Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: ea4HtBEbeN8rKYf3tnWOSoItUq/opa5/OjzNtfHeNqU=
Subject key identifier: 54:7D:C6:C0:DB:1C:A9:F8:82:1C:6C:4A:47:04:58:A8:51:AA:A8:6F
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019CAAC60DA5B17201C79F35B278F4FD5F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (hash: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY=)
2: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (hash: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: 5SfeIBVbfhUWaPqsvN1FQBA60iyNf1JIBOBe5D+rGUA=)
4: hPluaz2ce72z5Cezy2XMePaJEmA.roa (hash: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0d:a5:b1:72:01:c7:9f:35:b2:78:f4:fd:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=547dc6c0db1ca9f8821c6c4a470458a851aaa86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:bb:58:53:21:fa:69:c0:38:1a:73:e2:37:
8b:17:b5:9b:c9:87:d9:82:e1:b8:4c:61:6e:3e:bb:
d7:25:60:cc:5f:78:96:9f:de:80:e0:51:22:f3:9b:
ce:ef:93:08:85:b9:a2:3c:45:db:1d:b2:1f:a4:f9:
07:cd:bf:e1:cd:d5:2f:80:80:95:c6:04:da:62:58:
49:85:eb:fd:4f:d4:f3:1b:54:88:f4:da:a0:fa:5e:
b5:1a:72:20:d4:ef:79:15:4e:61:bb:47:95:8d:2e:
f4:46:24:d9:04:86:10:4d:4a:8a:bb:36:54:43:9d:
48:04:b7:97:ca:23:d9:b4:90:0d:fb:15:a3:2a:d4:
26:3f:3e:d7:dc:a5:5a:a5:e6:c9:e5:e0:59:0d:03:
80:3f:04:66:03:26:ee:94:59:2b:4f:4d:cb:20:c5:
02:15:7e:11:bb:cd:d5:02:11:22:66:d7:fd:55:59:
ad:36:c4:e3:8d:4b:f8:b6:55:2e:57:f2:0c:1e:2b:
d2:e9:86:a0:12:bd:bb:c1:7e:95:1b:54:7c:52:08:
a6:09:d2:2d:16:10:08:5d:97:86:f8:06:ae:70:29:
5c:68:68:ac:fb:39:cf:e4:4f:cb:48:27:bd:81:9a:
9e:45:c6:55:40:ad:60:d9:fa:85:24:9b:55:6b:84:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:C6:C0:DB:1C:A9:F8:82:1C:6C:4A:47:04:58:A8:51:AA:A8:6F
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6a:a3:b4:5e:28:ed:35:8c:f6:22:7c:9c:92:25:02:74:65:
78:f5:a3:ad:f1:33:22:39:8b:0b:e2:ce:89:50:0e:bf:fd:70:
58:aa:46:36:9f:8b:47:df:ba:18:09:af:58:78:7a:c7:49:71:
ad:b5:99:52:04:83:57:1c:11:5a:75:97:eb:4d:3a:2c:7b:a1:
ff:b7:74:32:93:e6:84:18:6a:5d:00:f6:f4:44:f3:ef:7d:9d:
cc:ee:21:db:10:05:03:91:0c:7e:32:5b:c5:bc:81:a5:99:c5:
eb:1c:e6:d2:54:bf:7c:d3:4b:92:e4:01:34:23:be:21:a7:9e:
4d:c1:76:c5:42:82:83:e1:53:c4:02:d6:d6:76:ad:3a:b7:0d:
59:4d:7e:0d:6f:17:4e:af:b2:f5:aa:a6:8b:93:ea:69:3a:39:
1f:43:f1:19:37:d3:83:85:1d:98:cb:a9:d5:f8:47:c0:3e:ea:
f1:13:f7:51:7f:59:0a:ea:70:ea:53:ab:4c:cb:4a:4d:12:ea:
da:ff:80:e3:79:e7:7f:36:a6:2b:9d:6f:ce:b1:0f:38:d2:bf:
ba:68:f2:00:0d:71:90:0f:ff:a5:65:34:f3:97:31:cb:30:e2:
f6:7f:a3:aa:4e:31:83:70:bb:c1:e8:21:b0:e0:c2:ed:0e:c2:
0d:09:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:28 2026 by rpki-client