Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: CAxXa1StRidZmaY4YMmmx0nWWGjulL3McN8IvDyPTt4=
Subject key identifier: 70:A3:11:EE:A4:97:E4:B6:56:19:B9:01:E2:A4:BC:2D:31:02:21:8D
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019D37F76916CE25AAD2C0B012E6AD76B4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1545
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 8rZmOBXhxYR1jHeqgsBEsxCl26wp1DcMSC6JTvTCCP0=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:16:ce:25:aa:d2:c0:b0:12:e6:ad:76:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=70a311eea497e4b65619b901e2a4bc2d3102218d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:54:19:08:ea:1d:3b:76:e9:c7:3a:e4:8d:
1e:27:e8:17:16:7b:47:e0:ab:ec:50:c9:3a:9e:50:
cf:85:ad:06:35:07:5a:52:cd:fa:3c:75:ce:68:37:
41:59:1b:b1:ac:ea:aa:e2:a6:e6:c5:d9:16:b3:ad:
7a:e1:7c:10:42:bf:cd:4e:84:a1:7b:9e:86:cc:5d:
5c:94:07:3d:91:50:c9:b1:d1:37:d8:6e:8f:17:f4:
6a:8f:27:eb:1f:71:ca:74:15:5a:40:54:f7:cb:ec:
4c:23:46:9e:79:81:cf:dd:12:1d:39:8d:e3:81:d9:
d4:96:f9:c3:21:3a:93:18:a8:b6:c5:6c:a2:3e:5d:
05:08:a2:9f:ac:e0:51:8d:17:83:79:c6:a3:96:21:
0f:8a:d3:23:3b:3b:d9:a4:60:8f:ea:b7:43:c8:8f:
fe:b0:ef:a8:76:b4:8c:d7:6d:92:eb:2a:e8:97:50:
a2:69:6a:03:12:08:74:3c:2a:e9:33:fe:6f:66:e8:
04:dd:43:ec:a4:16:87:03:24:15:03:4c:ce:ee:c9:
af:3f:66:e5:dd:9d:d3:3c:27:e8:c6:55:a8:40:db:
3f:a2:85:37:0a:aa:50:70:8e:3b:30:eb:68:00:af:
a6:0f:62:f1:cf:63:96:ca:a1:f1:a6:c3:82:87:4f:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:11:EE:A4:97:E4:B6:56:19:B9:01:E2:A4:BC:2D:31:02:21:8D
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:05:7d:11:8f:59:8d:d5:11:0d:05:eb:b3:44:6a:0b:7f:
e8:f8:cc:02:56:33:8c:7e:a4:34:1a:0f:64:2c:32:3f:30:65:
50:bb:26:91:b7:64:dc:c1:ae:0f:b6:23:45:99:c0:03:a6:f9:
73:7e:48:d9:2d:a5:af:91:8f:75:f2:a1:22:5c:73:27:39:ac:
dd:d7:13:0a:da:d5:78:a3:48:a3:09:b6:95:41:70:0e:18:de:
37:bf:7b:b0:1e:31:ac:37:fe:b5:11:d0:7b:a7:5d:b1:0c:ab:
d9:61:f4:fb:9d:f2:f4:b4:14:af:52:9c:a9:16:b4:cd:bc:09:
82:13:54:6f:b5:6f:46:53:a3:ac:d8:c0:15:10:ee:0d:95:12:
dc:b7:bd:27:98:9d:b7:f6:e9:18:ae:99:9e:f3:27:f3:cf:a1:
c5:91:9c:f1:5e:3c:14:4c:78:67:93:12:a2:83:28:82:06:33:
43:6c:6d:c1:7d:0f:93:64:4f:a3:ff:e1:e3:39:f5:62:ec:82:
bc:63:1d:f5:75:a7:dd:ab:5f:56:c2:9c:91:a2:e0:9f:b8:57:
72:70:f1:43:7b:6c:e3:c0:8f:f3:3f:13:77:d1:58:0f:8a:9d:
5a:58:93:6e:75:ff:c9:13:f5:15:9e:41:51:ae:10:ea:7c:21:
1a:9a:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:38 2026 by rpki-client