Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: tyuhPcNx6dzx57V6P8laXfPllrQ7lSGOsZOhOuSldvY=
Subject key identifier: F4:00:56:9D:2D:85:B2:E4:B6:35:DE:61:E4:06:8B:9C:9E:66:4C:E1
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 019D3789793BA3EA0023E578A10BC3A862C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1723
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: 563ZdunEAGTqUxt/njuGZQ3RVB3WX637TvOaQProGCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:79:3b:a3:ea:00:23:e5:78:a1:0b:c3:a8:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=f400569d2d85b2e4b635de61e4068b9c9e664ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:f2:ab:f6:5a:96:a7:5e:5e:9b:6d:76:56:
cc:e5:e8:32:f9:40:4b:68:33:3f:1a:7d:05:db:1b:
b2:b3:5c:4b:ab:c6:8b:50:0d:34:a7:9f:17:82:db:
e8:d9:d9:b0:03:5d:59:aa:5b:a5:46:5d:23:66:a4:
02:d7:73:a5:30:03:16:51:df:0b:2d:28:ce:f9:bf:
19:9f:35:68:40:1f:57:9c:c9:08:1c:73:e3:47:a0:
9f:91:6f:d0:00:a2:ad:2f:90:89:33:6b:b0:95:8a:
9b:44:0a:1d:75:05:1b:c6:6a:77:e3:50:3e:6b:f8:
1b:92:38:d7:6a:f0:ac:e0:f0:00:b1:da:e5:ff:8d:
d5:50:74:e9:46:ac:b8:e2:cd:bb:a5:16:23:32:c5:
79:35:7e:29:61:21:94:10:5a:93:30:6c:6c:02:9b:
07:a6:46:db:8c:f7:d1:b1:b0:2b:4e:2e:11:f7:48:
e1:5c:8c:f7:65:fa:4b:df:23:d7:3b:48:e0:9a:3d:
4f:3f:b9:3e:d5:83:56:db:e8:bb:29:89:05:6c:ef:
c3:80:ad:ef:c6:0d:e7:9f:9f:02:e7:2e:6a:7c:33:
0c:fc:96:c0:c4:fc:08:9b:f5:bb:52:4d:f0:ae:a1:
a1:01:a7:02:c9:01:f2:17:a4:5e:80:07:96:d0:8e:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:56:9D:2D:85:B2:E4:B6:35:DE:61:E4:06:8B:9C:9E:66:4C:E1
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c7:a6:a4:f4:1c:75:5a:d6:2a:d7:c7:d2:bf:59:4c:4f:5e:
20:43:41:ef:dd:e2:ae:b1:93:b6:00:3a:55:05:f3:18:32:cc:
08:e1:65:78:9a:85:51:6f:36:b0:e0:a0:74:7c:4b:ed:19:26:
fc:31:b8:da:5a:7b:df:8d:40:94:cf:20:c1:1f:f9:ed:1e:21:
c1:c3:c8:70:d9:05:4c:5a:b3:72:50:04:6e:45:f3:96:77:e8:
3f:1f:31:42:36:dc:9d:20:3b:f8:46:c7:a7:42:98:0b:7c:92:
89:d6:4f:47:25:46:bf:fc:35:7e:c2:a9:62:4c:39:d7:8b:b3:
8f:75:3d:5d:3b:7b:53:9c:fc:f9:44:b9:5c:f0:9f:8f:44:b2:
69:eb:84:67:eb:3e:27:63:63:5a:14:56:5c:26:89:73:28:7a:
31:18:0f:b6:0e:ca:b2:13:27:5d:b6:b6:41:99:f0:5c:b3:ea:
75:ee:1f:a0:55:9e:07:2c:9f:18:64:ca:b8:6a:4f:f7:20:f2:
cb:9f:30:3f:4f:f1:db:7e:92:e1:60:3d:56:e8:0e:08:0e:3e:
cd:d9:97:49:63:11:3d:8d:6d:e8:1c:72:08:0a:b2:c1:61:d9:
61:54:87:dc:5d:95:ac:a9:a3:09:22:a1:ac:d3:b5:1c:1b:fd:
56:77:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client