Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File: sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier: 2KKlo99DKTz7R5GBqZKbNceYFNy9kC79DSqQ22FrEcw=
Subject key identifier: 17:A7:A3:3D:2E:50:66:3B:85:30:91:4A:BA:7B:9B:B3:B3:87:5C:CC
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer: /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial: 019CAC4680644535F0ED3A2ADF7DE5A3D491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number: 028C
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: 0HI-hYUQzf4SnFU50ilapMC-N0M.roa (hash: OXBTJCBE8s4VmNGyaynb87VbRk7167Q44yiSXd1oMkw=)
2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: TT0MQqn9rfNBURORHDI4US/i+/pVb+HRVebYS9317uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:80:64:45:35:f0:ed:3a:2a:df:7d:e5:a3:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=17a7a33d2e50663b8530914aba7b9bb3b3875ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:ef:dd:30:ac:10:e8:4e:89:6c:8c:ed:10:
90:37:51:5d:59:9d:8d:bf:32:5b:be:bb:c7:c1:20:
9e:4c:d8:8b:81:06:36:c4:51:de:05:6a:c0:c5:18:
d4:90:7b:a0:dd:47:1a:ff:4e:15:b1:53:e0:35:7f:
e2:0f:14:6c:df:8c:b7:c8:28:83:e6:33:eb:5c:56:
c4:9f:56:3c:e9:43:0e:b6:f5:55:18:8a:d6:f9:b9:
0a:23:11:5e:d3:8a:87:54:6d:c8:1b:3a:f5:9c:fd:
ad:a6:6a:44:17:cd:9d:03:72:e8:cc:8e:9f:20:d9:
75:eb:b9:b0:fc:d9:9c:fc:0d:e0:19:7e:e4:80:09:
d1:26:3c:ad:c6:85:b4:57:19:87:eb:82:42:7b:9e:
ce:b1:0e:b2:b3:c6:4b:9c:a2:65:36:c2:54:95:6b:
74:b6:50:2a:c2:0d:49:e5:0b:8c:2b:d1:d5:da:5d:
24:3e:02:ef:02:e9:8a:c0:00:c3:a5:63:03:e7:52:
49:62:c2:0a:20:70:8a:83:6d:e3:49:32:a2:99:bb:
f4:81:8b:fe:94:99:35:5d:6e:55:1f:83:91:ab:47:
d5:bf:ef:7f:b0:fb:79:fd:3a:fc:36:66:26:49:c4:
d5:92:61:66:6f:75:fe:66:8e:3b:b6:57:5f:be:7f:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:A3:3D:2E:50:66:3B:85:30:91:4A:BA:7B:9B:B3:B3:87:5C:CC
X509v3 Authority Key Identifier:
keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:1e:98:99:f1:8c:66:97:e9:19:f2:62:b5:2a:b6:66:1c:
36:5f:ab:7e:d4:36:91:59:f5:ca:08:d7:44:9a:c4:cf:10:ca:
e1:cf:cf:2d:da:54:7d:6f:89:2b:38:db:22:6c:49:26:10:9f:
7a:e0:f3:75:5f:6e:e5:21:8d:e9:a7:e2:67:80:c7:df:81:d4:
6c:12:23:88:8b:7a:03:42:55:19:72:d0:d7:ff:db:a3:01:aa:
90:26:28:9c:79:7d:17:6f:09:53:a3:48:95:c3:a0:16:2d:e7:
7b:e0:14:8b:f7:1e:30:51:ee:57:7a:45:cd:3e:ef:8e:ff:bf:
c6:b7:9a:38:5e:a3:c7:6d:67:20:53:f4:1f:ac:78:0a:04:30:
22:a5:cd:97:65:6f:a6:f2:74:28:5d:04:6e:3a:0e:09:3a:2d:
ec:cd:ed:e5:cb:33:75:56:77:8a:33:db:83:a5:f4:d1:f9:2b:
64:51:3a:fe:c5:6e:72:14:be:14:ea:0a:f8:8c:27:b3:02:91:
37:90:04:e1:1f:11:6d:4c:e5:d7:09:23:7a:c3:d0:9f:7a:a5:
db:dc:27:f0:6a:27:38:2b:6a:6c:c5:58:9d:3e:85:84:c7:0e:
7f:b1:11:07:7b:2a:c0:8a:38:df:df:1b:17:b3:cb:63:02:ed:
b4:b0:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:37 2026 by rpki-client