Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: NOivcKfT4+f9zaSFvNzl9Y2WUjTchXGEH/WHKx46XN4=
Subject key identifier: D5:1E:1B:08:B9:DE:82:5B:CA:BF:EF:EC:42:CE:EC:8E:81:52:95:E1
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 019D3909ADEEBE54403D45AC27AD66868297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 119D
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa (hash: +Lydi0u3DmQC51EDG4oe1+EHym7x1Ea0qYfFm6X8wzQ=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: Z7hJnDbR7XKTqROedS1AqtTxO8p/4X3+L47kF/LObXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ad:ee:be:54:40:3d:45:ac:27:ad:66:86:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=d51e1b08b9de825bcabfefec42ceec8e815295e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:8b:b9:b0:f8:3a:b1:8b:ec:05:93:e6:03:
b5:6b:4c:4c:ed:cd:02:19:a6:4a:0a:1f:50:42:7d:
0c:8f:90:f8:a6:72:3f:22:f6:9f:30:1c:e3:b7:fc:
d5:e0:77:84:c7:7a:db:c9:71:6c:99:cb:9e:9d:4a:
a7:e8:1b:85:21:ad:64:4e:cd:3c:c0:a7:2a:8c:96:
5f:21:6f:01:f2:e9:8c:3c:a0:a1:45:58:98:fc:2c:
43:f7:36:53:81:52:70:ed:18:bf:99:10:84:7f:d9:
46:aa:29:93:68:98:2d:e7:10:78:4c:d1:86:75:53:
79:7c:fa:50:61:a0:92:08:ef:ba:6f:5f:9e:38:3c:
38:2a:51:0d:ea:db:ec:fe:61:ce:0a:28:ce:6b:6d:
9a:87:b1:38:58:53:3b:76:fe:8d:d7:14:9f:30:f4:
f6:72:bd:7e:27:5b:c2:b2:06:2a:f4:1e:f6:3b:c7:
6d:3b:4b:60:c8:65:6b:e1:8f:da:fc:4d:0e:44:3f:
b9:9c:15:38:09:22:8b:68:ef:95:c5:08:f3:12:ef:
16:1e:e5:ae:76:82:8a:8c:67:33:20:c3:c2:c0:8c:
a8:c9:d8:3f:59:9a:39:ca:f2:1e:ba:7f:45:1d:69:
eb:a0:22:8c:e1:97:bb:0c:07:7c:55:de:de:f0:4b:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:1B:08:B9:DE:82:5B:CA:BF:EF:EC:42:CE:EC:8E:81:52:95:E1
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bb:66:f7:0e:46:e3:92:db:7d:7c:76:8b:b5:8c:8d:f9:73:
f5:93:ac:57:e4:56:06:b8:24:50:59:1b:9a:5f:27:6a:5c:d9:
da:99:6a:8d:5b:6b:e1:07:f9:74:e3:7d:61:02:ba:5d:bb:7e:
91:88:3e:4f:ca:a8:63:90:c0:fa:77:48:40:83:91:0f:33:6b:
7c:62:72:4c:70:3f:75:3b:c5:02:64:24:6a:61:b0:b0:4d:61:
75:2a:c7:f8:9c:44:c6:58:d3:50:dc:f2:fe:f0:8a:c5:be:cc:
03:1b:40:aa:4c:1b:d7:0f:ef:77:2c:05:e0:83:a5:fa:88:44:
ea:d2:0d:71:0c:4b:5e:ce:c3:e0:43:8f:04:f6:f1:40:b1:a7:
fc:29:01:4e:b6:69:f7:e5:4a:bc:bc:c7:f4:e7:f2:3c:22:98:
68:ad:4e:a0:4d:70:ee:60:63:6a:6f:65:47:29:6d:d5:a1:45:
ab:20:2d:43:de:d4:26:d9:e4:4a:f2:30:40:2a:59:b2:21:48:
39:31:9d:eb:f6:2c:70:10:cf:61:81:4a:ba:6d:0e:f6:4a:d4:
ab:97:0e:38:94:8e:93:0e:6a:ba:31:58:a5:86:c8:f6:29:d1:
f0:80:92:31:68:82:c8:0b:0d:52:55:ad:64:27:28:11:af:d1:
28:94:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:19 2026 by rpki-client