Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: H4DKC8jdafO0U2O6tYbEjzyvA4ESC+SV5oWsSqQZvjw=
Subject key identifier: 2C:29:90:BF:46:09:B7:1C:06:94:F0:B9:39:CA:BF:A5:C6:3F:14:9A
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 019D37F71428619E6A3A681A3B2F53903486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0E98
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: 5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa (hash: vHRw1aMy6QtggdL865LadOSRH74ZxGkEgwi3zn9M/rU=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: oX8QFIRI5wDTdLCO8X/dDeXcyiUxGWgGjgokQVoGKp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:14:28:61:9e:6a:3a:68:1a:3b:2f:53:90:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=2c2990bf4609b71c0694f0b939cabfa5c63f149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:aa:70:d1:15:ea:a8:db:be:34:94:e3:07:
23:cc:32:4f:8f:7f:fe:08:f4:f0:3d:a8:04:81:72:
c6:c2:72:bb:90:1b:18:ca:d3:5a:2c:ba:1d:67:6b:
f2:25:17:51:db:8d:cf:55:ad:a4:47:63:f7:6b:00:
e5:77:de:f4:cd:00:69:db:aa:2b:01:bd:1a:fc:0f:
20:51:16:8e:87:c4:67:00:e9:42:df:fc:c7:b4:9e:
15:d9:d5:20:94:4b:b0:42:e7:b2:d5:8f:aa:64:0e:
32:7c:3c:93:00:b3:be:a6:e8:a4:be:62:5d:1a:f9:
78:13:4d:77:3c:0c:99:3f:f2:ef:80:37:60:b9:98:
9e:36:53:10:58:13:cf:c3:6c:71:2a:34:9b:58:d2:
ee:85:ee:22:48:56:91:d2:eb:ec:a8:69:50:c5:aa:
32:ca:9f:20:28:74:94:ac:51:6c:e8:c5:be:21:c1:
e0:c7:55:ea:cf:30:9d:87:78:e7:3c:6c:f0:17:9c:
f7:cb:99:bf:fe:11:03:ac:8b:35:40:29:82:88:aa:
5e:79:c4:81:51:f7:df:57:16:c4:60:16:39:c1:44:
71:36:58:22:2e:30:4c:45:bb:54:07:86:f5:e1:03:
85:ee:b5:70:96:b9:fc:73:c3:cc:13:ec:d0:d1:f1:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:90:BF:46:09:B7:1C:06:94:F0:B9:39:CA:BF:A5:C6:3F:14:9A
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:ef:70:f1:32:d7:60:53:79:8c:9e:0e:13:bd:e4:57:aa:
a6:d5:6c:51:e6:fd:5c:e4:92:ae:0e:d9:30:7d:c0:25:a9:c1:
f3:dc:56:b0:8a:e7:1a:2a:f8:15:9c:df:5b:f4:00:af:3e:31:
af:5c:2e:65:97:ae:e6:be:30:07:f7:4f:85:0e:da:25:b5:fe:
ac:6d:9a:76:ff:fd:f6:b2:71:bb:12:1a:8f:d1:4a:cb:7d:01:
73:a2:ab:66:b4:b3:b8:2c:78:90:73:b7:d6:7b:63:c0:2d:5a:
c4:59:40:15:de:a3:88:d2:bc:ba:f2:4b:85:e9:e0:c6:44:4e:
7a:d3:e9:b6:74:a5:dd:5e:90:59:68:49:08:91:a8:0a:9d:56:
73:42:d9:9b:df:37:53:71:6d:d4:37:21:40:5b:53:00:ae:9a:
49:c4:4a:11:c4:ef:cf:59:97:9a:cf:5b:b6:0f:dc:b9:30:8c:
80:d9:51:9e:47:29:1c:dd:8e:d8:ab:6e:72:de:fe:71:f0:7c:
bd:dc:f9:15:1b:da:ea:f9:b0:27:dd:ac:6e:f4:aa:bc:67:fe:
15:26:45:0e:fb:64:66:a8:82:fe:1e:68:81:41:4c:70:83:72:
c0:57:99:61:69:78:84:69:6c:f3:36:81:3b:30:61:cf:79:26:
f6:55:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:42 2026 by rpki-client