Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: UTfTzdLh3HY2vMTMsIQIefhxQ/p8EwIF+zohj27SCc8=
Subject key identifier: 26:1D:F2:1F:48:B7:2E:A5:65:D9:CA:FB:26:98:24:C6:8E:33:E6:5D
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019CE2C755A94D41AC2A6D4A0EA794E32D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0B7B
Signing time: Thu 12 Mar 2026 16:00:40 +0000
Manifest this update: Thu 12 Mar 2026 16:00:40 +0000
Manifest next update: Fri 13 Mar 2026 16:00:40 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: UI+jCJ3Tdk225jsrKr0rCIREp3aE/VBGr8cRwu3Ne30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:55:a9:4d:41:ac:2a:6d:4a:0e:a7:94:e3:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Mar 12 16:00:40 2026 GMT
Not After : Mar 13 16:00:40 2026 GMT
Subject: CN=261df21f48b72ea565d9cafb269824c68e33e65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:2f:bf:35:f9:56:78:09:5c:24:d8:a7:d7:
49:c2:10:64:23:2c:b0:10:7b:ed:72:09:a5:ce:1f:
66:6d:b2:43:60:d3:62:4d:ff:8d:19:a5:83:3c:92:
0b:db:3d:0d:bc:25:6c:38:d3:65:fd:cd:8b:87:d8:
b5:4e:4d:da:31:61:63:39:4a:bd:33:45:2a:f0:62:
81:d3:76:96:fe:1d:a9:be:19:d2:bb:c7:c3:fa:ab:
6f:a4:1f:0a:5e:ad:24:79:81:ef:f6:96:a0:47:59:
42:92:db:b1:c0:c9:9d:2d:bf:95:c3:c6:c5:2a:90:
90:22:b2:52:f2:09:b2:f3:08:01:3c:51:35:b1:d3:
50:01:e1:c3:6c:ee:a1:4b:cd:75:79:88:d5:01:72:
fe:76:79:3a:66:8a:58:a4:89:45:0e:4d:0d:33:9a:
9f:b2:f9:3e:27:88:7f:fc:f3:c5:60:4c:c7:3f:4b:
29:fc:d0:81:0e:23:6d:b2:0c:c3:45:f0:59:32:41:
b5:21:68:b0:d5:d8:1b:74:91:e6:56:87:6c:1e:81:
69:03:c2:61:8c:ea:87:63:83:bb:52:be:5d:cf:1e:
e9:25:1d:16:c9:b1:6d:e9:94:ed:f5:c9:c2:a1:59:
50:ec:a6:6d:06:d3:ea:46:10:44:45:7d:9f:bf:e6:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1D:F2:1F:48:B7:2E:A5:65:D9:CA:FB:26:98:24:C6:8E:33:E6:5D
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:72:30:01:91:76:5d:03:75:e9:9b:66:b7:a7:91:aa:42:5b:
95:cb:bf:34:85:20:c5:91:ef:c9:c7:71:01:90:b8:3f:0f:f2:
16:29:73:20:8c:23:e3:16:1e:54:56:ac:c8:ad:85:e5:7a:f4:
f0:71:af:68:b3:93:b6:a6:5b:c1:27:5c:b2:4e:59:f0:43:3b:
ed:a9:dc:c7:7f:c9:60:c1:2b:5c:4f:eb:8c:21:e3:86:56:7f:
4c:57:5c:c8:bc:d5:7c:6a:41:00:dc:ce:9c:3a:f9:39:c9:7b:
83:b1:3a:57:82:b8:c2:3e:af:b6:b4:a4:60:dd:7e:83:4f:d2:
c2:17:8a:42:2b:d5:d9:6d:5f:7d:61:1e:b2:d0:62:fe:04:5d:
c2:87:83:63:99:f0:d1:80:5f:71:b2:f7:b6:67:96:36:40:20:
bb:3e:96:24:72:63:d9:81:31:8f:cb:9f:c4:63:27:3e:90:ba:
9a:5c:4b:73:76:bf:5c:bc:c2:fc:86:e0:91:0b:a4:cf:53:28:
63:77:72:4e:70:b9:96:67:7b:ab:0c:2b:16:3c:da:f0:bc:f7:
bc:c7:b9:df:c3:e0:3b:2c:67:f6:25:f5:19:6c:59:37:2a:40:
01:7e:04:4b:e7:30:13:52:73:27:fd:38:d9:92:79:02:91:07:
00:33:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:41:42 2026 by rpki-client