Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: UqyAuQbtQDqtjuNHulpiO/Nf7fpwZR62NUZ6JPF3/+Y=
Subject key identifier: 34:F6:6C:3D:DD:F3:4D:AA:7D:3D:DC:B1:DB:13:E7:FE:58:99:5F:59
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019CAB6B290FC99E34DB4985131B16BB7228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0444
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: 3P3-QRL_mRQBI4J541PgUW3JkC8.roa (hash: UXe72QHNvakdgW1FdgY1L4eDueqV3Q9/yGntSIAIixI=)
2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: Hwjo2RSGDOp2Ts3rqS5x7JihsFULUO3qalww3d1Eta8=)
3: itvEUHoAaJl17faWlj6NT_FxL94.roa (hash: AjucNzluWbTiJYxrYlGErePUiK0Itei7jfiA2tx5Tk0=)
4: krg0r2wU_k1UtI2XJIebIOIlBlo.roa (hash: egntaPC7sNCVC4f8EmkepYo0ee+r9xw1kBBN3SZR0DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:29:0f:c9:9e:34:db:49:85:13:1b:16:bb:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=34f66c3dddf34daa7d3ddcb1db13e7fe58995f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:14:e8:0c:f2:31:89:71:2e:db:0a:8d:d0:
9f:c2:3b:d3:5a:e1:16:62:dc:97:ba:5c:39:e3:07:
7c:aa:c1:b3:18:bf:24:7e:c8:2f:01:a7:b2:9b:fa:
8e:c0:7c:4a:6e:a1:04:78:fe:34:3e:3c:80:ae:af:
f1:24:57:0e:4b:6e:9f:d0:10:23:e3:6b:2b:f3:79:
b3:b8:2a:85:1e:9c:3b:67:7f:f3:98:b5:7b:40:8e:
8d:c5:57:08:72:06:5c:b1:43:9c:89:b2:c4:2c:e7:
5b:39:9f:6b:92:81:b0:46:bc:6e:99:58:f3:63:70:
cd:ef:0e:55:13:84:7c:01:f5:24:56:7f:32:ca:32:
a9:af:15:4d:b9:18:05:1a:ca:8c:aa:f1:3c:ca:4f:
87:8e:49:01:3d:0e:f3:28:2d:9b:a4:48:a9:f6:f6:
65:c5:ff:81:c7:50:4e:21:31:06:59:cf:fb:df:09:
13:8d:86:25:7a:bd:8c:a0:17:6a:02:77:97:12:4f:
18:3c:42:11:29:55:4b:7c:75:2c:c7:15:49:b4:09:
ac:29:21:6c:85:46:96:6b:ef:b1:59:ef:38:02:e6:
41:1b:ed:15:51:4f:94:b6:2f:9e:26:2f:b3:8e:5d:
ab:2c:4a:98:f5:90:fe:3d:96:71:c9:0f:1e:da:0c:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:6C:3D:DD:F3:4D:AA:7D:3D:DC:B1:DB:13:E7:FE:58:99:5F:59
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9a:5e:5f:f4:36:84:1e:0e:7b:77:ea:2c:8e:14:e0:98:79:
e3:fb:84:53:54:d6:e0:5d:61:e2:bb:33:7d:ee:77:b6:01:df:
dd:76:56:bf:a8:97:06:4f:48:54:6e:cd:cb:5c:e3:81:95:1e:
24:dc:1c:5e:04:18:f5:70:59:53:02:02:89:f6:e9:56:5c:8e:
c7:88:4f:82:46:85:bb:bf:9f:04:16:85:6c:26:74:3b:a7:4f:
1f:b8:bf:a1:10:d3:51:e3:65:00:46:a1:ea:10:6e:db:d7:c1:
90:be:03:e7:d9:e7:3d:63:20:93:eb:b0:11:d6:e9:9b:06:59:
86:94:73:69:cc:20:80:06:bf:95:12:04:79:3d:11:81:0b:d7:
ee:e4:27:01:ee:db:07:02:ed:3f:55:8f:c0:11:e8:c4:77:a6:
57:74:d9:d0:6a:5a:f0:d8:2a:96:b9:f2:22:4f:c7:46:61:be:
2b:17:87:62:a6:83:44:f4:a3:77:c8:3b:a4:e8:dd:88:20:b5:
67:1b:ab:af:bd:85:30:1a:3a:68:ef:e9:45:27:4d:4e:24:8d:
45:c9:e3:e5:22:9c:be:d6:3f:c9:51:1f:72:97:e7:49:12:d7:
4d:c4:86:6f:a2:b3:6e:0d:8f:0a:29:10:71:cf:0f:8b:18:90:
d2:98:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:30 2026 by rpki-client