Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: cJ39RVZvDHgvoD7da0uFKFJbeZq1de0DeZ7rUbfpZek=
Subject key identifier: 09:09:AE:96:94:45:B1:4C:43:70:91:D5:D7:99:D7:5D:4D:42:DC:33
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019CF3163DECDEF60363EA57BDB27684C38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 186C
Signing time: Sun 15 Mar 2026 20:00:46 +0000
Manifest this update: Sun 15 Mar 2026 20:00:46 +0000
Manifest next update: Mon 16 Mar 2026 20:00:46 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: ldGXc4cK5cCodAUtphw78/fpwIjJWZMURQVAq2nq2qM=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:16:3d:ec:de:f6:03:63:ea:57:bd:b2:76:84:c3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Mar 15 20:00:46 2026 GMT
Not After : Mar 16 20:00:46 2026 GMT
Subject: CN=0909ae969445b14c437091d5d799d75d4d42dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:be:04:c5:f3:44:4b:ac:98:c7:3d:9b:3b:
54:92:b6:f1:bf:0e:d7:76:20:4a:68:d0:12:a2:81:
cb:8f:8e:b2:c2:60:53:78:ad:5a:5e:a3:dc:6f:b8:
ee:63:cd:c8:0f:04:25:56:c1:16:fe:89:a5:bc:c3:
2c:0d:d2:90:26:a8:e3:ff:4f:c9:9e:01:02:c8:50:
11:b9:a8:af:61:18:4b:11:31:e7:da:85:c1:73:02:
8e:0a:29:c4:ba:45:13:c5:d2:4c:75:9d:9d:9e:0d:
b1:ef:28:51:bf:d2:88:28:1d:7f:9d:3e:44:19:9c:
fe:85:21:be:49:e6:6b:ed:55:2a:bb:35:f4:ad:8a:
12:dc:2d:be:ea:88:c6:51:06:50:68:79:55:7b:fc:
20:7c:3e:59:93:cc:62:25:88:fe:ab:f8:7f:78:1a:
3d:67:55:30:d0:35:63:89:c1:6e:30:0d:f7:a1:b7:
da:05:67:70:d4:8b:7d:d2:ca:95:19:a5:c6:c7:74:
fe:6d:21:a5:7c:f0:92:34:56:5e:52:1e:2a:b6:1e:
f5:c6:0d:9e:08:02:94:95:08:55:39:48:13:19:eb:
e8:6a:09:9f:8b:cd:32:ab:98:33:b2:6e:8a:24:e9:
19:c7:13:9e:3a:d0:bf:2e:9f:59:dd:b5:a0:d8:9e:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:09:AE:96:94:45:B1:4C:43:70:91:D5:D7:99:D7:5D:4D:42:DC:33
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2e:94:59:99:4c:b4:7b:04:87:2c:3f:f3:a0:fc:7b:80:66:
8a:a8:84:b5:38:12:64:a0:28:cc:a1:1d:7c:7f:88:4d:0b:69:
c6:3e:99:42:93:d2:db:21:19:b0:38:aa:9c:27:bb:52:c3:55:
72:b3:23:13:77:15:fc:14:56:ea:37:74:c2:09:70:01:5f:8d:
bb:b8:dc:91:a2:65:e3:e7:b3:7d:43:31:94:2d:04:86:60:b6:
ff:ef:eb:f6:1b:fd:0c:bd:81:12:82:25:de:23:73:9e:ae:e7:
19:08:ce:45:96:49:67:82:83:dc:d7:04:1f:c6:83:e6:f6:8b:
95:5a:3e:72:3e:57:e2:8c:6f:39:d6:72:b2:2f:18:12:97:2c:
46:a5:1f:6a:90:0b:a3:1c:93:93:35:87:83:87:cf:e4:1d:6d:
62:b2:50:53:7c:c3:e4:11:e9:f3:34:96:8e:9e:3e:fc:4f:45:
05:c6:64:7c:14:ac:ff:39:11:b0:81:d4:82:25:40:bc:3a:a5:
09:2f:88:4c:bd:c0:3e:93:e7:89:e0:3c:7f:fa:96:ef:f4:25:
ab:3a:7d:0d:b7:c3:a1:c1:ab:69:53:a9:6e:90:7e:49:57:aa:
f5:02:26:00:40:0e:74:ae:42:9b:38:8a:cd:9e:9b:be:52:42:
93:66:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:01:47 2026 by rpki-client