Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: 2m/sr+219MypU2af1wFRHUmwbPu7ePk6Lglno/AxX0k=
Subject key identifier: DC:7D:66:A8:E2:F0:F2:5E:DB:8A:8A:58:A9:DE:06:6A:72:B3:33:FD
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019CE5233424B95689DAE3EB31B055CF07A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 18A3
Signing time: Fri 13 Mar 2026 03:00:15 +0000
Manifest this update: Fri 13 Mar 2026 03:00:15 +0000
Manifest next update: Sat 14 Mar 2026 03:00:15 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: UsqGEEqTC/24Z7ak04ORsW1GeGSU7wZPgBN85sHL4zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:34:24:b9:56:89:da:e3:eb:31:b0:55:cf:07:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Mar 13 03:00:15 2026 GMT
Not After : Mar 14 03:00:15 2026 GMT
Subject: CN=dc7d66a8e2f0f25edb8a8a58a9de066a72b333fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:c9:2b:cc:0c:9f:b4:b2:0d:2f:44:05:dc:
92:13:d6:3f:7b:b0:1e:f1:50:32:08:9b:e8:fc:64:
e5:88:64:f3:d1:fe:fe:8c:08:e5:2a:21:4c:8b:f1:
a9:9d:db:59:aa:60:df:17:bd:27:d3:c0:e8:53:d9:
16:b9:6f:e9:1f:14:19:bf:52:cb:73:b8:69:a9:9c:
91:6b:8e:87:84:93:87:b2:92:51:92:e0:cf:50:42:
f4:e0:ac:94:8f:fe:e0:65:67:8e:ab:67:df:ee:6a:
85:f3:31:14:c7:6d:70:99:2e:a0:4b:88:26:82:2c:
27:1f:2d:e2:4b:08:a9:d1:ab:63:9b:c2:06:39:e4:
e1:8f:41:c7:cf:ac:7e:d0:4c:42:96:ed:3c:24:9a:
8d:b2:4c:fb:52:c3:ce:90:83:30:97:60:e2:cb:c4:
16:e7:49:3e:89:77:34:e8:59:09:af:08:47:89:02:
89:0d:4d:d1:42:6d:b4:07:fa:ec:cc:e9:75:9a:64:
3b:5b:54:ec:2c:9e:00:24:d9:ed:e9:d8:1d:f7:3d:
c2:aa:b0:b1:17:cf:f3:14:d5:6e:4a:2a:7c:96:94:
66:03:82:e7:f1:9d:d9:03:2c:5e:a4:22:b9:c9:6c:
70:44:68:10:f4:9f:9f:f8:d3:c5:9e:09:3c:bf:7b:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:66:A8:E2:F0:F2:5E:DB:8A:8A:58:A9:DE:06:6A:72:B3:33:FD
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:82:b5:91:0b:d6:f2:59:b5:96:4f:56:0d:1e:b9:82:ed:24:
1c:94:c8:a6:1e:1f:1d:15:11:93:c8:93:99:7c:c4:82:24:5b:
bb:c2:f0:d5:b7:b9:e7:87:f9:de:a7:c6:f8:f0:f5:ea:2e:3e:
9e:08:da:d1:ca:f4:e9:18:5a:2c:af:8c:f7:ae:0f:36:c3:ca:
33:13:34:da:54:24:1f:95:6c:41:8c:75:01:24:d7:30:3a:f3:
f4:1e:6f:dc:ff:ef:dd:da:b0:97:4b:a8:6d:50:6a:22:73:05:
59:79:17:f3:5e:61:c9:37:3c:7a:66:1c:8f:06:bb:b8:c2:c1:
b7:50:4f:c1:3b:11:ea:ea:8f:bb:0a:8c:e6:1e:5e:b1:c8:06:
64:d9:f1:27:51:a2:67:30:f0:5a:71:70:44:ab:94:1d:fe:90:
c7:b5:c8:1d:e5:8e:35:7d:35:26:ad:1a:c4:23:5a:17:ad:ca:
71:a3:a9:b8:dc:8f:29:3b:0f:e0:65:66:3d:d6:73:f6:9a:71:
21:77:1c:b9:00:6f:f1:ec:e1:8b:c4:25:5f:88:45:68:94:37:
d6:a1:14:0e:cf:bb:0d:8c:77:70:2a:d3:04:a0:6c:c6:d8:34:
7f:90:3e:63:c0:5f:b9:8c:03:7e:a0:45:e7:db:c4:89:d0:e5:
84:f3:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:17:27 2026 by rpki-client