Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: JKdanjIFw89rSNl5wBusaj0U+sRp354yAH/saWOBTFs=
Subject key identifier: 78:1A:83:D3:E5:F7:42:E6:F8:84:0E:97:19:86:93:13:03:6C:78:05
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 019D3A8AA37502CB86CEFA84D74B8CECF250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 17:00:57 +0000
Manifest this update: Sun 29 Mar 2026 17:00:57 +0000
Manifest next update: Mon 30 Mar 2026 17:00:57 +0000
Files and hashes: 1: AUJqipu3yyHL71qKjNkR8O6zHZk.roa (hash: MBekRC7/l4satOgSzoeiW264yhGwWkcNQASr2IourAA=)
2: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: IPZ83laOqhsyN20Y9uVyiA99dniUZoQNLWgm/ywe0cY=)
3: tcpzIe_pjPXzHyr7azFQbFyZen0.roa (hash: +9WrVu+TeVKO3brb/4DCjwpgqdCP/iS9uN4mB6tGNMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:a3:75:02:cb:86:ce:fa:84:d7:4b:8c:ec:f2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Mar 29 17:00:57 2026 GMT
Not After : Mar 30 17:00:57 2026 GMT
Subject: CN=781a83d3e5f742e6f8840e9719869313036c7805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:6e:c2:ab:cf:7e:f3:a8:09:60:8a:ff:9a:
9a:97:d9:70:4f:30:81:17:f5:c6:5e:3c:3f:b2:38:
1b:9f:7b:84:bb:3d:eb:d0:83:8d:2e:2e:2b:3c:04:
52:69:e7:d6:d5:8e:db:3f:16:0e:5b:a7:c2:0b:77:
43:a4:6e:8a:d1:11:af:c0:47:75:99:10:95:f1:c0:
0e:1a:1d:3f:7d:ac:5b:3c:98:2e:c3:cb:7b:08:2f:
86:6e:e9:d8:8d:fd:1e:c6:4b:1f:d3:25:77:d9:c9:
2e:7a:f4:eb:98:5f:a2:3a:4c:ad:5c:44:fa:15:5b:
3b:ff:70:87:9b:2d:ed:d3:bd:a0:6a:15:49:6e:34:
d6:b4:62:2c:cb:23:c7:a5:9b:41:7a:61:11:4b:58:
3f:eb:3f:7b:6a:1a:37:b1:65:40:7f:c6:58:70:3b:
97:82:be:d0:5c:23:c7:9c:97:7f:ed:b3:b3:c8:63:
36:eb:e6:01:d1:34:8f:7d:6f:df:6d:cf:34:19:09:
fa:eb:6e:2a:b6:e4:be:1e:c8:6f:9b:fd:82:86:1b:
8f:47:3c:d1:e4:aa:77:5d:77:7a:6c:5e:82:6b:d1:
94:a8:00:ef:8e:00:5a:1f:d2:56:5c:71:07:cf:e9:
bf:f8:32:1d:34:b2:10:99:de:c1:d6:82:b3:24:65:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1A:83:D3:E5:F7:42:E6:F8:84:0E:97:19:86:93:13:03:6C:78:05
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:41:87:de:00:bf:31:8b:9a:ab:68:ba:69:73:d6:f5:e8:72:
91:37:af:d5:e9:b5:cc:d1:74:0b:11:fc:42:57:3a:4e:5b:8e:
3f:ab:38:1e:d1:c1:79:eb:7c:a7:85:19:8e:20:af:f3:c2:19:
ae:4a:bc:62:70:35:d3:61:33:32:b2:cc:c9:c5:0b:2b:a8:a0:
80:eb:b5:3e:91:72:cf:44:d6:69:5b:d7:4a:19:9a:ad:df:ec:
9b:68:b7:4e:ab:d2:db:ae:36:57:41:b7:d5:f7:a5:06:f6:b4:
ef:cb:14:3b:ea:13:28:cc:c3:9c:ad:d2:20:5c:87:c0:15:c6:
f6:6f:0a:ba:6e:bd:a1:14:39:56:af:37:1e:58:28:7f:e5:7a:
76:e0:9f:76:9f:22:dc:da:37:ac:7d:4a:bb:88:04:00:0c:a2:
85:bf:98:dd:ec:2f:3b:5e:9a:c6:ce:87:be:b6:c7:f7:98:7c:
73:b8:3d:a8:b4:12:21:61:ce:5a:78:d7:a4:24:e2:89:e4:6d:
39:b9:e3:8a:aa:0b:ca:01:04:e4:f3:8e:92:82:1f:2e:99:c3:
5b:40:d0:c0:bf:f9:ae:7a:3c:ae:1a:28:bc:43:1d:68:52:21:
f3:5c:40:0b:05:b9:23:da:e0:c2:fa:c2:e5:c1:28:53:6d:69:
20:0e:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:54 2026 by rpki-client