Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: K6H/bM42R/ST5lEwo0RCZUSgOGOdKUBphr3dnvA4L3k=
Subject key identifier: F4:9C:7B:E1:BD:FD:F6:E5:6F:EB:B8:06:A7:78:2F:3F:BD:B6:74:82
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 019D37F6EE707AC2D70544ED858424172F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 070B
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: Hwz33O3GEhUPQENUYSweMk7o9iA.roa (hash: 1HTvbTcGZV1b8MpfW8YABdSoijcVRUnqTe0YqNWbdPc=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: lAUU2Fjhaw1T0hEZHbMqb1q+XVfz/Uo2Xe6yrcFH6Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ee:70:7a:c2:d7:05:44:ed:85:84:24:17:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=f49c7be1bdfdf6e56febb806a7782f3fbdb67482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:88:b9:b4:48:ff:cb:17:a6:bc:5f:57:ee:
ac:70:b4:b3:1d:ae:a3:c5:66:ab:46:00:b6:8b:a2:
63:19:ad:e3:6b:f3:af:63:26:9f:38:3c:16:8d:96:
85:b6:c1:c5:cf:a4:9f:33:85:f6:57:9f:20:65:eb:
55:95:8e:7f:33:80:13:ce:d5:4b:16:2a:9d:72:1a:
6a:7c:87:eb:7e:23:db:ed:12:0e:00:9e:35:ec:38:
93:fd:1e:fa:87:f8:d5:1c:19:fb:88:b3:aa:2a:13:
68:a5:08:b8:4a:eb:15:68:8d:c6:9c:9b:14:41:a9:
f0:59:61:ea:0b:59:2d:2d:ce:0e:91:d9:2f:0a:23:
ab:ce:7b:28:46:e0:b4:9d:09:87:17:7b:0b:ea:37:
2e:cb:1d:04:16:72:15:77:32:1f:dc:58:7f:68:e8:
b1:a8:4c:26:ac:7a:80:eb:28:c4:c8:b8:94:77:7d:
37:94:48:8e:57:2b:d4:46:47:15:b4:bd:99:f6:50:
94:bf:9c:c2:da:be:b2:cc:cb:f3:05:05:92:aa:76:
35:79:95:f3:b4:7e:41:54:f1:26:13:0c:c5:d6:90:
f8:6d:4e:57:ec:54:d8:fa:35:87:7f:e8:9a:ea:f2:
9b:07:4c:be:5b:7f:73:ef:62:59:14:f7:62:1e:67:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:7B:E1:BD:FD:F6:E5:6F:EB:B8:06:A7:78:2F:3F:BD:B6:74:82
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:37:8b:e4:a6:1c:f7:ca:1a:a7:35:d6:bc:1d:c2:56:f2:f8:
d6:eb:a3:ee:71:be:e0:9d:82:cf:72:12:87:bc:48:72:56:58:
b3:82:43:15:42:92:8e:30:19:97:d0:55:ce:6c:25:45:61:c8:
8b:bf:8f:6b:cf:97:8e:7a:2d:f5:d0:28:ec:00:d3:51:9b:d4:
e4:76:45:9f:89:73:ad:c8:18:94:d5:d3:f3:00:8e:5f:6e:8b:
83:08:61:61:8b:0c:aa:10:2d:c9:18:f7:f9:80:f5:99:e2:2e:
48:6a:5e:ce:1b:4d:68:f3:27:c9:44:d1:4c:26:6c:1a:61:61:
2d:ac:8a:37:c3:47:05:ab:8f:0e:65:4e:52:ed:76:81:7a:34:
ec:52:82:fa:df:cf:ff:82:5a:2b:a6:eb:9a:5c:8e:36:df:d9:
ee:ee:95:2b:cb:82:a9:9e:36:71:a2:02:c5:34:ca:d3:55:34:
c5:52:34:ac:13:59:67:46:51:e2:2a:c4:c3:77:a2:da:18:14:
a0:69:d7:2b:33:b7:93:86:35:d1:a0:bb:5c:64:3f:eb:e9:b0:
96:e0:58:6c:30:e0:57:4e:12:63:58:19:51:d9:af:ce:12:1a:
91:23:06:32:3c:69:40:cc:2d:45:96:cc:bb:5e:66:53:96:62:
fb:fe:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:57 2026 by rpki-client