Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: 8lUbmuEbkLvxiPgIR1BZwrjKQOnCBoF7UNOeVRnP5iI=
Subject key identifier: D6:87:43:4F:D5:8E:F3:E1:76:B1:88:49:60:8A:8C:FD:E6:C8:CC:AF
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019D382E9E56FA18B314242C3B0ADA297F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: INpZf50r8+rreYkBI2YGzN6ExwmMBR4N1AUfWCk4MYY=)
4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9e:56:fa:18:b3:14:24:2c:3b:0a:da:29:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=d687434fd58ef3e176b18849608a8cfde6c8ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:98:6e:b6:2e:39:4a:32:ef:f7:c6:c0:9c:
60:83:08:bb:d7:09:31:b9:c9:7d:eb:16:54:98:60:
94:41:f0:d9:8b:99:f9:37:05:f1:11:5b:bf:d4:31:
69:c0:93:47:64:ff:4f:a6:8d:bc:e3:16:1e:d2:54:
f3:4c:8c:e3:0f:df:36:1a:c3:72:90:28:5c:0b:1d:
83:0a:ae:15:fa:b0:75:d3:df:78:20:5a:cf:fc:b7:
4a:a9:1a:45:84:20:99:48:fe:be:bc:c4:15:06:af:
c9:e2:c6:ac:e2:a6:0b:28:57:5d:c5:03:9c:28:95:
22:f6:85:f8:b7:c3:90:10:f3:ed:a0:96:2a:b8:94:
6d:38:a4:7f:b0:3a:95:c2:cf:80:bd:6d:aa:89:8f:
09:2c:ba:07:7c:6c:fa:9e:75:d2:41:4d:37:a1:c6:
96:7e:d3:c4:8d:fa:1b:54:5d:27:fb:4e:b3:7a:0d:
70:e1:26:55:42:e1:67:0d:a8:3b:88:c5:69:81:da:
18:4c:4f:33:95:98:a8:5d:b8:82:c1:d0:45:3f:73:
b2:20:60:0f:c4:f0:b2:58:11:d8:fc:d7:b1:d5:8d:
35:53:85:93:fd:fe:17:a4:f3:57:18:49:72:56:09:
0d:45:f7:49:68:bb:34:e7:8f:af:05:89:ba:8c:e4:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:43:4F:D5:8E:F3:E1:76:B1:88:49:60:8A:8C:FD:E6:C8:CC:AF
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:3f:88:ac:5f:cb:0b:b7:76:b2:22:62:67:c7:13:49:a6:
46:1a:83:b6:ae:6e:b1:84:1c:78:e5:77:c5:a9:a5:90:34:f1:
59:12:37:cd:e1:b0:2a:55:ac:15:89:43:fd:70:90:d4:6c:53:
bf:5c:b8:c6:93:f9:a4:0f:98:3c:de:09:a4:f7:12:f2:63:52:
bf:7c:43:3d:7f:54:52:ef:d6:db:98:0e:31:3f:22:45:84:3d:
79:4b:28:fb:cd:02:6a:8e:d8:eb:76:67:94:11:8b:f9:a3:13:
8e:53:d2:0e:a1:98:e5:1b:e8:f6:6e:b9:25:4e:1b:66:71:34:
57:b3:ad:85:7d:15:fb:40:9e:bb:1f:88:9a:7b:46:26:b5:17:
f2:c0:38:b0:d5:bb:1b:48:da:20:b8:44:cd:cf:1c:00:df:87:
ae:09:1f:93:74:83:8f:0b:d3:d5:78:4f:95:5d:45:46:3a:e6:
25:f9:1f:25:7c:0a:17:d3:9e:06:7c:8b:4a:0d:cb:a9:a5:51:
ce:3f:35:68:4f:a6:45:c3:e8:34:cb:db:b9:41:b9:27:79:91:
e3:f2:67:44:f8:8e:8e:08:1b:b9:d5:0e:a2:a9:a6:83:ff:4d:
38:01:07:a3:5b:22:b3:bf:d6:a9:0d:eb:4b:26:59:0e:30:da:
38:4e:7a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:42 2026 by rpki-client