Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: N7lbUwLzrloinG5Nlo9Op80C7OwqDV+jmdEW4UcB4u0=
Subject key identifier: 09:55:3B:9D:F4:60:83:E7:AD:D2:19:96:00:89:AE:48:1E:C7:9A:EC
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019CAD59C37589EF63E9C2082EB85324739D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0EE4
Signing time: Mon 02 Mar 2026 07:01:06 +0000
Manifest this update: Mon 02 Mar 2026 07:01:06 +0000
Manifest next update: Tue 03 Mar 2026 07:01:06 +0000
Files and hashes: 1: _zlIXE7-h25_ow4E9RjKnNQhPj8.roa (hash: hpvg+CFOE1drWZR6fUE97UGt95Uv377gPrIZqvoM3kw=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: bbCVtkPHoL6QTGXjtV7GG7GbtII1E73nF5zqOyV+LG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c3:75:89:ef:63:e9:c2:08:2e:b8:53:24:73:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Mar 2 07:01:06 2026 GMT
Not After : Mar 3 07:01:06 2026 GMT
Subject: CN=09553b9df46083e7add219960089ae481ec79aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:e0:cd:a9:34:03:52:5c:98:51:2a:64:59:
02:6b:8c:55:84:bc:9d:ed:23:aa:62:2d:c1:23:e0:
b2:40:a6:9f:a2:69:9b:88:6f:10:b2:56:25:82:c7:
ed:1c:82:fd:6f:3a:18:d9:d8:8e:97:b6:c6:9f:66:
7a:06:14:ef:23:8f:15:e7:1f:14:eb:68:42:f1:f4:
6e:28:69:e2:f8:68:9f:5e:7a:87:c6:a8:c0:16:81:
6e:f8:2c:5e:3b:08:e8:38:f0:f3:44:09:96:2d:85:
cf:53:ae:6d:a0:0a:78:3d:9f:a7:55:36:eb:37:62:
6e:71:79:fb:1b:cc:29:5f:0c:27:62:26:97:5d:ca:
02:04:57:d4:4a:6a:35:13:24:b3:a2:fc:73:64:70:
af:38:b6:b9:1c:98:37:9e:a2:d3:e5:e5:3c:70:52:
bf:a1:45:1e:66:16:b3:f7:c1:38:d3:cb:c6:4e:cf:
e4:ab:fb:dc:27:da:69:93:d9:c4:c9:e1:55:81:8d:
74:1f:03:ce:fe:07:8d:e1:39:48:d5:86:86:f4:f1:
6c:44:d4:46:83:77:9f:03:f0:89:97:f0:6a:c3:76:
4e:a1:29:20:27:2d:7e:88:ce:af:66:4f:d5:42:53:
d4:e9:56:74:32:e4:58:2a:d8:f7:3f:2f:cf:32:9d:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:3B:9D:F4:60:83:E7:AD:D2:19:96:00:89:AE:48:1E:C7:9A:EC
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:21:2f:cc:5e:4a:50:98:0a:c4:30:3a:fd:c5:f9:77:80:76:
eb:18:aa:a5:18:3f:7b:b2:e0:a8:13:e0:68:40:87:ee:85:ed:
2c:dc:91:5d:09:f7:82:2a:23:48:d1:9a:df:f7:a4:34:73:8d:
ef:b9:7b:bb:bd:c7:c6:5c:22:02:d0:32:3b:21:f5:20:48:75:
e7:8b:07:3b:78:01:35:f4:fe:16:4b:11:5e:f9:d7:ff:a5:93:
7a:42:e7:8b:56:2e:70:22:36:52:7e:07:8c:03:5c:53:c0:1a:
d8:ed:2f:08:71:90:d9:0d:c8:6f:63:13:5c:af:9d:48:63:32:
1a:71:70:1a:7c:a3:5d:3e:b2:b7:b2:6f:76:31:a8:af:f4:eb:
f3:24:c8:01:fd:5d:c8:dd:90:e4:0f:24:79:d0:d5:d8:5d:84:
25:36:ec:50:f1:57:d2:7a:9b:d9:de:2f:f0:b3:da:d0:a8:1c:
f6:01:d6:b5:b8:eb:07:9f:2f:ce:c9:ff:8f:db:eb:6d:b4:3e:
77:bd:9e:b0:3b:0f:cf:63:da:f1:15:10:d6:9b:17:26:96:98:
19:3e:4b:cd:16:0d:52:fd:08:fe:54:16:bf:e5:6c:35:d9:6e:
68:ee:4b:39:e2:de:55:ad:4f:d9:25:de:3d:11:ec:82:3f:be:
bb:d6:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:14 2026 by rpki-client