Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: +auS5C5Jd+3pK4eE0u7x/3wY1rniML5Klm599/JYqqs=
Subject key identifier: 33:BB:1C:C0:CF:E2:AC:68:63:DC:C1:67:61:95:1D:C1:58:9A:B6:17
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019CAAFD9ACDEF53269D0E87E440F1504BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: nL6rZjSBt17vMQe+fQiSGLcDuNMc0hX7v7jyn++XpLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9a:cd:ef:53:26:9d:0e:87:e4:40:f1:50:4b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=33bb1cc0cfe2ac6863dcc16761951dc1589ab617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:d6:3c:c0:0c:36:db:58:fd:88:4b:c9:c1:
44:c4:6b:c9:23:8c:ff:20:7a:03:85:4b:dc:f2:f5:
48:ef:0f:c8:39:c5:08:df:33:0a:92:97:f5:f6:70:
74:ef:ec:40:0c:84:de:c6:fe:6b:3d:cb:7a:df:d0:
2f:5b:55:a5:22:d2:6d:8c:f4:94:c7:0d:ef:6c:07:
41:8c:d4:52:fc:ae:9f:b9:54:55:7d:93:f1:b4:fb:
ff:9a:7b:5e:c9:e9:ac:8d:35:95:aa:dc:66:af:c0:
79:ef:7d:6a:e4:5e:38:d6:25:eb:b6:f1:ee:93:a7:
1d:79:a5:40:34:53:21:fc:64:fb:d9:93:25:8e:d8:
31:1e:d3:55:1c:d4:e4:af:4e:5a:bc:ef:20:05:c9:
75:18:0a:c4:59:b2:56:d4:3e:d7:fd:6a:97:cc:ee:
36:ed:73:45:2c:7a:7d:41:e0:8e:d8:3e:75:d3:57:
a2:6d:11:9c:6b:6c:5f:84:44:f8:56:61:7f:c2:52:
ef:bf:7d:23:7d:57:e7:a8:bd:d7:c5:2a:0f:0b:43:
8b:ee:e9:b3:dd:93:f7:d4:59:ca:13:c7:69:53:b2:
ad:ec:de:b8:e4:9a:2e:63:ce:c7:4f:5a:a1:59:43:
38:30:5e:d8:c8:0f:db:d9:65:63:c6:a0:eb:0f:e1:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:1C:C0:CF:E2:AC:68:63:DC:C1:67:61:95:1D:C1:58:9A:B6:17
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:11:3d:30:63:1d:f3:1b:bb:3d:b3:c2:db:2c:0b:f1:4f:0f:
95:fe:01:95:93:26:53:5a:5d:c6:15:57:c5:e4:cd:a5:55:63:
22:44:70:f2:ad:e0:4c:de:08:24:ce:c0:6b:95:92:65:03:36:
ca:6e:a8:9f:16:69:2d:cb:b9:dd:5f:41:4e:55:69:a0:9d:01:
cb:1a:dc:a3:9a:1a:f5:57:a9:bc:37:fb:19:75:3c:95:67:e1:
14:61:d8:a1:98:3e:99:9c:77:8f:42:41:11:42:ef:1a:b7:13:
f1:1e:1f:9c:33:8f:00:da:40:99:39:62:2d:ca:bd:42:ad:28:
8a:77:83:26:a5:c4:05:57:d4:6b:ba:2f:31:71:a8:78:e3:92:
57:d6:f6:9d:0f:97:04:d2:29:c0:70:2c:d1:c4:58:dd:a0:5c:
5e:bc:60:7b:95:5b:66:9e:9b:69:49:14:f1:f5:e6:c4:31:a3:
f7:4c:f1:4b:c4:34:a1:e2:0d:d5:d5:1f:a2:e2:f0:f0:9c:47:
43:b9:77:e0:fe:13:ff:c7:c8:45:dd:a3:7f:0b:5d:70:fa:e3:
b2:2f:fa:7a:be:88:54:81:87:fa:1d:1d:4b:46:41:d3:b5:a0:
36:13:92:6b:53:03:21:e5:7e:01:40:a4:79:7b:f6:5e:61:13:
9e:0d:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:26 2026 by rpki-client