Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: 60YJHLk6T+f41RtXmAqrGfBqGfMrv3z6GS1tjMmUZo8=
Subject key identifier: 43:C8:6D:76:5A:25:85:6F:2F:DC:90:54:3D:3C:F5:35:8C:60:05:F7
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019CAF10EA9247FDDF88F08A0ED98E9FCC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 09A6
Signing time: Mon 02 Mar 2026 15:00:47 +0000
Manifest this update: Mon 02 Mar 2026 15:00:47 +0000
Manifest next update: Tue 03 Mar 2026 15:00:47 +0000
Files and hashes: 1: lZWH-2ISRkDqDMQnCqDWW-98xnk.roa (hash: JDtc5t6fobEneseGSEO/aqOB7d3WkNL4mqQCpDAemQg=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: IqC1kqZAwEiQGqG9BA+J8q6oIIuR9zQoClj6TBzxKnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:ea:92:47:fd:df:88:f0:8a:0e:d9:8e:9f:cc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Mar 2 15:00:47 2026 GMT
Not After : Mar 3 15:00:47 2026 GMT
Subject: CN=43c86d765a25856f2fdc90543d3cf5358c6005f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:76:f9:41:d0:46:66:6e:62:05:01:30:69:
6e:4a:45:44:18:45:32:cd:31:ad:60:aa:98:71:d5:
91:7b:fd:86:46:84:3d:ad:77:2f:1e:ef:04:ce:cf:
cc:30:e4:e2:9f:36:f0:74:51:6c:9c:1c:07:31:a0:
ca:3f:5f:4e:9c:52:1a:52:f1:ff:52:57:74:be:f7:
0e:f1:23:2c:3b:bb:b1:93:3f:f6:ab:90:18:31:c7:
3f:4b:36:51:07:99:5d:ad:a6:63:42:49:82:65:60:
92:58:ed:0f:8e:2a:e4:49:b9:b1:e0:ad:51:88:ad:
e6:21:e4:82:6c:df:e3:8c:d5:94:41:96:ce:61:0a:
8c:75:81:88:9f:14:8e:f4:f3:7a:ff:46:92:f1:b4:
7f:30:20:d5:55:b7:b1:25:6f:7e:8d:69:a5:80:d5:
66:c1:86:2f:82:a4:f6:95:df:9f:54:1b:17:39:2c:
64:5e:c3:49:95:fb:82:7b:4e:0d:6b:b9:62:f4:e0:
aa:72:c1:bd:4d:ae:c5:b0:4c:9f:7a:0e:12:22:17:
64:53:08:2a:7e:da:55:17:69:1f:00:b3:24:3b:7c:
96:60:6f:4f:31:e9:44:09:0d:a8:9a:2e:71:a5:63:
56:18:38:6b:46:23:23:97:b1:0b:93:6c:bf:cf:db:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:6D:76:5A:25:85:6F:2F:DC:90:54:3D:3C:F5:35:8C:60:05:F7
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:cf:3e:4c:93:29:9f:1a:12:33:1f:c2:1d:76:b9:a5:e3:
15:bd:e4:3a:7c:2a:f2:3e:2b:68:a9:d8:49:12:db:58:a5:17:
7d:e5:02:27:da:d2:e9:df:0e:c7:a4:07:97:ec:b0:25:21:d4:
55:92:37:76:61:9f:b1:f3:32:6b:02:c5:be:2a:66:4b:f6:9d:
ea:6a:9f:22:4a:aa:51:cf:82:d0:a1:b8:ba:78:21:a0:8a:bd:
c4:7f:b3:9d:52:2b:18:d5:12:56:d6:de:85:8d:6a:33:b0:b3:
16:71:06:6e:db:d8:ad:20:fb:eb:66:0b:24:36:d1:c8:30:e5:
3d:2b:a7:6c:4b:5f:a9:f7:19:dd:fe:de:21:c4:b6:a6:33:b1:
1d:a5:3c:3e:ab:15:54:3d:8e:4e:be:ec:79:98:54:29:7f:16:
21:2d:5f:4f:f7:92:75:fe:93:b2:17:6f:1f:47:48:51:c4:7b:
d2:3e:4a:63:b5:53:56:21:7d:e2:12:1f:16:79:bf:f8:98:ad:
6c:69:1d:89:3e:fa:11:80:09:3d:ec:ba:12:a0:19:71:2c:56:
42:84:bf:2e:3f:b9:b2:ae:70:7a:25:51:cd:9d:ea:1d:d9:54:
b1:75:47:22:38:7e:8e:42:a4:dc:ec:30:f0:47:26:db:8d:3d:
db:34:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:34 2026 by rpki-client