Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: ggUsrH07NzxwdRxz6dkSP9nHSmnuzYMEGKbAkzLpVCY=
Subject key identifier: 78:63:55:D9:74:AE:5C:0C:E4:95:3E:B6:E1:9F:F3:90:34:49:DB:80
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 019D37891D837D221B5010099324CD9863D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 059E
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: xcPhfJtp7fzhgZoj4ssWe4ytXwyE4HdM+KckC4scZEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1d:83:7d:22:1b:50:10:09:93:24:cd:98:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=786355d974ae5c0ce4953eb6e19ff3903449db80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:3d:1b:45:68:13:b8:28:09:3f:34:eb:1d:
0b:0f:30:06:8e:ba:ac:5f:18:10:6c:6a:23:47:78:
e4:2a:27:71:6c:f1:82:e6:b2:00:ea:19:d3:04:e6:
9d:75:81:65:64:36:87:6d:f1:71:08:cc:db:db:e2:
16:1f:84:9a:1d:19:bc:61:51:ae:9d:55:e6:2d:b5:
4f:9a:9e:92:f1:df:a1:20:2e:74:a3:ba:12:f2:e6:
80:f9:f2:5f:3e:10:93:50:6d:c1:17:43:f6:20:09:
31:87:05:f4:e2:21:46:96:4b:92:d2:3a:55:fe:bd:
f6:19:64:f7:d3:0a:51:86:11:f3:8d:c7:bb:31:ff:
b0:a6:69:37:bc:f9:03:2f:26:c7:08:1e:11:c0:7e:
ea:83:41:61:ae:1b:74:ef:a3:c4:b9:e4:dc:e4:4e:
a4:ac:13:90:99:f6:93:d8:eb:c8:68:0c:52:5f:52:
55:cc:75:fc:a6:04:9a:00:7f:61:93:ac:70:6d:4d:
60:0c:3f:ba:dd:d5:0c:c6:bf:fd:3e:31:0e:d0:8c:
93:93:9f:71:79:40:12:6a:32:98:f0:73:a5:69:81:
2e:8d:a4:ed:e0:2f:34:8c:1d:32:5d:1d:db:74:38:
1e:df:e4:05:5b:a4:b9:6b:41:11:ae:81:83:88:f9:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:55:D9:74:AE:5C:0C:E4:95:3E:B6:E1:9F:F3:90:34:49:DB:80
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:33:1b:3c:ba:d8:b2:16:74:41:4b:27:14:8c:7d:70:be:
b9:b4:52:17:f5:e6:05:7a:9a:df:06:97:16:4d:31:e5:77:86:
d4:04:ae:7b:ff:5f:16:bc:a2:7a:15:be:6c:0a:a9:8e:f5:07:
20:05:fa:13:9b:2f:e0:f0:0c:f6:b9:26:52:44:93:b2:c8:1d:
77:c6:35:af:50:af:3a:38:7e:9a:73:ac:65:85:83:8c:4e:f3:
8d:14:7f:b6:43:fe:a4:fb:d2:f7:79:a0:b7:61:97:ba:87:41:
c9:a4:67:bc:ad:36:22:ed:7e:79:b8:ac:23:a1:40:d2:bb:5b:
28:9a:5e:e4:89:cf:73:f7:71:a8:b7:9e:a9:c4:63:13:82:04:
48:b3:8c:67:0c:be:56:b8:30:c9:94:8c:68:6c:2b:29:d6:5c:
87:7b:f1:00:0f:10:67:01:be:d3:34:98:56:75:07:29:a0:25:
7c:8b:64:5d:22:ee:50:51:4f:39:55:70:67:a0:49:a6:f6:6a:
60:9a:f2:bb:ed:e5:c2:29:a3:c7:da:d4:02:70:ce:79:30:4a:
f2:66:06:45:0c:e7:42:f5:95:aa:7b:9d:c6:e4:70:57:e3:0e:
f3:71:72:e6:73:71:50:be:49:fa:5a:f8:50:0e:c4:a5:6d:98:
11:ab:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:30 2026 by rpki-client