Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: 0G7U09s16tjlJMHAYZgefpldFo8ud87L/S8udJ2aewk=
Subject key identifier: 36:86:B5:3D:2C:9E:1F:59:4F:10:F5:2F:8B:A6:E0:A9:2A:07:2F:E4
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019D38D3030C750AF92D9B41511AF36F3277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0D57
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: VBLtb5anXu8mfDZEd2sf0Q3rh38.roa (hash: ZdPYXywTN4OXgthFTsawnGv2wOYDeomubZS+6zVQngE=)
2: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: xKDa4n64qiaPLeSSl79BAdYOdLE+HkfLhyCJLQmmdOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:03:0c:75:0a:f9:2d:9b:41:51:1a:f3:6f:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=3686b53d2c9e1f594f10f52f8ba6e0a92a072fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:bf:c8:ef:ec:56:b9:a2:ec:2f:9a:42:dc:
fc:81:c6:ba:3c:59:35:5f:48:6a:5a:92:71:c9:d1:
d0:39:90:ca:32:d8:3b:4e:a8:72:d0:7c:49:7a:cf:
17:30:52:87:bc:7c:da:79:45:ac:74:20:2a:5e:56:
91:7f:de:30:be:49:e7:38:71:dc:22:0e:81:80:80:
e5:db:e3:85:55:91:45:1f:f4:d4:48:89:56:fd:76:
f5:5a:13:0b:6b:1c:19:bd:b3:0f:cd:2f:51:28:16:
f9:4e:d6:c1:cf:c6:95:69:e0:78:35:18:ff:5e:ac:
55:a1:c5:79:3d:1b:e3:0f:e4:14:d0:b9:04:53:50:
ba:62:13:2d:77:cd:35:1c:e6:b8:ff:97:1c:0b:e0:
c8:5a:75:10:ab:bb:b2:09:c3:3b:b0:60:07:63:76:
31:85:b6:f8:52:7b:fe:5a:26:27:2d:47:56:99:2f:
82:b5:44:fe:bc:36:75:50:de:46:c7:2c:9e:e2:76:
dd:c2:ff:a0:0c:4a:b9:f5:79:ce:fa:da:28:d4:15:
26:f5:5f:1f:1c:38:f9:a6:3a:32:cd:2a:af:29:01:
bd:ee:be:ae:87:36:84:47:5f:ed:f1:8c:d5:b2:01:
5c:7a:c4:7d:4e:38:dd:c3:28:39:55:a3:e0:af:d8:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:86:B5:3D:2C:9E:1F:59:4F:10:F5:2F:8B:A6:E0:A9:2A:07:2F:E4
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:58:fe:b5:0f:c5:dc:2c:1a:18:7d:a3:4d:22:42:ed:f7:
c9:95:58:09:20:b0:17:4e:98:a9:33:3c:b3:33:ea:99:00:40:
51:dd:26:96:15:41:52:53:ba:36:8a:c9:c0:c1:1a:3e:6e:72:
bd:a2:e4:24:79:97:2c:6f:ca:dc:79:99:cc:96:12:09:d7:69:
48:d3:ca:db:f2:87:01:45:e8:05:e7:85:80:ac:61:b2:c2:b5:
e1:ab:74:36:b9:b5:9f:b0:05:05:e4:45:2e:90:87:40:aa:0e:
6b:09:fd:ce:ca:81:3d:30:51:44:f5:32:ea:f0:7c:c8:1c:f7:
a4:9b:9d:56:5b:3d:1d:0e:b4:fd:aa:8f:87:d0:5f:f6:b6:71:
ed:6c:4d:cb:58:b4:2b:16:30:b7:ea:d9:7f:e5:9c:7f:e6:32:
bb:68:57:85:7f:0a:df:75:f6:9f:11:e2:9b:e7:df:29:b8:ff:
8f:6b:f9:58:fd:0a:97:a2:76:b0:1c:88:88:52:b2:4e:0f:28:
ea:76:f0:05:c2:a1:d4:fd:c6:e2:d4:ff:56:b2:57:a5:7e:2d:
3c:5c:a8:db:21:74:19:1e:fb:05:d7:11:ae:52:7f:db:d8:4b:
0d:3a:94:19:e3:24:e5:0b:7b:cd:cf:f3:c2:d2:ec:73:7b:7f:
7a:ba:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:26 2026 by rpki-client