Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: 7LYd5amcA3HzaTbi/2WhGpNEtUjnf2FX5KeysYt+FPI=
Subject key identifier: 80:BA:0A:5F:D0:06:0C:7D:A0:11:CB:70:1E:8F:BC:42:25:97:A4:E2
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019D3A1D1EC3C065B1D333CA13EF96BE044E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 185F
Signing time: Sun 29 Mar 2026 15:01:20 +0000
Manifest this update: Sun 29 Mar 2026 15:01:20 +0000
Manifest next update: Mon 30 Mar 2026 15:01:20 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: grDUcPcmdNB7qghwfhABE0xeRffCYPtEtvegIXQrwcM=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:1e:c3:c0:65:b1:d3:33:ca:13:ef:96:be:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Mar 29 15:01:20 2026 GMT
Not After : Mar 30 15:01:20 2026 GMT
Subject: CN=80ba0a5fd0060c7da011cb701e8fbc422597a4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:2f:28:95:0b:7c:01:22:54:78:8f:08:14:
9f:8e:98:4e:21:1a:82:1d:6c:d3:c3:5b:7f:ae:ed:
f7:81:c1:0c:a3:36:56:b8:85:69:ce:44:64:13:72:
8e:40:7c:9e:4b:b3:da:9c:2d:3d:e1:0f:3b:9d:72:
01:63:0b:1f:7f:77:4f:53:ba:5f:83:0a:55:95:74:
9e:bc:ba:d4:a6:44:01:e9:63:36:48:d6:5f:33:e2:
b2:da:f7:75:d9:5b:07:f3:e3:08:16:9f:1b:6e:1c:
4f:86:6b:a0:35:d4:0d:92:c6:23:bc:88:1b:2a:f9:
71:ff:aa:ea:b5:c8:43:2f:15:56:a9:1c:b3:e3:af:
e2:47:17:9b:d6:ea:54:be:a7:89:d6:89:6a:a3:7e:
c3:29:08:e0:95:30:07:15:25:a4:65:b3:42:2c:82:
08:0a:17:ee:fe:b3:d5:32:a8:50:83:8f:57:e6:36:
3c:4e:9e:85:da:76:67:e3:6b:47:de:ea:90:4a:09:
c5:a1:57:46:46:bc:b4:8c:ce:7d:a3:88:1b:05:c3:
66:9c:9e:97:fc:75:77:9f:6b:01:51:5e:6e:33:c5:
1a:a4:af:20:2a:a0:41:96:d6:c4:9a:52:b3:de:8f:
59:2e:bc:e7:a9:f7:ff:48:fc:68:8a:49:dc:6d:b1:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:0A:5F:D0:06:0C:7D:A0:11:CB:70:1E:8F:BC:42:25:97:A4:E2
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:67:c9:5a:35:1e:54:47:d2:2b:b5:db:cf:bf:d6:3c:38:
ec:bb:b2:d2:c3:93:42:80:40:10:f9:1c:74:06:f1:2d:16:c8:
69:52:d9:4f:53:c7:26:00:0b:9e:c3:8e:b7:01:cf:26:85:f3:
06:7b:5d:56:0c:ee:79:84:a3:7f:e6:51:12:08:d1:ec:18:9f:
a3:70:09:91:85:97:03:23:c7:13:f7:70:da:2e:c6:07:d6:94:
09:5e:0c:ea:76:d3:a1:ac:e0:0e:17:5f:2b:20:03:06:e1:ae:
a4:35:c1:a3:2b:54:bf:23:49:07:bc:37:97:27:c7:9f:0e:63:
56:4f:b5:60:91:45:d7:fd:ac:eb:d4:92:ff:2c:af:54:16:60:
01:06:62:83:ce:b7:60:2b:dc:67:57:e5:89:8c:45:eb:26:d5:
a6:4d:31:f8:09:54:55:86:5b:15:2d:a6:6f:5a:d5:51:05:81:
3f:b6:74:37:12:ec:a2:b6:76:a4:de:9c:b7:5e:df:0e:2a:15:
a4:0f:44:0e:09:97:80:14:ea:aa:f1:45:22:90:6f:43:84:92:
ab:3d:a4:e6:68:f7:40:50:cf:51:4f:08:a9:40:38:11:6d:ca:
5d:64:ed:85:14:ea:16:7b:5a:3e:99:07:db:d8:d0:33:0f:12:
21:20:75:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:42 2026 by rpki-client