Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: hEwXdxSICIkXy4o+moBtKSgBxYsY6Da4Hd33hWHpvIY=
Subject key identifier: 3C:0B:1F:6E:14:0D:40:4A:89:C3:8C:C8:A5:52:37:5A:C5:FA:1A:2A
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019CA945C881F6B274E5CFEC85730D862846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0522
Signing time: Sun 01 Mar 2026 12:00:48 +0000
Manifest this update: Sun 01 Mar 2026 12:00:48 +0000
Manifest next update: Mon 02 Mar 2026 12:00:48 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: Ja1McBdq7Vn4lhEJ3qAOIyUE7tbFG53Qdv5M6Q5ksWM=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:c8:81:f6:b2:74:e5:cf:ec:85:73:0d:86:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Mar 1 12:00:48 2026 GMT
Not After : Mar 2 12:00:48 2026 GMT
Subject: CN=3c0b1f6e140d404a89c38cc8a552375ac5fa1a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:91:ae:c3:3a:9d:65:63:25:b6:ac:ed:b3:
6c:5e:54:28:e2:6a:6b:df:5b:48:2d:52:06:d0:7f:
15:3c:9d:a3:62:11:05:52:6d:01:61:e5:db:fa:18:
c5:f1:67:4c:da:0c:11:fc:ce:01:a9:18:76:c8:b9:
83:28:73:69:dd:34:e9:e1:6b:ef:28:52:fd:d4:2b:
6d:ec:08:ef:cf:d5:e7:ef:2d:68:bb:db:e2:ae:f6:
6a:3d:04:11:10:2d:fd:1b:b7:c8:f9:da:7f:80:e2:
ef:f1:ce:32:a8:05:23:a3:86:a8:da:fc:da:d0:bc:
5a:a6:80:b8:70:d9:42:2b:a5:cd:06:d9:33:92:4c:
a7:12:f9:6c:6d:d6:2e:7e:4b:c8:da:61:1c:3d:ca:
fe:73:94:e9:2e:b9:0b:13:9e:cd:54:b6:3a:62:37:
b2:0b:08:e0:be:01:90:64:d8:0d:a5:e1:79:08:5d:
56:a7:95:bf:08:43:aa:8f:28:b4:fc:50:ad:cf:04:
69:42:90:2b:bb:c5:bf:ff:e2:1c:a1:53:6b:65:8f:
86:06:62:4f:55:17:2b:f4:09:43:0a:2d:a8:82:21:
48:5d:72:c6:c0:ef:3d:cc:9b:86:44:73:cc:18:04:
39:b9:18:fc:fc:b6:11:13:4d:5a:cb:f9:d3:e9:e5:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:1F:6E:14:0D:40:4A:89:C3:8C:C8:A5:52:37:5A:C5:FA:1A:2A
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f5:d0:36:8d:e3:87:23:b8:e9:72:ff:82:52:40:14:ef:9f:
58:e9:29:65:b4:06:56:59:fb:cd:ec:49:5f:91:20:4f:98:40:
d7:f7:1e:fb:0e:01:52:96:f5:1a:a8:6b:56:77:dc:1d:4c:a0:
d4:e6:a2:59:56:45:64:78:c4:93:3d:0f:c0:d7:db:c4:b8:ab:
41:50:5a:83:b3:0b:6d:70:2f:62:da:05:50:f8:16:b7:10:71:
43:54:de:97:46:46:22:49:38:6d:42:48:ee:62:9d:b2:60:38:
05:6b:c9:6c:c9:92:6e:1c:4b:9f:3b:29:44:7d:86:5d:8b:d0:
fb:cf:ea:ea:53:69:85:30:29:11:9d:8b:2b:4d:5d:aa:dd:64:
fe:5e:e5:70:8a:38:c6:92:7c:e0:e0:eb:ed:2d:56:ab:4e:56:
bd:42:c2:35:e5:de:a2:18:06:38:3a:cf:94:79:87:13:c2:31:
eb:a2:2a:cc:a6:29:56:05:44:61:f2:81:cf:b8:0f:ef:da:7a:
a0:7a:2e:7d:2e:9d:fa:41:28:47:b9:1d:4e:b0:e1:7b:ee:ce:
5f:53:f0:a7:2c:d2:e8:69:c6:54:e5:8f:d5:d6:45:12:1a:84:
9b:cd:0f:87:ba:dc:be:26:01:2c:37:f7:65:f5:4e:63:04:49:
5e:6c:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:55 2026 by rpki-client