Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: 4bZ7F7ipr981Ma0seLq/OIZkhrMRDws+0mXZ184xlyU=
Subject key identifier: ED:9C:A7:BB:6E:FF:B5:F3:D0:F6:FE:60:DE:31:B1:68:61:36:29:D4
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019D3865D8359C6D04333AE4F937C5D7516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: C5XEOKd3fauF5wNLgFLgU_UqhDk.roa (hash: gq6WkJtrJKgQndCeB0nR0Q6T7/UN9Av/CBIcRy+j3B8=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: PWAlvwFvJGL6GQbaiNCRC2sYDDZd6Ys3DResWNIesk8=)
3: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
4: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d8:35:9c:6d:04:33:3a:e4:f9:37:c5:d7:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=ed9ca7bb6effb5f3d0f6fe60de31b168613629d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:f7:08:4a:f3:38:9e:8b:95:17:1c:f7:0d:
d1:4d:83:bb:34:90:4e:08:f7:fd:80:a3:b4:04:4a:
1b:e7:24:f0:4f:21:3f:3f:ff:d6:6b:6c:5e:63:ad:
f7:4f:83:ce:3b:db:b4:a5:5c:9a:87:5d:94:3f:31:
af:7c:c5:57:84:ac:99:80:5d:05:d1:82:ef:d1:34:
0f:ed:06:6b:b7:ba:06:6d:64:f0:c4:3b:74:f5:d5:
63:62:c9:03:85:cd:4b:8d:68:33:dc:1c:1c:c3:b4:
d8:a2:93:ec:ab:48:95:60:a4:5e:38:82:e2:1f:5f:
77:5a:9e:1f:c8:d4:5f:dc:b7:98:30:6b:6d:69:e2:
61:0c:64:0c:a6:26:af:9c:bf:d3:2b:1e:8a:5f:f6:
4c:da:85:2c:d4:67:53:16:45:bc:a9:ad:04:07:ec:
ff:7c:25:9d:ef:30:1a:24:cf:47:34:c5:e8:20:a0:
86:58:e9:0b:b9:6c:e9:3a:28:33:5e:51:4e:ae:89:
ea:a1:b7:cc:c0:c1:a1:16:b4:80:60:58:8e:27:70:
ca:7b:fe:2f:a4:45:1b:b8:7f:98:df:5b:d8:73:65:
70:0e:fa:5a:a0:c2:f8:b7:01:ac:63:c3:20:fa:88:
35:92:17:98:12:1c:d1:e5:09:3a:8c:c4:08:c6:98:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:A7:BB:6E:FF:B5:F3:D0:F6:FE:60:DE:31:B1:68:61:36:29:D4
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d4:60:e7:55:9e:97:da:a5:64:84:f1:0e:a2:b7:78:ca:e9:
49:4a:9f:a1:95:cb:10:a4:14:24:0f:43:1d:ea:ee:54:3b:1a:
21:3c:2b:37:43:bd:07:62:b5:67:74:f9:7e:00:bd:11:66:1b:
3d:ba:b6:e1:02:87:52:7d:21:cf:41:f3:6f:f9:9c:87:aa:f6:
4d:b1:ef:07:3b:93:3a:e8:9d:bb:2d:24:1b:05:d3:34:78:55:
bf:ad:cb:5c:fa:fb:a3:6b:75:0a:ca:95:37:64:ba:32:5b:f3:
64:68:bc:20:4c:0f:e6:b2:f2:af:95:95:ea:5d:c0:5a:5f:2c:
ed:d3:2e:b6:5e:87:ec:ae:42:1b:44:e8:fd:66:ff:89:32:1a:
70:5c:b9:1a:f3:4e:82:9a:c8:66:26:b2:ec:97:c0:68:60:e5:
0b:39:60:f0:00:25:7f:4d:63:77:fd:1e:b9:c9:bd:43:27:e6:
5d:7a:11:79:f2:2e:75:51:e7:f9:2d:b1:23:0c:32:ae:6b:e4:
d0:db:c2:f7:19:ff:82:ea:2b:44:cb:6a:ed:6e:59:14:72:5a:
20:28:ce:ae:40:3f:6c:bb:2d:44:c9:23:46:12:f0:f5:4f:5d:
96:ff:e1:f3:0f:3c:d0:40:fe:a9:79:3f:31:9f:e0:5b:1d:1b:
31:13:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:57 2026 by rpki-client