Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: g9oCn2Im9EZIOgd5rEZfbEJ93ay57lIOSnMEVDAB5+s=
Subject key identifier: BB:E0:2C:2B:83:23:85:22:C8:C5:74:76:24:9F:D7:76:8D:A4:7E:E9
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 019D2EF3EC8EBD3C03E3A9E858AEF3B055DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 133E
Signing time: Fri 27 Mar 2026 11:00:30 +0000
Manifest this update: Fri 27 Mar 2026 11:00:30 +0000
Manifest next update: Sat 28 Mar 2026 11:00:30 +0000
Files and hashes: 1: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: Flsw2FQGvJSQSHZwGDWOsYMUaIa1Lp89Ap/OVwN46zI=)
2: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (hash: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:f3:ec:8e:bd:3c:03:e3:a9:e8:58:ae:f3:b0:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Mar 27 11:00:30 2026 GMT
Not After : Mar 28 11:00:30 2026 GMT
Subject: CN=bbe02c2b83238522c8c57476249fd7768da47ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:05:98:2e:d9:2e:f9:78:f1:98:15:53:88:
b1:2c:6f:ea:55:a9:dd:c3:95:bc:e3:c6:46:f5:8a:
b5:12:ed:dd:90:5b:e0:0e:f1:85:1d:b2:7d:bb:53:
22:50:26:7b:4b:35:55:09:13:d6:10:88:d0:e8:1e:
d8:46:3f:a9:17:4f:17:9c:85:58:81:6b:75:c2:2d:
5d:1d:ec:a7:6f:1d:22:64:c7:ef:6d:3b:69:0c:92:
a7:39:3f:d6:11:be:ab:f1:18:b5:3f:94:e0:be:bb:
1f:08:63:2e:b6:4c:94:be:57:0a:9c:91:c2:67:b0:
31:d4:59:b3:b2:ad:42:5e:d6:77:37:17:2e:91:c5:
79:95:67:ce:02:02:a7:2d:46:26:e2:65:96:8a:ae:
03:8a:49:e8:46:00:96:d7:73:85:c1:21:d1:ce:58:
3f:39:de:9a:8c:6b:4b:87:e1:11:91:38:76:25:23:
da:51:17:fc:75:86:4e:59:3c:75:d4:32:65:a0:f3:
51:17:57:30:f9:62:7d:83:22:d0:2f:c3:e7:de:f1:
f1:d3:fe:b9:aa:1a:cd:fb:1b:58:8f:95:5b:11:d4:
a8:b0:4c:13:67:cf:c8:ca:04:27:4b:17:ca:f4:29:
b3:9d:29:3d:40:b4:b6:b7:b2:71:bf:5c:39:92:f7:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:2C:2B:83:23:85:22:C8:C5:74:76:24:9F:D7:76:8D:A4:7E:E9
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:9c:35:dd:95:68:32:2f:c2:9d:a1:a6:49:29:23:54:25:
66:cb:a8:f4:68:25:73:cd:94:19:40:6f:30:6a:73:07:4d:16:
1f:41:d2:a4:a8:c6:07:1f:dd:7c:23:f7:de:bc:ce:06:15:4d:
04:3b:08:ed:96:7d:61:34:24:2a:63:36:f9:00:26:29:ea:88:
b6:52:fc:fe:44:a8:c2:c7:f0:b1:e8:4d:47:b5:f5:4a:36:d5:
e6:42:7c:90:0f:1e:92:0a:53:7b:42:e9:fd:28:ce:b1:c6:5d:
80:6d:e9:6b:e1:f6:d2:01:90:57:c8:db:26:5c:64:83:4c:20:
d1:87:9f:d5:8e:29:be:8b:2c:7a:5e:a4:b3:e3:33:22:59:73:
6e:cc:e3:d2:4c:a9:f1:6c:9f:77:5b:14:93:a5:b1:5d:06:d6:
e6:7d:2c:e8:4a:25:68:e9:52:53:b8:ff:dc:b9:dd:3b:6e:9e:
b4:0e:6f:5f:74:36:4a:ca:9b:55:d7:a2:60:9d:74:1c:99:fa:
03:ae:b0:67:a1:8b:01:d2:72:8f:5c:6f:8c:a0:d7:e9:f2:22:
22:1e:c8:38:9a:35:29:18:ad:69:03:f7:3d:69:7f:a3:d1:b4:
e0:c8:6a:58:e4:f8:53:91:1c:18:02:05:de:e3:62:82:a0:5a:
57:0f:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 13:00:23 2026 by rpki-client