Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: hfVQR9AzOpGXKZoHDHlUvZcnBZyn3f7vXtxNeqEftM4=
Subject key identifier: D1:12:9F:C4:F3:2B:71:C1:DC:76:C1:CB:78:E2:76:FB:73:FF:F1:22
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019D37897D120B3DCD259B6BCDD03325537A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0F73
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=)
2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: j7qItPy9SDfIh3i68TlR9UkyLzFDbpYTF52nUab6rvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7d:12:0b:3d:cd:25:9b:6b:cd:d0:33:25:53:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=d1129fc4f32b71c1dc76c1cb78e276fb73fff122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:41:28:5a:ef:00:7a:d2:79:17:15:80:06:
7c:4b:1a:2e:cd:4a:a2:01:48:c6:5d:01:2a:89:90:
d9:7b:18:17:0a:40:1f:97:61:7d:87:d7:77:6e:1e:
6c:9e:9e:ac:1f:d7:00:a9:54:61:86:3c:65:a9:4f:
23:60:22:46:81:b0:94:e6:4f:33:39:3e:bb:05:52:
a0:4c:69:94:da:cd:6d:96:63:7c:ed:f9:8f:54:f0:
32:4f:b1:c0:06:b9:41:f0:21:cf:da:15:69:e3:4a:
21:15:f9:d3:46:a8:48:ba:c9:60:47:b5:ba:dd:fd:
e4:8a:12:c8:bb:10:28:0e:a8:a0:75:5f:b1:65:13:
6c:11:1a:bc:4f:06:cf:fe:60:61:0c:ff:24:3a:72:
c4:3f:e7:e5:da:8a:d5:df:53:3e:cd:b5:cf:cb:a2:
bf:de:56:92:05:45:21:16:43:81:95:43:e9:6e:b4:
ac:70:ff:eb:1f:ae:f2:e3:6b:51:e3:6a:ff:ad:c4:
77:c9:54:65:18:93:d3:66:98:92:40:b4:50:bd:f0:
a3:8a:f8:29:4a:f6:63:1e:0a:84:7f:53:88:73:54:
f8:be:d0:d6:13:79:cc:bd:eb:6d:4d:cc:b6:06:b8:
ad:ec:dc:10:ce:cb:a8:02:b3:16:b4:40:41:1c:6e:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:9F:C4:F3:2B:71:C1:DC:76:C1:CB:78:E2:76:FB:73:FF:F1:22
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:ef:22:73:3c:06:24:62:84:8e:ea:24:1b:2b:cf:30:20:
8b:e9:a0:45:65:d3:89:5e:12:db:a1:fb:c8:4d:48:b7:2b:65:
49:36:6b:d9:81:71:16:e7:86:a0:95:90:23:08:20:70:c8:74:
70:c3:e5:db:95:34:5d:28:7e:e7:a3:ca:60:0e:9d:c7:e4:33:
03:eb:88:c5:04:cf:39:49:b3:ba:c7:dd:bc:99:c0:e8:da:aa:
52:f6:71:15:1e:5c:de:ea:02:22:e9:3f:b9:93:76:8e:2a:dd:
68:37:ae:87:33:32:2f:42:24:bc:37:1e:00:e6:e9:fe:e8:53:
be:37:15:e2:30:00:5a:6b:e4:0f:1c:0d:43:f7:f7:a7:dc:1c:
9d:03:04:e5:94:7a:85:83:94:3c:0a:e9:44:66:7e:e1:16:12:
3d:c9:9f:f6:3b:39:ef:8b:a1:98:56:cf:7d:76:8c:09:7d:89:
32:95:24:f9:31:7f:71:64:36:0f:5c:6b:54:fe:69:80:2a:77:
02:25:13:c7:6e:3a:22:0b:38:74:f2:b8:bd:9f:ae:e1:a4:d5:
4c:b5:0a:99:40:19:67:d2:54:54:1d:ad:71:37:48:22:e8:d7:
f0:18:d1:7d:da:b1:d2:29:05:19:9a:b8:25:3d:43:27:9b:2e:
3e:22:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:51 2026 by rpki-client