Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: SbQH/WIauhD7gXws5Hbgg+MNz596PQqAvQvjxIbYIXg=
Subject key identifier: 34:D6:5B:D7:5B:5D:89:2E:55:94:8F:76:70:4F:1F:96:57:B4:68:63
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 019CE4109901F18DDD0C11DA7E4D21348C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 0661
Signing time: Thu 12 Mar 2026 22:00:18 +0000
Manifest this update: Thu 12 Mar 2026 22:00:18 +0000
Manifest next update: Fri 13 Mar 2026 22:00:18 +0000
Files and hashes: 1: MvxuGFgJO1HcqJcQXHExSwR9U5A.roa (hash: gwjNOond7GjnBlbK7xaPErigbWlHmn1g1Fd3dZwf6oE=)
2: anEMLhBSR-ZUhDs4y9V3c82TLb4.roa (hash: JlsU25C/lCNOkItP54ekDC6SLLrLG7JIzKd/WFTWKEE=)
3: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: mYGz3p90QHhc0gL5oIV/hSX7Nd+HdRMZajb6nhw/P8U=)
4: wim6z6Qps0aBjMJXEvJ79OHVt2I.roa (hash: Xvtl1HpjZETCKdBHr+BV103OhtUw84OetTQurPvOKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:99:01:f1:8d:dd:0c:11:da:7e:4d:21:34:8c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Mar 12 22:00:18 2026 GMT
Not After : Mar 13 22:00:18 2026 GMT
Subject: CN=34d65bd75b5d892e55948f76704f1f9657b46863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:93:c7:c1:ab:c9:d5:e5:b7:38:e5:ae:03:
8e:11:86:db:ac:11:b6:58:da:43:ef:44:40:c7:0d:
19:af:c6:87:d7:98:c8:80:53:ee:36:46:df:0e:5b:
65:55:17:04:48:32:95:95:44:85:6e:02:88:79:0b:
56:88:03:9d:ef:d3:01:00:54:66:e7:1f:96:e1:71:
97:3d:3c:14:50:08:f2:b5:cb:93:c1:b2:dd:91:e5:
64:13:84:ab:3e:fe:64:8d:35:e7:e6:65:59:5f:79:
5b:3e:2b:5e:21:ac:42:ed:66:ab:c2:69:19:40:da:
80:9f:f3:6c:b2:19:86:2f:e2:2c:51:e0:ee:3f:04:
e4:6c:a0:4e:be:f1:23:0b:c4:84:11:51:a5:8d:ce:
b8:07:5c:a1:f2:98:e0:d2:ce:ca:d4:62:22:12:bc:
ab:bf:02:7e:4d:8a:ad:14:a5:21:b9:6c:56:34:fe:
f5:ea:e3:e3:2c:65:42:60:34:e8:4f:42:34:b4:cb:
f5:94:18:32:f4:c9:53:bf:8f:ce:03:85:b4:5e:ff:
8e:2b:fa:ad:43:b1:d3:05:c9:27:1e:61:82:f6:99:
dd:4b:0f:3f:8f:2a:9c:0e:a1:56:18:21:b8:84:36:
1f:8c:4c:4b:75:8c:01:84:75:04:d0:36:27:f5:55:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:5B:D7:5B:5D:89:2E:55:94:8F:76:70:4F:1F:96:57:B4:68:63
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:90:b5:96:e3:b5:da:fa:53:6b:2b:84:87:e8:e7:4b:e3:25:
78:53:f8:b5:6d:dc:aa:18:96:44:e4:f6:6f:0e:73:b7:16:f0:
38:d2:2a:e7:de:65:59:af:a8:66:ab:29:15:ff:02:2c:19:98:
3a:84:44:e1:83:b1:65:2a:f8:b1:68:35:96:d9:da:b5:cc:b7:
a0:17:8a:30:04:87:ef:5c:6c:76:c0:34:a6:24:0a:dd:3d:ee:
58:ff:00:29:79:5e:d0:30:2a:50:36:85:d1:a4:06:9c:ec:c9:
05:dd:35:97:cb:c6:ec:97:0e:e5:67:23:f0:09:76:01:04:70:
72:66:8d:f5:dd:87:f2:fc:b9:a6:32:e1:2d:28:1c:8f:25:a9:
f4:b3:1d:c1:39:dc:ab:f4:88:1e:17:82:98:9b:04:a3:0b:73:
fe:34:73:73:bf:41:72:28:ea:bc:7d:b5:b0:6a:0e:e6:00:cc:
74:19:9a:7f:22:ad:15:6c:48:bb:23:ea:ed:0a:09:3d:c2:c4:
4f:0b:d6:fe:0e:58:13:3e:2d:51:71:43:95:b0:1e:03:2a:e2:
7f:1c:90:b3:61:90:80:30:3d:cc:30:9b:1b:69:db:53:36:ed:
73:09:a5:ce:7f:02:56:7b:be:a5:1f:3c:52:f7:ba:76:33:4d:
2d:6e:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:13:22 2026 by rpki-client