Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: szWe6EBNYZQZv/y3k9SVK2o0GZI+fKr8Q5pC3M9e5JY=
Subject key identifier: 92:34:4E:C1:F5:31:7C:47:B1:3D:1B:BD:04:34:B4:A1:90:6C:A5:8D
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019CAD59828F79AE3BFD72F66115EB22D60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0445
Signing time: Mon 02 Mar 2026 07:00:50 +0000
Manifest this update: Mon 02 Mar 2026 07:00:50 +0000
Manifest next update: Tue 03 Mar 2026 07:00:50 +0000
Files and hashes: 1: 3P3-QRL_mRQBI4J541PgUW3JkC8.roa (hash: UXe72QHNvakdgW1FdgY1L4eDueqV3Q9/yGntSIAIixI=)
2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: NM36at/+dAo+RI4eeF/SPdLh9nwTHWCaDctEDFijut4=)
3: itvEUHoAaJl17faWlj6NT_FxL94.roa (hash: AjucNzluWbTiJYxrYlGErePUiK0Itei7jfiA2tx5Tk0=)
4: krg0r2wU_k1UtI2XJIebIOIlBlo.roa (hash: egntaPC7sNCVC4f8EmkepYo0ee+r9xw1kBBN3SZR0DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:82:8f:79:ae:3b:fd:72:f6:61:15:eb:22:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Mar 2 07:00:50 2026 GMT
Not After : Mar 3 07:00:50 2026 GMT
Subject: CN=92344ec1f5317c47b13d1bbd0434b4a1906ca58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:cc:bf:18:40:c1:b6:05:50:6e:c5:7c:ff:
02:30:fb:41:c4:6e:ed:d0:ce:2e:fb:b4:90:6e:e8:
9c:ae:9e:7b:b6:77:e7:d2:7c:d9:59:f4:03:89:d5:
a5:d3:c5:f7:06:c0:4a:0b:8c:e7:a1:ec:49:a2:83:
27:3b:cd:24:15:95:13:ac:f6:83:44:d5:5d:f4:e4:
38:6e:b5:b1:12:4c:13:2c:97:b0:40:2a:ad:5d:4c:
d2:0b:b6:da:f7:b6:dd:c5:e3:83:a3:7b:c4:7d:e7:
e1:f1:76:06:33:cf:48:cf:4c:2b:02:c6:5d:25:16:
4c:b8:d5:55:77:49:11:25:6a:9f:ed:d3:28:7d:90:
c2:98:2a:83:48:ee:33:23:90:24:9c:19:63:ff:33:
b7:fb:d1:15:bb:22:fe:7f:d9:76:48:c9:30:e8:ce:
f6:04:6d:ec:da:99:e8:73:e3:c0:1a:c1:b6:e6:36:
ce:46:37:ae:26:cd:d9:0c:a9:02:8b:5b:36:01:95:
b4:ff:52:20:0a:66:4c:11:6f:d6:49:b2:34:8b:5b:
2d:7b:9a:6a:fa:7b:e9:92:d5:df:70:8f:d5:5d:12:
a9:7b:06:82:d1:9d:35:c3:5e:3e:22:ad:86:fa:7f:
62:8c:d5:4b:c3:0c:73:a8:14:7a:f2:0d:94:f9:4d:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:4E:C1:F5:31:7C:47:B1:3D:1B:BD:04:34:B4:A1:90:6C:A5:8D
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:29:44:ed:ae:92:51:35:a7:a2:4a:2b:f9:72:93:55:ad:c2:
7b:d5:98:01:1e:97:84:53:30:c0:48:64:f6:a8:f7:6e:8f:c6:
65:4a:34:19:34:90:63:3d:89:d7:12:2f:7e:26:a0:d4:02:60:
ee:68:45:15:18:03:95:37:42:6f:16:07:f4:64:bf:f8:e5:7b:
8a:9f:8a:c4:d4:64:42:88:fd:23:26:e5:3a:17:18:79:99:88:
0a:1e:62:2d:b4:56:a6:b8:d3:ea:a6:fb:c6:77:5f:22:6e:e4:
44:42:88:f1:da:ed:98:3b:75:e6:37:64:0d:62:8d:25:69:7e:
79:f3:7a:c8:72:2a:96:15:31:ea:66:a4:74:4d:f0:20:e0:27:
50:6c:46:c3:0e:1e:41:01:18:9c:b9:45:50:34:79:06:dd:39:
59:8c:3e:94:bc:61:d9:6e:f0:d2:36:07:da:5f:5e:bf:aa:38:
7c:98:cd:d9:ac:97:2d:d6:f8:b9:94:ac:ea:70:93:d7:65:28:
0e:fa:44:bd:bd:3e:f0:76:f7:10:0d:fc:62:02:e2:02:48:c1:
cb:d3:48:f0:50:e8:bb:4b:62:7f:b5:0e:cd:41:d6:0d:c3:cd:
00:00:f0:c2:1d:a6:30:95:37:7d:62:68:b7:b3:9e:88:52:c5:
78:93:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:17 2026 by rpki-client