Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: jECdZQ3iXK36LAuawwFXBDPWA9d+U1g74s4f1WentW8=
Subject key identifier: EB:6F:97:4C:2D:0B:4B:3B:E2:98:FC:6A:E1:B0:DD:B2:5C:7A:16:83
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 019D39411C40BCF0050580399784BBA00242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: RFVKCx7jKwj7HKFsLFwChol4Lkk.roa (hash: mLVKAu+YBzfWtWJSV4oLSkpIAi/5IO93e0+wM/7mAaQ=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: G9VydIc3HeL2+xP6qReebvg/8m28UB9LqpRB7jQVSqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1c:40:bc:f0:05:05:80:39:97:84:bb:a0:02:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=eb6f974c2d0b4b3be298fc6ae1b0ddb25c7a1683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:f5:2a:24:1d:51:c4:41:c8:7e:03:d7:1e:
56:05:3c:f4:9b:4d:16:95:05:ac:61:03:f6:24:e0:
81:3a:14:f9:22:84:81:c1:37:61:48:b7:2b:e3:93:
ea:e3:30:b4:53:62:6e:20:86:f8:15:57:df:23:8d:
9e:4d:41:7b:33:01:8a:fb:b1:e4:ac:9b:37:9f:89:
6f:de:b3:c6:81:ea:ca:01:da:ab:de:c4:95:21:8c:
13:db:b3:d5:07:a0:d4:a1:7e:b3:cc:ba:f9:55:f1:
98:c4:7d:a5:0b:49:4f:25:e7:dc:b7:fa:9b:93:f1:
7d:9b:64:4d:57:7c:f3:17:0e:86:6d:64:5e:08:ab:
86:d3:e7:5b:fb:2b:4d:50:e7:69:e1:b2:00:7f:c1:
19:96:53:82:69:42:38:62:f5:1f:29:2b:14:5c:bf:
ef:84:40:06:81:d6:6a:e3:46:5b:fd:fc:04:f1:38:
54:9f:f9:66:bc:20:20:33:1f:03:50:20:22:ba:aa:
82:9e:c2:c2:b8:8e:22:22:8f:ec:37:83:e8:94:87:
64:6f:8b:6f:cd:3c:8b:ca:5e:1f:05:33:f9:d7:3d:
9d:0f:bc:0b:64:e9:ec:38:3e:92:f4:b8:da:71:a8:
b5:e6:84:8b:7e:54:b5:18:aa:db:b7:f4:aa:c7:66:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6F:97:4C:2D:0B:4B:3B:E2:98:FC:6A:E1:B0:DD:B2:5C:7A:16:83
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:00:ad:9b:56:f0:d7:af:da:ed:a4:83:97:ed:9f:50:2a:
c3:e5:3b:96:95:dd:6d:4b:f9:5f:7e:bf:45:ff:cc:67:02:96:
e6:91:c3:84:7f:d2:be:14:5d:44:b9:61:52:fa:eb:3c:81:fb:
43:7f:92:d2:76:63:3e:aa:16:b3:3b:48:24:25:82:c8:84:73:
19:52:2d:a0:ed:6e:35:1a:6d:9f:b0:ae:dc:b9:d8:35:bb:18:
2c:35:60:d2:bd:44:b4:14:73:2e:0f:44:90:57:21:2b:f1:2b:
42:cb:31:04:fc:4a:b5:a6:c2:9e:b8:95:ff:94:fc:2b:51:25:
d4:b1:58:5a:bd:ad:6a:06:e5:df:d2:27:2b:c2:9e:c8:6c:e2:
d3:85:7d:61:5b:3e:62:7f:87:5a:3a:f6:f9:e4:95:7b:ae:e5:
94:28:01:c7:ca:68:9a:23:83:7e:50:5f:59:75:2e:bb:2a:28:
38:85:05:d4:f1:fa:70:67:5b:a2:70:3a:bc:05:70:a1:34:a6:
09:a1:1d:6f:e0:ae:aa:18:e7:3b:58:5e:2b:8c:46:47:66:81:
4c:34:86:9e:32:6e:4e:1b:4e:9e:ea:da:92:bc:60:40:6b:94:
3c:1b:ed:28:ee:4e:5a:19:bb:bb:7b:9e:18:0f:0b:86:e8:ee:
d3:d6:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:51 2026 by rpki-client