18:f2:a8:de:b3:06:fa:4a:03:69:
50:58:38:72:2c:37:5d:45:4b:42:9a:e7:b2:f1:1d:
77:75:1f:7f:df:84:cf:f9:70:cd:0c:30:69:bc:04:
8b:de:5f:60:03:22:62:d2:2f:12:4c:31:b5:40:13:
f6:31:18:85:18:04:83:d1:4c:75:1c:6b:c1:59:ef:
6b:ff:dd:d9:96:74:ee:2d:ce:fc:b4:85:c2:86:3c:
6c:bd:9d:f6:9f:c5:e1:86:47:18:54:45:da:b3:46:
68:00:c5:dd:d2:12:bd:64:88:e8:0b:df:fc:c6:16:
44:58:41:8d:c4:08:b1:e7:c8:13:d4:b8:90:e1:52:
41:b0:71:ea:2c:b0:f6:6b:dd:cb:1c:61:28:a8:b2:
13:01:e3:62:4a:09:fb:5c:a1:ba:67:d5:36:0e:0d:
cb:7f:a2:8a:51:b7:fa:97:2b:b9:78:37:02:dc:e4:
b5:4e:99:1d:6a:79:97:57:21:60:c2:8a:8c:29:c8:
d8:f7:60:8d:f7:bf:1e:63:c4:2d:a4:b2:95:df:02:
1d:17:db:b9:74:f4:ba:da:8b:1a:9a:23:ca:01:03:
5e:ff:10:96:fa:0d:18:42:0b:11:e7:eb:94:51:53:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:19:F1:E3:E2:BC:00:A1:72:08:BC:A0:DE:0A:C5:88:4B:B9:E9:50
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:f9:86:a9:79:50:2c:1b:58:eb:8c:d7:44:62:89:7b:aa:
36:f3:19:94:9a:7a:49:0c:15:52:fa:3d:17:88:c0:9b:5e:48:
81:8a:46:08:b2:0b:41:f2:48:6b:6c:64:4a:3c:93:6a:b4:37:
82:b6:6c:84:6f:9d:5f:cc:68:e9:ca:a9:3b:74:a6:5d:73:55:
a1:83:1a:7b:5b:eb:a3:0e:89:1d:75:b5:df:a0:3c:2f:f2:b9:
ad:ca:b1:79:f4:95:b9:ed:89:5a:5c:65:10:0f:64:79:cc:07:
97:d7:22:66:4f:2a:e1:5e:2c:42:88:e2:71:46:12:35:87:c5:
21:39:6f:da:af:46:bd:7e:d8:69:da:a4:66:a9:d3:33:b2:68:
98:b7:a7:73:f6:e2:54:54:65:64:79:ea:8d:69:53:43:26:11:
b1:77:dd:64:3b:77:a0:ed:74:5f:1a:3a:80:1a:00:be:0d:0f:
ad:52:05:e8:5f:44:af:f5:40:15:c3:1b:3f:c3:9a:3f:4b:9b:
9e:7d:8f:c7:bd:f9:b4:b5:cc:b4:43:f4:56:b4:8d:42:54:9c:
2a:96:8f:09:c4:59:a5:e6:e4:2b:dc:2c:e8:85:95:95:94:a3:
1f:37:b4:ff:7f:42:27:c7:28:29:ed:d7:bf:a1:20:76:97:30:
ee:d1:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:36 2026 by rpki-client