Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: 32ZQzBEW6XguUwnRzhNLuWbAIEHXSr74bGJkMh7Yw8A=
Subject key identifier: 5F:FC:D7:C5:12:72:26:C6:FF:1D:E5:87:3A:56:1C:7D:4A:E0:17:D6
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019D386689023CB4BDBE763CFAA855CD7461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0833
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: rAJ2wHcg0Y7ROfShlZH4u5wn1DkZFROAyLN75l/fTeU=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:89:02:3c:b4:bd:be:76:3c:fa:a8:55:cd:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=5ffcd7c5127226c6ff1de5873a561c7d4ae017d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:da:f2:9e:a8:48:e5:92:2f:24:52:3d:54:
ea:94:ab:4b:f9:f1:22:5c:aa:6a:a9:c1:f4:9e:a1:
1b:22:34:de:b2:9d:1e:6a:a2:92:69:2f:e0:cb:2b:
41:b1:db:b4:03:41:f2:d8:d1:98:15:51:a6:81:df:
3e:3b:f6:61:31:f0:12:5b:88:29:b5:55:33:15:f1:
46:bc:57:d2:1a:ca:11:99:d4:e5:d9:ba:55:c7:8c:
d0:88:84:41:ab:d9:67:54:1d:fb:e7:f5:9b:0f:61:
d5:6b:b9:f2:22:b2:e7:0e:3a:56:fe:9d:c2:f8:25:
ef:b3:21:75:e7:7b:90:d6:f9:22:01:f8:dc:c2:e1:
fe:89:d7:f8:ea:59:8b:c7:30:a5:f3:43:81:91:12:
4f:15:d6:a1:3c:2e:92:c7:5b:c1:28:bd:62:a9:99:
8c:f8:bc:0a:ae:7e:2b:5d:04:54:49:a5:51:1a:87:
82:fc:cc:64:8a:21:99:fa:fe:8b:a7:39:ea:84:6a:
5d:8a:a7:4a:de:54:13:fd:f6:ef:98:59:02:b4:19:
5d:e6:f0:fb:0b:93:44:88:a8:dd:82:2f:7c:ad:b4:
59:5b:10:ca:d0:d8:86:96:0a:97:f7:5e:1e:9d:5d:
41:0f:bc:63:91:ac:f8:c5:e6:d2:5c:24:6c:77:de:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:D7:C5:12:72:26:C6:FF:1D:E5:87:3A:56:1C:7D:4A:E0:17:D6
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a3:da:10:3f:d0:e8:48:b4:13:19:fa:94:45:9b:00:e5:a7:
f7:5d:33:1e:0e:71:c3:cb:9d:d8:63:d6:89:e5:d4:f9:dd:d0:
b4:34:48:e9:57:da:14:2e:88:9b:9f:1c:e5:07:d9:89:55:e7:
89:5b:e0:ee:49:9d:71:94:05:fb:68:78:87:35:76:f4:e3:c8:
7a:1f:87:2f:87:3e:85:89:86:7f:fb:8c:0a:c4:0b:02:69:da:
4e:2a:33:ad:79:60:f2:d6:68:f9:a6:2b:f3:72:b1:d0:46:07:
41:ac:71:44:81:03:57:56:12:cf:c8:18:bd:cd:be:40:6f:ab:
9f:e1:a2:83:01:2c:19:c2:0d:a8:de:4e:e9:6b:7b:b1:00:a7:
4c:61:e5:0d:d6:db:3c:9c:ad:29:40:0d:b3:44:5a:d9:9e:49:
1e:54:be:e9:f4:61:32:b0:da:2f:fb:8c:55:f7:db:f2:72:ec:
df:4e:9d:0f:bd:a5:bc:f5:58:61:02:84:9c:7a:a1:01:22:d4:
87:16:4c:a2:05:4b:8d:b4:c9:7f:54:12:f8:21:2e:f3:19:da:
7f:85:f4:9d:e2:db:14:68:29:01:1f:98:2e:80:6e:90:c9:20:
75:7c:a8:de:0e:02:8e:3b:c0:a0:92:b9:75:e9:c1:a9:70:a1:
e6:ab:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:19 2026 by rpki-client