Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: 8AfeoTIxtY4BTaeMmBDUNM/zmC7DuDESB7Lh62iWhKQ=
Subject key identifier: F3:7B:01:E1:D8:4A:B6:12:28:B1:AA:5A:D0:0C:20:AC:3B:7D:0B:BA
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019D38D36BC1E474527F986C093C3B0C08F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: 5hLIjemM+8LmVx0/aKspyxtJD+765XR1WvQP7naAGrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6b:c1:e4:74:52:7f:98:6c:09:3c:3b:0c:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=f37b01e1d84ab61228b1aa5ad00c20ac3b7d0bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:ff:1d:11:39:ad:3d:cd:35:29:2a:f0:79:
80:bc:8e:e4:5a:2c:ff:80:a4:ca:60:2a:44:0b:98:
09:e8:bd:2a:70:b7:a4:04:96:5a:5e:46:91:49:f3:
e9:66:23:14:66:82:e5:65:a7:c1:de:40:9e:be:84:
88:9e:db:b3:e9:83:40:fa:b8:3a:dd:87:5d:d2:0e:
94:3d:b6:d3:e3:96:c3:6f:bc:4e:5b:55:01:b2:25:
36:23:35:92:7a:19:57:e1:4f:eb:2b:53:76:e1:82:
d3:77:3d:dd:11:68:15:91:75:75:dd:40:94:c9:b3:
97:4a:e1:d7:4d:1f:68:c0:ea:a3:81:bd:b9:75:da:
45:ef:43:99:c2:5a:77:ef:26:e1:49:a6:d1:af:9b:
45:de:81:74:67:d9:19:66:5d:cd:c9:b7:e2:19:cd:
45:73:1a:b1:93:62:79:16:34:d4:ba:ad:b8:07:b4:
ee:c1:af:b3:7f:f4:62:14:1a:95:a4:be:63:2c:d7:
5a:40:5f:a7:6d:5a:be:dd:49:d8:5d:ee:e3:0a:d5:
4d:71:a7:e0:8e:5e:86:7d:5d:cc:7f:28:ef:f7:65:
79:1f:de:32:09:69:12:8e:5b:52:db:a4:a1:6c:9d:
2d:ad:e2:48:9e:a5:d8:f4:de:cd:db:3c:54:0a:b3:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:01:E1:D8:4A:B6:12:28:B1:AA:5A:D0:0C:20:AC:3B:7D:0B:BA
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:67:f4:bc:47:a8:e1:ed:f0:c3:4b:48:4c:8c:69:55:b6:65:
26:87:14:da:21:a5:2b:08:4b:08:82:57:0e:99:4d:b5:2d:aa:
e8:e1:e4:b7:89:99:7e:8d:0d:91:92:dd:cd:c0:16:6e:e9:9e:
ba:da:47:f3:b1:90:b7:0c:91:e2:d0:7d:5d:08:a2:bc:11:12:
22:b5:46:b5:e2:d7:85:6e:ea:7a:32:6a:f3:6e:0e:fc:9e:3a:
8e:33:c1:40:1b:eb:50:3d:28:9c:b9:82:60:98:4f:85:38:88:
73:5d:89:14:1d:05:5e:cf:b9:05:52:ae:c1:cf:89:a5:65:e8:
8a:f5:6c:83:c2:39:8e:b6:b4:e5:9e:11:63:2a:bf:d7:25:a4:
18:ed:77:e1:ae:9f:f0:1a:99:b2:28:8f:a1:37:d6:9c:bd:39:
60:b3:57:ec:32:32:72:37:82:33:65:bc:c8:49:d6:ac:df:3f:
9f:54:d6:b5:8a:49:be:92:7c:35:e3:a3:cc:8e:12:a1:4b:71:
95:c0:5a:54:78:af:d0:c7:1f:dd:4f:d9:b0:6c:86:6d:d7:f7:
01:c4:fe:d8:25:49:42:3e:c6:07:68:85:90:34:9a:89:43:8f:
51:52:e7:11:74:38:30:26:4c:ca:08:f8:c7:b8:74:8f:05:79:
ba:fe:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:57 2026 by rpki-client