Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: rsP9L9WbDA/f4QwM7O+QZy2tVvMb06c0LfruJGsGYF4=
Subject key identifier: F8:08:DD:D6:93:B9:C4:0F:46:0F:72:8A:6E:B7:24:DF:65:AE:63:A6
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 019D37532D607DD5AB0B588A940762B0D23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0B1F
Signing time: Sun 29 Mar 2026 02:01:31 +0000
Manifest this update: Sun 29 Mar 2026 02:01:31 +0000
Manifest next update: Mon 30 Mar 2026 02:01:31 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: YWPIzwaldYDGU9J+gVCPT0dNv7EatX8T3fR8dMET7tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2d:60:7d:d5:ab:0b:58:8a:94:07:62:b0:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Mar 29 02:01:31 2026 GMT
Not After : Mar 30 02:01:31 2026 GMT
Subject: CN=f808ddd693b9c40f460f728a6eb724df65ae63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:25:a4:1d:9a:dc:33:70:5c:72:43:9a:13:
90:79:43:c9:f6:c8:fb:e3:4a:b7:99:73:29:36:8b:
84:bc:62:48:02:be:0b:da:45:5f:ba:d4:f2:96:fa:
73:2b:bd:f1:c4:06:4b:7a:36:80:ea:d5:38:ea:f7:
82:96:02:90:79:57:a2:8c:b5:b1:eb:ad:a8:95:49:
c4:01:ad:0c:04:19:17:ac:f0:42:5a:0f:2a:e9:ab:
ca:b8:fe:e6:a4:bd:d9:54:23:1e:62:e0:0f:c1:36:
bd:bb:a4:de:3a:18:ff:de:1c:8e:43:1e:27:18:9d:
0b:da:73:dc:2a:e5:c4:0c:ab:91:b8:5d:27:e1:62:
21:da:33:d1:67:b1:8c:63:ca:bc:1f:2b:7d:5c:8d:
b3:49:b2:0c:df:87:cc:75:77:88:c0:3b:52:f2:89:
a3:14:5b:ab:83:9d:c3:89:08:e8:17:ba:1e:a8:06:
5e:c5:f4:5c:7a:13:f3:b6:82:a2:09:58:63:dc:49:
1f:12:84:85:40:fd:26:01:78:0a:43:ab:07:aa:2c:
d5:3c:98:cd:53:66:52:59:26:16:5c:44:ec:d6:2d:
d5:e2:97:b7:5f:d0:17:a1:30:13:90:f7:4b:fc:80:
9a:f6:d0:6e:8f:57:22:e4:b2:ae:23:49:2c:12:f7:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:DD:D6:93:B9:C4:0F:46:0F:72:8A:6E:B7:24:DF:65:AE:63:A6
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:60:51:0a:6b:c7:95:cc:8a:57:c2:1f:f6:2d:6c:70:47:
7c:5b:ff:b5:2e:9a:83:6e:76:1b:e8:15:c8:ea:58:33:03:fa:
f2:91:07:44:fc:a0:e9:70:9c:14:a8:8a:59:d9:5b:50:32:68:
8a:d8:46:62:89:8c:a4:46:de:34:35:fe:97:f6:4b:43:0a:cf:
07:b7:25:c1:c3:61:ae:b4:71:5f:19:41:3c:7a:83:84:a0:af:
df:80:65:a1:f7:68:d7:48:f1:3b:7b:08:90:3a:a5:6f:cf:78:
81:1a:bc:67:3d:cb:9e:62:12:c8:76:95:3e:a2:67:01:15:37:
dc:e6:9d:0a:70:38:6d:cd:de:7b:5a:e9:ee:1e:e4:9c:1b:77:
1f:6d:46:b7:3b:f8:2c:1e:50:6d:65:b7:ed:bf:2c:4c:d7:ec:
03:20:a2:1c:aa:7c:8d:50:79:9f:2d:27:6f:fd:88:a4:6b:74:
7b:01:fb:cb:15:11:2e:fd:b9:3c:30:81:9e:34:1d:aa:17:71:
bf:6d:d7:38:1b:0b:b7:2a:4f:e3:05:57:65:f9:67:fe:a8:67:
4c:a4:69:73:27:14:17:11:20:f6:23:5f:cd:e9:b0:3e:7d:7a:
00:45:cd:ff:61:4d:f6:a8:86:39:c5:c4:72:5c:05:9e:27:df:
7a:10:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:34 2026 by rpki-client