Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: A6XPi2sdsqInNsbOqlnq+32ZYkwHrOJ+XUk6dtsut+A=
Subject key identifier: E9:DC:9E:F3:25:51:E5:1E:1F:60:DB:99:D7:F4:66:1E:7F:EA:45:45
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019CBF60397497B624C1602BB85BCA2EF7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 039D
Signing time: Thu 05 Mar 2026 19:01:20 +0000
Manifest this update: Thu 05 Mar 2026 19:01:20 +0000
Manifest next update: Fri 06 Mar 2026 19:01:20 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: MRCBYjTYvDw+l/pKkBs5/5DI0ravcGGf1vwui20r3YI=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:60:39:74:97:b6:24:c1:60:2b:b8:5b:ca:2e:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Mar 5 19:01:20 2026 GMT
Not After : Mar 6 19:01:20 2026 GMT
Subject: CN=e9dc9ef32551e51e1f60db99d7f4661e7fea4545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:36:e8:d1:0f:85:67:8c:26:27:8b:58:16:
9d:ae:f9:9a:3c:30:70:a4:db:7f:d4:0e:bf:fc:8a:
90:85:72:b4:71:6a:df:1e:f6:95:e0:16:99:4b:b7:
48:ce:7b:91:de:1c:40:83:3d:88:51:3b:91:5c:1b:
d1:8e:1e:b5:33:f9:81:af:a9:e8:20:d1:29:1c:9c:
4f:b2:72:d4:1e:bb:c7:a6:6a:a0:30:d9:60:b7:51:
49:73:83:1e:60:84:57:7e:d7:be:78:ee:0f:65:32:
a6:eb:ac:72:11:d8:d5:44:23:46:61:37:26:30:f9:
52:aa:f9:7c:f4:f7:54:de:dc:88:69:3c:b9:b6:3e:
3f:61:ae:48:58:fc:f6:58:3f:74:ea:f0:75:13:48:
46:60:3f:a2:7a:5f:d5:23:23:06:ec:a2:f9:90:29:
f5:fe:4c:8b:b6:88:d9:89:82:26:8e:9c:ef:06:27:
62:d6:7b:85:89:22:32:ec:69:1a:6d:f1:62:c1:31:
81:29:1b:78:e2:43:1d:54:5a:83:4e:5a:82:24:75:
0b:18:d2:70:28:5e:52:a3:0b:68:dd:ff:e8:9e:53:
2f:99:ce:fe:8c:79:cf:05:ed:43:10:c3:e1:4d:ad:
6c:6a:c3:4d:72:0c:57:01:9f:3b:19:f8:ef:f3:47:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:9E:F3:25:51:E5:1E:1F:60:DB:99:D7:F4:66:1E:7F:EA:45:45
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:15:a8:aa:b7:f5:d5:dd:7a:dd:bf:26:90:8b:ac:3e:9d:
15:51:80:6b:da:eb:4a:a6:05:42:8b:8f:68:c0:31:ea:af:9c:
e3:64:e3:1e:3e:5f:72:33:10:0a:b4:73:2c:5f:bb:94:67:4e:
cb:1c:8c:b6:2a:5e:be:01:c5:3c:71:d6:71:e4:6a:77:00:74:
37:8a:78:97:a3:c1:49:9d:88:71:5c:11:94:9d:0a:8d:59:80:
d4:78:46:a9:bb:62:42:2a:72:24:14:91:ae:ea:7b:b6:e3:90:
2e:26:b7:a1:e6:16:a4:c7:78:dc:b8:7d:b3:bd:fc:cd:92:85:
7f:8f:42:ec:49:06:e9:35:1e:d7:57:25:71:e1:55:0d:33:a9:
1f:e6:03:b7:f8:be:6b:9b:fa:01:4e:73:02:b8:78:17:cc:55:
39:fe:e5:d4:66:ee:93:d8:0c:f6:5d:a3:12:b1:8f:0b:8b:cb:
65:3a:54:41:06:24:83:92:ab:e7:13:45:7f:75:5d:ee:4e:b2:
79:75:8b:9e:5c:f8:64:7c:d1:7a:8b:c7:fb:b1:91:7e:f7:dc:
c5:ae:43:5b:47:2c:4c:5c:be:40:1a:d4:76:88:c6:48:dd:f7:
b6:bc:6c:29:a9:af:cd:7e:ec:e8:88:12:cd:61:75:b9:27:9c:
d7:0e:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:47:42 2026 by rpki-client