Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
File: hcAE7tTPscJ2cTgiL_wJUooqXIY.mft (raw, json)
Hash identifier: JFmkkLs+1dDNUKDnKWuAcDJEDB9v60FVxiLMJxa0NRU=
Subject key identifier: 16:F4:C6:39:92:F1:02:59:20:19:81:0D:13:77:DA:CA:2D:B4:A9:76
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 019D3909C79E352EEACF5F894634C7EF6595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
Manifest number: 024D
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: 5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa (hash: Nj/dFE0ShVqEkO5zoMZ/0/zZii3em6nlg2XD7KAhuw8=)
2: hcAE7tTPscJ2cTgiL_wJUooqXIY.crl (hash: 2j9z4y4fsTE1/GFgHEfgWVMeuLmWa275a+Pac8uu81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c7:9e:35:2e:ea:cf:5f:89:46:34:c7:ef:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=16f4c63992f102592019810d1377daca2db4a976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:41:5f:f5:bc:ba:1b:d4:f3:73:96:9c:3f:
db:3a:a4:7b:0d:ae:75:50:df:79:f3:c0:c1:97:60:
f2:be:0c:7b:ef:71:3c:eb:f7:18:ff:ee:f7:26:e1:
c0:37:0d:4e:21:3a:20:bf:e0:7c:ef:9a:13:b1:c8:
bb:6c:49:f9:4b:63:d8:7e:24:36:9d:a2:03:e8:bf:
c8:55:f9:ad:32:14:23:7b:13:41:51:39:af:48:7f:
a2:80:f5:e1:22:7b:5c:d4:84:ab:f3:c9:60:a7:e4:
87:fd:b0:04:d2:89:28:2f:82:3e:ac:a1:b3:2c:a2:
aa:e8:d1:e4:4b:ee:96:b4:80:c4:31:49:ff:a2:2d:
6a:99:5f:c8:14:3a:f5:e0:79:59:f0:0e:35:44:a8:
f0:d6:f9:e0:13:cd:41:99:da:6e:e0:41:09:4f:86:
10:21:c1:39:22:8c:dd:f7:d6:27:2e:65:7c:00:21:
c6:7a:8a:96:16:c0:43:0a:9f:44:c2:14:36:8a:10:
26:d4:35:88:38:03:83:be:00:97:6d:69:88:2e:cc:
a8:2a:f8:d4:ca:cd:06:2d:41:31:32:ce:e0:47:24:
1b:44:0a:0c:c0:9e:f3:0e:a8:a7:d4:ae:36:6e:ff:
74:ec:24:02:fe:a4:1c:1a:71:7c:fb:d8:b2:3f:47:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:C6:39:92:F1:02:59:20:19:81:0D:13:77:DA:CA:2D:B4:A9:76
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:05:99:14:d0:5d:91:52:cb:f0:56:d9:db:60:0b:79:0a:f8:
4c:cf:c1:94:39:6b:2f:76:cf:71:1a:93:b9:13:6d:0a:f2:35:
92:ca:a8:e3:eb:7f:a0:c2:d8:23:4f:a0:7a:af:ea:69:87:91:
82:99:27:b0:a7:fd:d2:3b:2c:d6:99:22:8d:34:42:7e:31:aa:
c3:f7:7d:c7:89:8b:0f:f9:f2:29:de:4e:37:fb:3b:93:55:51:
13:3c:bd:c6:5c:cc:cb:4c:33:8a:9e:50:bd:37:1a:1f:93:d0:
c5:26:c5:88:65:62:05:0d:1e:9a:d1:d6:9c:35:56:e4:39:2d:
16:62:2c:2d:a0:8d:6f:53:d4:77:4f:ad:ca:e1:db:d4:14:a1:
5f:b8:00:30:dd:82:8d:aa:34:5d:3f:6b:b5:e2:40:a0:61:fa:
67:e2:76:68:0b:ef:cf:f4:a3:ab:05:b4:4c:8f:35:2e:c5:5b:
24:5a:f9:e5:de:26:b8:39:0c:0e:e7:98:2d:5d:c7:72:e3:a4:
4b:15:71:0a:42:aa:ac:f2:64:3f:c3:9b:b9:c7:de:93:b7:59:
54:7a:88:6f:ec:a0:1b:d0:d1:20:28:2e:d1:0e:c3:bc:0b:e2:
f4:61:27:5e:33:3c:0f:39:f9:fd:d5:50:09:10:ba:22:0d:ee:
5f:e5:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:52 2026 by rpki-client