Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: US1cnLxjFYaGJVKx1SRZhTOtEjwjIWQ+CrH7sTv4GAQ=
Subject key identifier: 5C:81:A4:C3:C6:15:8D:29:17:3C:29:F0:25:3B:86:CC:54:BE:A4:59
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019D397816777E8031CDDD4DCB898BE4BBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0597
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: /fE6arX0e9NPLOmciUscdB3MsK5qpkQx92TkPWP4P+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:16:77:7e:80:31:cd:dd:4d:cb:89:8b:e4:bb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=5c81a4c3c6158d29173c29f0253b86cc54bea459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:84:1f:42:62:5b:a9:bd:96:83:61:e0:26:
14:31:51:71:02:93:cc:95:1c:92:8f:fc:f0:77:eb:
12:4c:ae:3a:c2:6b:f6:c1:2c:03:6b:15:21:9d:9d:
47:76:ec:95:9b:79:e0:85:2c:b8:b1:29:7d:f4:26:
3d:c4:28:bb:88:6f:69:38:f6:fa:e5:c3:ed:31:69:
79:59:a4:c2:5c:1f:0c:d0:aa:49:64:09:67:41:1a:
94:d5:0c:89:16:a7:94:74:b4:32:8d:d5:5c:09:05:
9a:70:b5:f1:9c:7d:6c:18:19:b3:0f:f4:41:c5:7b:
6a:b8:04:2c:0c:99:69:48:8f:2f:8b:e2:da:39:b3:
00:b0:97:61:59:4a:d8:ad:52:b9:4d:cf:d3:49:35:
8d:2c:eb:e3:6e:3f:f6:c4:6c:3f:a8:36:db:88:f8:
1c:97:8e:b6:6f:d0:8f:48:e6:ba:42:13:d1:ee:56:
ce:3d:af:68:b5:df:a1:ce:45:ba:f6:e5:e5:0f:49:
2b:25:2b:4f:35:4a:1d:3b:02:5e:0c:40:66:0f:08:
70:d0:00:4f:86:9b:2d:20:79:d1:0a:03:18:03:61:
34:47:86:77:9b:32:ee:fe:dd:4e:a9:b1:d7:8f:c7:
0f:4b:c5:70:c1:c0:a9:cf:1b:c7:a1:ad:22:ee:8a:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:A4:C3:C6:15:8D:29:17:3C:29:F0:25:3B:86:CC:54:BE:A4:59
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8b:09:a9:f5:6f:c0:89:73:a2:c7:69:87:3d:01:0b:0e:59:
a1:de:4d:fc:c8:95:0d:3d:6f:25:7d:8b:c3:c7:99:5a:29:cd:
b4:33:e6:dc:35:d3:2f:82:6b:68:27:06:84:09:77:2e:07:c1:
72:35:3a:0c:fe:b3:89:b2:3e:c3:0b:3f:e5:9a:6c:72:63:20:
8c:7a:ed:ff:42:2b:a0:11:86:f5:c9:f7:43:d0:01:89:e8:c0:
3b:86:f2:d7:5f:34:bc:ae:51:f8:d4:68:81:25:38:3e:84:31:
e8:d4:1d:c5:a7:b8:48:b3:42:1e:4a:d3:6b:96:15:b5:28:35:
60:05:67:96:a6:7b:d8:8a:c5:b6:11:c1:ae:43:80:ab:9a:38:
a3:cf:f0:16:52:dd:2a:b9:38:23:19:89:5d:03:e9:87:d3:e4:
71:0a:e7:3f:ab:6e:cc:87:6f:17:71:a5:ed:cb:23:05:38:b3:
3f:95:98:7b:ff:12:89:69:06:b0:fa:e0:77:32:1e:a3:84:e7:
95:fe:6c:40:ce:19:64:97:59:11:78:52:46:67:90:76:6b:81:
c4:2f:12:74:ab:64:33:09:e9:6b:8d:c7:a1:47:37:8d:c8:cf:
b9:3e:73:5d:9c:87:f4:5e:aa:99:30:03:c1:06:a4:80:33:a6:
f6:3d:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:28 2026 by rpki-client