Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: 4G65yIoPNrT00AuqAe8vVD4A1ns27ZnQ+ZblCpuFoiY=
Subject key identifier: 71:72:A1:1E:A4:B6:A6:BE:4E:B9:22:1E:CA:4A:FE:92:9D:4B:4B:36
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 019D389C51C40ECE1A8104DD92A03E97F5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: hG1m+ffE9jfqAfs0PDO5mw/g7GkV2h1QkDTW0MJCm4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:51:c4:0e:ce:1a:81:04:dd:92:a0:3e:97:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=7172a11ea4b6a6be4eb9221eca4afe929d4b4b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:93:0d:6d:bb:cc:c1:1c:0f:a2:94:af:55:
ca:54:82:e7:79:15:6b:c2:3d:91:1a:e0:46:1f:bb:
29:6d:3f:e2:72:70:67:a0:5e:75:fe:c6:17:84:86:
c6:a3:16:3f:8b:dc:0f:5d:b1:c7:c4:a4:2a:72:fd:
6f:fc:ab:9f:5f:04:df:e6:1c:de:47:cc:5d:4f:a1:
34:7b:1b:34:c1:c9:3e:6e:43:09:61:29:d9:18:02:
3c:91:6d:a3:85:b0:76:04:7b:93:72:27:bb:59:ee:
88:8f:2e:97:7e:75:b9:14:52:cc:7e:b3:c8:b2:c6:
7f:a1:bd:5a:bc:e4:b9:78:2c:82:13:60:5f:55:6e:
56:bf:c0:21:00:a0:1d:29:9f:4c:7c:87:b1:67:ff:
aa:17:0d:3c:ec:8d:61:2e:83:f9:95:e4:97:82:a1:
81:ed:ac:e7:43:8a:22:ae:d1:46:0e:25:83:1c:58:
a1:84:8d:39:35:1e:38:23:7f:69:fb:fe:45:30:01:
e5:98:a5:6c:6e:96:80:0b:d5:d3:50:48:8e:4b:e6:
8d:83:e6:c1:aa:56:fb:9c:45:82:38:5a:28:71:08:
7b:ea:c4:f1:54:d0:7b:98:ba:57:f3:a9:b9:0f:ba:
bc:5d:20:db:fe:50:74:dd:74:94:79:8f:20:de:ed:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:A1:1E:A4:B6:A6:BE:4E:B9:22:1E:CA:4A:FE:92:9D:4B:4B:36
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:63:35:11:59:e3:29:c8:9e:2c:72:56:ed:7e:0d:04:6b:
58:39:90:80:b3:e3:44:10:64:3d:a8:4a:9b:ea:84:38:15:af:
96:b2:d1:db:7f:ec:28:d9:f6:30:7c:c2:47:0b:03:e8:c0:cd:
23:d2:16:10:20:38:e1:44:0f:73:7d:e3:65:6c:79:ce:17:07:
d3:a0:15:38:5c:2a:b3:a3:70:31:c6:50:25:3a:06:30:3b:69:
dc:bd:e4:f6:f0:e4:5a:69:75:f9:15:33:35:3a:6e:52:f1:00:
3e:39:6f:1e:f3:3e:d4:47:db:0a:cc:f1:c7:6f:23:b8:7d:af:
73:dd:b5:b6:72:80:8d:1c:4f:d1:3c:03:59:98:2b:eb:f1:52:
86:2a:e7:dc:6d:19:52:b7:b4:9b:39:33:c7:30:a5:6f:1f:21:
c4:57:c4:44:20:89:90:b6:57:28:28:90:b0:b3:a8:a6:6d:19:
8d:c0:a0:c5:0f:ba:1a:70:f9:6f:9b:b0:b1:79:42:f7:80:5e:
22:a6:d7:4e:70:b4:33:02:ca:6a:2e:35:7d:ca:b1:92:3d:7a:
37:6e:e0:8e:59:d9:78:16:ea:6c:38:e3:d0:eb:ef:1f:b2:4b:
db:7d:23:d1:ad:2c:6a:37:33:34:17:f3:a5:82:da:f4:35:cd:
5d:82:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:16 2026 by rpki-client