Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: nndvIUUF1cZdfPe3Wf4OMWgQTqk4YyTf+CG+mMcroTg=
Subject key identifier: F8:BC:3F:92:AC:09:83:89:E5:02:E6:C2:4C:C9:18:71:4B:30:E4:5F
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019CA97CE3C6A94C11FA8B0FAAEDF52753D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 0135
Signing time: Sun 01 Mar 2026 13:01:00 +0000
Manifest this update: Sun 01 Mar 2026 13:01:00 +0000
Manifest next update: Mon 02 Mar 2026 13:01:00 +0000
Files and hashes: 1: 9mXLft8tWj3ND21SZ2EnzTtS7VU.roa (hash: aPk5QCp+d6NH9kl7Q2Ikryx7fdjc3+hRQdArIsf7we0=)
2: UTM1CR1pMYaFXHZzCtiduNbVB5s.roa (hash: v1x9VJ2yRV2qLCy6+vcnGUOTPUPi2aAkt7M842PxmE8=)
3: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: GeKRsFT1LPGSiakLZfp5H2+Po+QQZ/TqejKjUg1yT4U=)
4: q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa (hash: T61Ks0RxaruCy37gdj+R+3mq9ALV4w5YaetmHDahPKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e3:c6:a9:4c:11:fa:8b:0f:aa:ed:f5:27:53:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Mar 1 13:01:00 2026 GMT
Not After : Mar 2 13:01:00 2026 GMT
Subject: CN=f8bc3f92ac098389e502e6c24cc918714b30e45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:80:a5:5e:5c:7d:ff:71:f3:1c:3a:2e:11:
0f:35:8a:83:26:34:f8:d0:02:99:ae:7f:85:8a:d8:
ec:32:59:a8:58:6d:1f:e4:a5:4f:24:1b:f4:1a:a0:
db:b4:35:ef:ea:70:4b:56:1d:26:89:57:54:b5:88:
8e:9b:18:dd:8e:ed:e3:a4:d5:d7:31:03:97:1e:3c:
c6:0f:c2:32:4d:c0:09:29:a6:05:38:54:28:3c:93:
47:75:d5:79:ba:14:e7:7f:a4:17:e5:cb:cb:01:05:
d3:12:c5:a6:65:ef:39:2f:81:4e:f5:48:ac:64:fc:
0e:d7:7f:91:9e:8b:e0:a7:f0:ce:34:d2:18:d7:20:
93:b2:5f:81:22:84:9b:9d:ba:66:15:b5:88:ea:b0:
ef:18:c1:21:0d:47:ce:21:45:ff:e9:46:bd:b2:1a:
d6:68:cf:31:7e:e2:eb:0c:d3:cf:0c:30:93:5f:37:
91:82:f5:c7:3c:0f:4d:60:a1:c8:5e:ba:20:51:9b:
2a:8e:98:f5:aa:eb:a1:21:68:fa:16:43:14:82:6d:
23:ff:06:68:d6:05:c5:bd:4a:13:5b:90:f0:a2:14:
f9:7d:cf:1c:99:97:b0:ff:b2:c3:a1:d6:0d:62:b1:
11:d4:95:4d:e7:5a:8c:b0:65:51:00:fe:b8:72:7f:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:3F:92:AC:09:83:89:E5:02:E6:C2:4C:C9:18:71:4B:30:E4:5F
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:77:e6:17:10:26:92:7d:99:d7:95:c3:61:73:eb:d1:a3:d2:
5a:9f:80:dc:7d:92:c9:f7:88:64:57:da:55:7a:4c:f2:92:a4:
b3:b6:bf:0e:a5:6e:37:4e:68:19:ca:2c:2d:a4:d8:db:83:d7:
0f:43:95:a1:44:ef:9b:ad:fb:8b:a5:3c:92:59:1b:d0:f8:1c:
22:45:bd:09:43:10:60:fb:e6:0a:ca:0b:a8:bf:5b:c5:ca:d9:
f4:5c:b3:5d:59:f4:34:7a:d5:1c:e8:91:12:21:09:16:db:5c:
c5:96:fd:47:34:c3:0e:b2:25:a7:f5:f1:ac:3d:db:fa:8d:15:
b2:15:9e:8d:d0:2c:14:17:19:66:fb:14:d8:ec:7b:bc:4d:23:
5b:89:d8:3c:fa:8c:10:95:c8:6b:e7:db:2f:31:05:f7:7b:89:
2a:4c:6a:e3:63:cf:66:b1:15:4c:82:34:d7:86:82:c6:dd:0b:
77:41:8d:45:6e:fb:4c:3e:75:5b:8b:cc:e3:ba:95:96:2e:0d:
f1:33:a8:00:f9:e8:aa:eb:fd:91:94:09:b8:cc:a8:37:d4:f3:
b6:2f:a0:29:72:4c:2b:19:d1:2c:ce:77:df:45:bd:da:60:15:
3e:fc:71:f3:2c:e7:14:0a:02:b5:28:4c:1e:cb:21:36:d6:ed:
6c:c5:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:51 2026 by rpki-client