Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: w/jnygedKqcfHHMNzqK6D/dnWxppsWcmcyhcNAyZZqQ=
Subject key identifier: FB:1F:2F:0C:1B:FF:0B:FB:69:F0:D3:02:25:8A:54:C7:12:2F:71:1B
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019D37529DB26A42D2EB2D54FA14EE63D828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 09E2
Signing time: Sun 29 Mar 2026 02:00:54 +0000
Manifest this update: Sun 29 Mar 2026 02:00:54 +0000
Manifest next update: Mon 30 Mar 2026 02:00:54 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: lYGDky+NFNXH9pxCrIGz9ARyRlM6DJSGFG4u5RrlItQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9d:b2:6a:42:d2:eb:2d:54:fa:14:ee:63:d8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Mar 29 02:00:54 2026 GMT
Not After : Mar 30 02:00:54 2026 GMT
Subject: CN=fb1f2f0c1bff0bfb69f0d302258a54c7122f711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:8e:94:fe:a4:50:2f:00:97:73:67:29:d1:
2e:19:a2:4b:70:4c:cf:c3:bd:58:1d:88:ab:54:ba:
3f:34:07:5d:c2:58:ba:69:b0:0e:b3:62:84:a0:16:
b6:09:db:a8:bd:78:08:3e:57:cb:77:69:40:b8:e5:
66:e4:8e:8d:5b:43:52:1b:b9:d6:f4:ec:04:a7:36:
e6:4d:f0:b9:d4:23:64:4b:3c:d2:84:22:cf:57:e0:
18:17:4a:3e:5f:ac:d0:b6:a7:fb:8d:d4:54:54:77:
cb:1f:01:39:0c:a4:07:a9:1b:d0:04:f4:b4:58:35:
13:82:33:75:63:96:4f:33:e9:55:58:56:a7:a5:39:
48:e4:07:13:65:ee:e7:4f:1d:71:89:06:89:ff:97:
af:88:4e:f0:a6:56:4b:31:8b:4d:fb:76:e3:83:7a:
46:87:bd:69:e3:72:f5:a3:7b:d9:4d:99:3e:0d:29:
d9:dc:e6:00:7a:03:c6:f8:1c:66:2d:77:0f:88:bf:
50:80:56:dc:0e:2e:72:e7:ba:cc:b0:e9:ca:2e:9c:
4d:19:e6:3d:1e:3c:ff:0b:65:3c:3a:07:36:89:eb:
75:11:56:fc:5b:2f:59:9e:8f:0e:dd:78:67:c4:15:
1c:1d:84:56:7a:fa:e6:45:7c:fe:a9:ea:e1:7e:ca:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:2F:0C:1B:FF:0B:FB:69:F0:D3:02:25:8A:54:C7:12:2F:71:1B
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:29:84:f5:d1:a7:74:4b:44:ae:d2:32:57:ee:b3:d5:4f:15:
3e:37:2f:42:01:e3:ed:d7:5e:b2:12:94:cc:d2:7b:4f:73:fa:
37:21:dd:19:55:5e:1e:42:2a:f8:02:d8:c0:fb:6f:d9:ef:d5:
86:fa:9e:bf:81:8e:f9:08:13:0f:9a:fe:05:96:14:3d:e4:58:
ba:4e:cd:87:d1:51:54:3f:30:dc:e6:4e:e0:d6:46:bf:c4:fd:
3f:ca:b6:df:7c:bb:e4:21:20:20:be:e6:86:9f:da:f4:ca:9b:
e1:ac:90:b0:34:1c:cb:11:94:12:02:c0:eb:19:a0:20:5c:b3:
95:f0:65:4d:e6:2a:cd:b4:fd:6c:e7:55:2b:82:59:09:ab:a8:
85:49:71:2a:54:f5:e9:8f:28:aa:f8:d8:89:7a:64:09:1e:dc:
d9:21:1f:0a:ec:83:41:5a:af:63:c9:ba:dd:05:65:52:10:da:
e8:cd:d8:f9:f4:93:39:1b:6a:9d:5a:7c:ad:c9:ba:f5:41:9c:
cf:ec:b4:cb:4c:70:e0:93:f1:9b:d1:39:94:7d:73:5f:82:04:
2f:9e:94:b0:68:9b:dc:6a:37:c3:3e:8d:c0:5d:7d:d3:d4:33:
f5:7e:12:ae:58:64:3b:dd:f5:d0:01:28:e5:39:df:e2:60:fd:
22:4c:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:23 2026 by rpki-client