Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
File: an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json)
Hash identifier: r9AxJClSgOK0vVC741xG8NVFiEAzhCTuTzRoyK2+vEA=
Subject key identifier: 7D:A7:37:F9:5D:47:34:1A:2E:65:C9:7B:5E:74:4E:62:1E:F9:48:D6
Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
Certificate issuer: /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Certificate serial: 019CAC0FD797A765B883B4BF4243EF74A275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
Manifest number: 0AD5
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: D2D4dfHJQbeyjPAVjsXm5tneAryOn/K1W9Hrrlp07rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:97:a7:65:b8:83:b4:bf:42:43:ef:74:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=7da737f95d47341a2e65c97b5e744e621ef948d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:bf:d2:bf:a4:34:70:4f:e1:33:9d:1f:d8:
05:43:57:f0:57:11:1b:01:7b:6c:e3:08:a5:24:4b:
64:35:54:bb:95:44:08:6a:b3:4f:0d:a6:31:7a:51:
f8:38:ea:6c:99:36:1f:59:9b:a8:65:ef:04:ce:9d:
d4:53:23:b0:c5:cf:36:11:6f:f0:7e:c6:11:41:0a:
74:a4:79:1b:e7:4e:cf:a0:99:79:36:4d:97:f0:63:
ba:ba:b3:4a:f3:69:09:c0:f3:59:66:58:cd:68:35:
96:b9:a5:5f:5c:1f:2a:0d:74:82:43:6f:e7:09:98:
e9:8e:73:79:31:4a:c0:9f:16:7c:60:dd:7a:1e:0f:
c5:58:0b:f9:59:e8:21:e8:31:7b:93:5f:0c:6f:a0:
66:9b:9d:26:48:98:14:45:16:b6:c8:54:6c:f1:4e:
ae:34:e8:3c:91:34:0c:f6:72:25:23:5c:12:69:65:
5b:ab:9c:83:b4:48:f1:e9:16:bb:39:ad:43:ff:ed:
87:2b:80:9e:b9:b3:8c:a8:b5:14:25:57:8f:ca:81:
dc:ad:f4:2d:ff:cb:36:e3:60:85:de:e8:e4:7c:94:
cd:47:0a:7f:85:66:95:39:f6:1e:21:7d:c9:8c:cf:
32:66:01:91:66:62:4e:7d:7c:d7:81:a9:fa:45:35:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:37:F9:5D:47:34:1A:2E:65:C9:7B:5E:74:4E:62:1E:F9:48:D6
X509v3 Authority Key Identifier:
keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3c:92:9f:01:a0:e8:05:2a:56:e8:62:56:66:db:63:d5:e3:
36:df:69:f3:8b:81:d1:6a:e0:f8:96:ce:a0:23:0e:94:9a:dc:
47:cb:ae:6a:82:e0:11:5d:23:de:bf:4a:a1:e1:e8:08:94:07:
dd:c8:e0:70:e3:49:9e:86:b6:1d:c3:38:c3:28:1c:14:11:a4:
a7:72:48:6e:e0:3a:81:5a:07:fe:c0:f2:29:d2:ee:59:67:d0:
05:64:bb:02:e6:65:da:be:2e:e1:27:d4:4c:ca:23:29:ff:23:
f8:dd:00:71:a6:eb:06:28:6d:a5:73:38:34:14:8e:43:24:e6:
8c:fa:a4:20:3a:ce:28:31:05:91:90:7a:7a:bb:82:ab:ee:5e:
76:af:b9:fe:78:fc:d4:24:50:ea:6c:49:f4:24:8f:9f:fc:34:
49:eb:18:17:4d:14:c4:fe:5e:ac:e5:93:2b:c0:f3:8c:09:67:
7f:9b:43:51:89:c4:60:66:df:c0:00:2d:18:ab:78:5e:80:84:
69:5c:47:e3:b8:33:b9:de:6a:94:69:30:8c:35:00:ef:2d:81:
cc:23:a3:15:09:be:05:c4:a6:71:36:c8:b1:81:bf:92:63:d3:
ce:34:fb:05:db:a1:2a:67:9f:a5:75:c9:04:71:45:f4:00:e9:
6a:17:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:57 2026 by rpki-client