Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: D6wl25/NXi0zteh5jp2YgJCNFRGYDycAz5jnYSf2jik=
Subject key identifier: 32:05:96:89:37:E3:EB:83:AC:44:99:0D:FC:CF:63:E2:19:58:42:A3
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019CACEBEFAA6E67735C77652D7A7A228A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 14DB
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: 1HYqkZOQD8zhUfOmG6hr+vrA5zRD7P21ISCzOnfN1PQ=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ef:aa:6e:67:73:5c:77:65:2d:7a:7a:22:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=3205968937e3eb83ac44990dfccf63e2195842a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:8e:db:0f:07:8f:4d:bb:4a:fd:11:6c:c5:
8e:36:82:6b:b0:f7:c3:58:9b:2c:27:4a:c4:2a:e3:
99:18:8e:ab:20:01:69:ef:3e:08:23:e9:f4:64:a5:
2a:a7:ed:cd:f2:f8:bf:78:f1:e9:fe:f7:41:4c:f9:
fc:bd:cb:6a:a7:f7:62:a1:be:74:2b:2c:5f:8d:c2:
59:b9:b8:21:fe:f6:cd:96:9f:61:c9:8c:c3:f9:ae:
a8:5a:dd:cc:7e:87:90:3e:b8:db:50:76:2d:3a:91:
7a:f7:52:33:c8:d3:b2:e5:e4:32:c1:b2:69:fe:33:
3f:f4:59:74:0e:21:1b:9a:7f:a2:a2:a8:e5:2a:ab:
d3:a0:aa:07:8a:4d:c9:a1:6a:da:9d:11:ad:37:52:
42:b6:be:9b:6c:c9:bf:8a:f8:3b:3f:f7:98:8f:a9:
4a:1c:cf:c9:9c:dc:73:a4:0a:37:a2:c7:54:49:74:
c0:ff:8e:19:a5:e1:7f:67:80:bf:d3:be:a4:d9:c5:
1d:b1:8b:3c:e2:f1:91:7d:c4:c1:fb:b7:3a:81:e1:
d0:c6:5b:c9:e2:b9:cd:92:81:5f:85:21:a8:f5:ac:
f7:fc:44:24:c4:0f:49:f0:cc:8b:d7:e4:12:ab:14:
d4:92:bb:66:6c:99:ce:45:37:b0:da:73:d7:3c:34:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:05:96:89:37:E3:EB:83:AC:44:99:0D:FC:CF:63:E2:19:58:42:A3
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b0:fe:d4:3d:34:72:e6:aa:44:65:0d:66:89:78:28:44:3c:
96:1f:35:0b:90:61:2d:e5:ec:e7:92:a3:b5:88:45:37:a5:dc:
af:27:68:94:3e:b8:85:a1:a2:3f:70:c0:52:36:d9:eb:0d:d8:
13:d7:8e:6c:3d:65:37:ac:5c:66:08:e4:a8:22:aa:2b:b5:1a:
1a:c9:a2:ca:90:e8:59:a5:61:5a:96:4c:12:42:b7:8d:85:43:
3c:67:ed:2a:ac:50:e2:6e:bf:d5:65:dc:e3:26:e5:af:14:e2:
73:ac:96:df:49:43:02:e4:42:2b:8a:f6:3a:cd:12:14:62:e5:
3e:8a:fd:2f:0b:e2:4e:85:1e:b2:03:b5:86:57:90:81:ce:8e:
ab:e8:6e:99:38:58:08:51:18:3a:c3:f3:45:fd:36:57:34:73:
80:5f:f5:44:70:d2:d2:bc:e4:1e:b4:2b:fb:00:e1:94:12:e5:
41:a5:a3:ad:b4:07:fa:02:76:9c:f5:86:4f:77:55:50:92:3e:
49:c2:2b:1f:37:fd:4f:d1:2c:ef:34:3e:1d:ae:6b:7f:98:46:
d7:41:49:37:d4:37:e6:ab:41:ef:60:4e:b7:71:40:0f:4f:b4:
1d:f3:cc:7f:f2:2f:37:d1:d1:6a:8a:b4:ff:7f:ce:ad:c1:b5:
d7:06:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:33 2026 by rpki-client