Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: HkJec8NkdMSSdCRqqYsHkRFDa9/iefj/CxKblYfnJVc=
Subject key identifier: AF:E8:8D:B4:8E:64:FA:1C:12:6C:72:0A:78:23:58:9D:25:F2:FA:68
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 019CC6E3114521C7111D132869A8B838F4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0B8E
Signing time: Sat 07 Mar 2026 06:01:35 +0000
Manifest this update: Sat 07 Mar 2026 06:01:35 +0000
Manifest next update: Sun 08 Mar 2026 06:01:35 +0000
Files and hashes: 1: 2k061tGHc03Ey0V3NX4-GnPnNBc.roa (hash: cqhlKMqnXJOJCr7N4xEDssiNgQoWfirNtnOj+DZf3Xk=)
2: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: jpvUEJMS56X7rBi7rwmzqrpf/0i0Mp6pDyeF5bZVcfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:e3:11:45:21:c7:11:1d:13:28:69:a8:b8:38:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Mar 7 06:01:35 2026 GMT
Not After : Mar 8 06:01:35 2026 GMT
Subject: CN=afe88db48e64fa1c126c720a7823589d25f2fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:cb:62:56:aa:89:4d:6b:fb:19:b1:3a:b1:
a3:3d:e9:fb:93:8a:c8:22:a4:ab:43:0e:b1:4e:55:
7f:65:0c:9a:4b:41:7b:bb:3b:12:f5:77:38:dc:a4:
15:63:74:d1:b9:73:9d:d2:7d:37:ee:75:a6:36:83:
a2:e8:70:32:ef:74:a8:95:27:53:57:ed:f9:d1:84:
b8:d7:99:c2:d3:ee:f6:3e:cb:f2:f3:22:6e:67:13:
f9:c8:e1:9e:27:49:a1:46:d6:83:6b:b0:77:18:d9:
43:95:59:64:a6:80:57:78:20:e5:f7:e2:03:80:8e:
be:24:d8:6c:11:fc:1c:df:0a:a8:87:31:94:1a:fc:
03:e3:0e:b1:82:70:39:6a:dd:c1:dc:a1:fc:4a:3a:
78:58:38:bb:37:4d:8b:06:ae:54:bd:7e:bc:37:e8:
e3:b1:9e:87:3c:eb:77:c7:ef:3c:b0:c7:cc:f7:3b:
fb:5d:72:36:74:40:7c:3e:2f:11:a6:61:0f:dc:f1:
0b:f5:5a:ef:c3:01:48:8a:61:02:6d:dc:ee:d5:b4:
15:29:2e:c7:b1:fd:1b:fc:73:2d:bb:88:a7:83:8d:
24:da:49:15:59:68:a4:35:84:c7:ff:79:48:9c:d6:
46:e2:2d:40:f0:35:74:36:37:ba:66:5a:7f:61:27:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:8D:B4:8E:64:FA:1C:12:6C:72:0A:78:23:58:9D:25:F2:FA:68
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:6b:a4:c7:f4:5e:76:f7:7a:ed:16:88:7c:13:1b:db:96:
3e:e1:d4:c6:f1:e7:a4:62:3e:41:d9:83:0e:67:89:90:95:45:
83:0f:9f:fb:73:93:49:61:b0:7c:17:fe:1e:f8:19:bb:e8:06:
65:11:31:cd:25:4f:8e:1b:4c:a2:2a:4e:db:22:c1:94:b2:db:
52:f9:14:77:65:e7:31:0d:e6:6d:47:1b:47:d8:82:c2:d6:c5:
7e:3f:8f:54:7b:9c:55:5b:cf:14:66:6e:02:c2:82:fa:42:58:
87:72:92:eb:28:a4:af:a2:25:0e:7b:00:7c:06:15:eb:da:da:
d5:45:2b:46:19:fe:52:1c:1f:ab:da:f1:78:ae:cf:64:cd:11:
5b:9d:31:eb:63:18:79:29:60:1f:cb:09:87:e2:07:8b:94:fb:
1e:0d:a0:10:89:87:34:88:a7:ff:af:33:4f:4b:d5:5f:9f:24:
1a:30:a3:aa:64:fd:25:d9:7d:96:42:73:e4:d1:df:39:8f:9e:
cf:2b:a3:01:8d:8a:29:a2:bc:11:21:fb:3a:b1:81:42:b7:d0:
8c:26:ad:10:5b:c6:55:4b:21:14:50:82:6f:e8:f1:59:a3:9d:
db:8b:98:d8:84:4f:d6:fb:f0:5c:5c:af:b7:71:39:a9:ae:dc:
85:6f:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:42:46 2026 by rpki-client