Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: Bpr63fLJ0Zl27Xc3Ai2SJiaADL7UO2mT98MaBWkgnP4=
Subject key identifier: DF:CF:B7:94:93:95:FB:C6:BB:A1:E2:80:12:4A:1A:8C:F5:11:75:01
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019D378977B57EDE923E61FC42BDC358503D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 1293
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: NM0sa3NTiwVD5SuLBN5GUwyALHP+zOz1QjTG+vznKik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:77:b5:7e:de:92:3e:61:fc:42:bd:c3:58:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=dfcfb7949395fbc6bba1e280124a1a8cf5117501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:0c:99:73:df:0c:07:cd:c2:f7:10:bf:fe:
fa:16:45:f7:d3:f1:46:9a:2e:ce:fb:44:d5:2c:ac:
61:c8:86:fa:2a:bc:49:2b:2b:48:1c:38:17:74:a0:
76:d5:ab:55:de:ad:76:87:dd:00:48:4c:91:b5:cb:
d1:20:e4:e6:a3:ea:85:71:94:c8:9b:e3:b1:1a:7f:
b6:e4:3f:32:21:a8:7c:df:90:ea:4d:7e:15:08:20:
53:ee:53:c1:7a:dd:89:e9:5f:1c:fa:cc:70:35:ba:
7b:1c:b1:84:c3:ab:11:8f:98:95:8d:c6:d5:69:57:
78:6d:e4:8b:f7:59:ed:64:f9:df:b7:ef:23:47:3f:
fb:2b:6f:fb:b0:7c:63:bb:58:a7:7e:6a:e3:61:e8:
85:79:e6:be:96:83:cb:bb:1d:f8:02:cd:92:19:40:
73:b5:74:e0:da:df:14:42:48:a0:7a:2a:11:80:7a:
0c:78:54:7e:8c:a8:5b:a9:dd:75:5b:73:09:ba:a7:
de:eb:77:ba:b5:be:fe:a6:f4:3b:ba:70:a6:2d:c8:
5d:4f:23:d9:3f:24:78:4f:27:38:e5:1c:02:ec:a4:
59:0d:47:6d:11:2a:33:7e:eb:6c:8b:f1:7c:58:0a:
f1:c0:91:c7:7b:84:1f:a2:55:c9:f5:2a:c3:e6:64:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CF:B7:94:93:95:FB:C6:BB:A1:E2:80:12:4A:1A:8C:F5:11:75:01
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ee:20:48:92:76:75:0f:56:75:65:c3:16:76:f0:3d:6e:a0:
34:e6:12:cc:86:bb:eb:3d:97:10:6d:a8:dc:0c:a3:24:46:b2:
fd:88:b1:12:d4:c7:65:cb:40:de:07:f1:bc:14:34:ae:5e:65:
43:ab:06:1e:76:54:ad:98:2f:2f:a2:24:b4:24:71:d3:93:a2:
6a:32:80:56:63:71:a3:30:db:66:85:04:a4:38:81:94:aa:b5:
38:41:cb:c2:4f:40:09:04:47:5d:2a:b6:83:3d:07:5e:0c:15:
2f:b9:e3:9f:98:91:5a:91:de:a8:a8:ba:57:17:c7:a3:e8:f8:
65:9d:dc:75:e0:2f:ba:c3:ad:6d:30:89:c2:34:47:c6:a9:bd:
e7:2f:b3:a7:97:8d:d9:e1:94:84:5f:78:71:9d:8d:8d:fd:b9:
57:7d:78:3f:b6:c2:7e:d2:b4:3c:f5:b9:a0:2f:62:aa:6b:68:
42:c4:bc:fb:06:e3:a0:d6:41:60:51:c2:e3:44:b0:52:5c:27:
06:c5:8d:ca:b6:b7:bd:df:d4:04:36:8f:82:b5:47:46:c4:62:
27:d1:d7:9b:0f:45:ec:3b:1d:4e:f9:0c:e2:67:43:66:e3:b5:
7f:30:ea:d0:ca:40:74:3f:05:89:72:f4:57:0c:8d:71:36:0e:
cf:9c:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:51 2026 by rpki-client