Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: Am4F3Z45O3Ge/sraiuduFteZD6wWU0N7TsAE2S+RlHI=
Subject key identifier: AC:CA:C3:3C:E4:64:C8:84:5E:CF:D3:06:3E:07:C2:BF:96:95:8F:12
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 019D382E6F83C4097C1346C853F7AB2008AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 1596
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa (hash: /GSM9iyQcMrc7fSWc8netDxH1YSxmTdh4UOLgqibrf0=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: GJmbdMCTDuwy+w8ke+p/HJOgaKo0bOfKsM+buoO+uz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6f:83:c4:09:7c:13:46:c8:53:f7:ab:20:08:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=accac33ce464c8845ecfd3063e07c2bf96958f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:76:6b:c1:83:2a:31:81:1e:4b:dd:44:b8:
0a:7a:19:50:ea:92:e8:48:5c:78:b2:d1:5c:56:37:
74:bc:d2:46:e5:3a:0a:20:4a:45:24:72:f1:80:e8:
c9:08:0b:8d:83:44:21:38:63:61:f0:69:82:a1:ab:
38:00:33:2a:6a:8d:af:81:03:06:58:18:40:5d:e6:
b5:b2:dd:7c:06:34:5f:e4:b0:1a:1f:9f:66:1b:81:
09:8b:ff:03:1e:0f:48:76:36:21:c2:eb:85:0e:cc:
a0:c9:70:03:1b:4b:d2:7f:a0:57:9e:47:29:e1:d8:
f5:7d:b2:59:7d:af:d8:c0:f8:9c:d4:f8:02:de:a2:
11:c4:1b:f7:ff:b8:f7:79:1e:84:4e:f8:90:ee:89:
57:71:6a:38:04:20:ba:5c:2c:f8:61:61:d6:40:4d:
c8:54:2a:05:82:23:72:6f:42:af:5d:35:1f:e4:1a:
32:88:a7:b4:30:76:88:ee:b9:ae:e9:e3:5b:8d:9e:
65:fb:04:9c:85:80:a3:d0:2f:c3:ba:f1:1f:8f:47:
7b:09:14:f0:5b:3f:e9:7e:21:ba:61:61:a3:d6:6a:
ae:60:73:f0:87:87:ba:e8:c4:75:61:fc:92:86:4e:
28:14:1c:fc:77:10:16:6a:1e:eb:61:d9:8f:f7:fe:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:C3:3C:E4:64:C8:84:5E:CF:D3:06:3E:07:C2:BF:96:95:8F:12
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3f:3e:c8:96:71:ad:57:9e:8e:48:57:a2:5f:64:f9:30:ae:
7a:0c:28:12:52:44:47:14:62:53:a0:00:9e:d8:63:60:b8:3f:
fd:84:fe:88:66:9d:23:92:0a:42:93:fa:8e:c9:0b:64:4c:a4:
d0:6b:4e:9a:0f:a9:a0:79:c7:4c:bf:00:75:70:fc:59:d7:e5:
74:ee:f3:5f:b7:b9:c4:d2:97:3e:b3:3b:a6:c3:7a:b7:2d:67:
f7:08:08:d0:af:47:51:31:df:44:c5:f7:ad:01:c5:9e:9d:d9:
5c:f1:24:fb:fc:83:e2:22:9f:dc:cc:b9:33:ff:5d:d5:4a:b3:
b6:24:40:0c:b3:3b:41:eb:a9:b9:8e:46:d5:75:14:d7:62:a1:
12:47:70:53:ae:f3:86:e0:18:57:21:06:5d:44:dc:2d:3a:71:
a8:ec:5e:ba:f7:1b:e0:1b:43:8f:d4:d8:55:2e:57:4b:35:99:
33:dd:e6:6e:22:ce:4b:6d:aa:eb:41:49:4f:97:ca:ff:01:e4:
07:e4:18:4c:ed:22:62:f3:b3:80:0e:4d:43:de:af:a0:2a:ff:
fc:eb:bc:0f:34:7a:0d:14:88:fb:06:f4:ad:9d:ff:40:8f:e4:
89:b0:73:28:5d:f2:04:60:a4:1b:ca:0c:57:63:e3:6f:ab:68:
64:1e:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:03 2026 by rpki-client