Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: WinPfbAaFKT32dnXCdmzYW2qsISEprHxMncONWZxC2M=
Subject key identifier: 5A:09:1E:1E:EC:6F:64:E2:62:04:8F:CD:80:5D:6F:93:97:94:11:B0
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019CE47EFDCCB8867CC1E510E0C565D5F0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0DDB
Signing time: Fri 13 Mar 2026 00:00:53 +0000
Manifest this update: Fri 13 Mar 2026 00:00:53 +0000
Manifest next update: Sat 14 Mar 2026 00:00:53 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: KObpRAij+R07gzlpk37cOs8lnOgAe34QWykKAOQvVwU=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:fd:cc:b8:86:7c:c1:e5:10:e0:c5:65:d5:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Mar 13 00:00:53 2026 GMT
Not After : Mar 14 00:00:53 2026 GMT
Subject: CN=5a091e1eec6f64e262048fcd805d6f93979411b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:10:fc:35:08:50:0e:08:d8:d0:f8:61:ac:
05:8c:c8:92:da:a3:f6:e8:07:3c:9e:51:ab:c5:8d:
18:59:13:64:a9:ab:db:45:5a:e7:43:6e:9a:1e:28:
67:65:70:35:b4:1b:55:3b:4d:06:a5:e6:7e:de:20:
45:02:ba:94:46:f8:ff:56:21:0a:48:0a:28:dd:31:
08:86:e9:e5:f1:dd:79:2f:a5:b8:97:d9:01:5e:3c:
6d:12:13:86:f7:21:34:91:9c:32:e9:d7:26:6d:53:
ac:3b:ba:ab:34:12:65:d4:d2:87:df:bb:dc:f1:4f:
36:4e:43:00:d8:e5:92:12:c1:b9:e6:fd:c9:c9:2c:
c9:1a:1c:a2:39:2b:26:54:8a:f3:b1:53:b0:0a:bc:
ba:0b:23:d5:7e:1e:ad:8e:8b:8f:1a:20:fd:49:cc:
73:08:61:0e:5a:22:d3:98:dc:f2:6c:bf:ae:57:71:
0f:d4:ca:c2:08:78:04:ea:74:52:b1:ca:de:6b:e8:
28:eb:10:4b:4b:7b:7e:a7:16:65:32:95:8f:28:90:
46:63:ed:1c:ee:2e:b0:57:f4:dd:f4:f7:17:11:0d:
11:e5:73:93:ff:f4:63:f5:c2:6d:4e:69:d3:88:2c:
53:f2:00:5a:47:f7:0e:17:cb:97:e8:21:ad:84:f8:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:1E:1E:EC:6F:64:E2:62:04:8F:CD:80:5D:6F:93:97:94:11:B0
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:1d:a4:55:a1:3a:0f:ea:f1:bc:eb:66:95:98:12:38:ff:
ce:c2:1c:1a:4a:ff:43:6b:da:b5:8a:cd:aa:ff:72:e5:d6:91:
27:66:63:c8:f4:ef:e0:58:9b:71:68:21:86:e9:0e:0d:95:e2:
32:73:4f:59:11:5c:c4:f6:83:5a:73:34:a7:75:17:2f:4e:29:
51:26:26:b5:28:11:05:aa:84:d1:73:c0:8e:0a:37:0d:2d:fe:
f2:d9:54:21:c7:7c:42:8d:29:45:47:96:9c:4a:c5:93:72:f0:
80:ef:6f:97:08:5c:c4:da:bc:8c:49:98:1f:b3:90:35:c0:45:
33:92:d1:c9:2f:6f:f0:1a:93:1a:51:20:18:33:e5:35:de:2e:
0c:19:57:40:2b:7a:22:fb:52:b8:75:23:ca:d3:79:c0:cb:e0:
1c:b7:ff:68:54:d1:4f:e0:f8:55:6e:b6:a0:0f:db:22:09:9f:
e3:e0:5a:cd:c5:e2:c5:a5:3b:10:f7:ca:6a:8f:3e:9c:c0:79:
f0:c4:0f:68:52:3d:77:fb:63:9b:5e:58:8d:bf:60:26:4f:44:
1d:0e:ee:57:3e:c0:16:01:8f:ad:68:e5:bc:03:d1:ab:64:ad:
9d:c8:e1:01:9a:d2:a8:ef:46:d2:72:4c:90:7d:d7:57:57:78:
0c:2f:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:28:42 2026 by rpki-client