Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: bnMDNmpJJOdNV87T0CS9aKQWQ4Rx4eiKKDP21BHVCoQ=
Subject key identifier: B9:8B:39:34:A0:6C:13:41:E1:69:AE:36:39:E1:E0:F7:6B:9B:1F:3D
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019CC7BE9C604604EEED94E5D22F69D062F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 17E7
Signing time: Sat 07 Mar 2026 10:01:23 +0000
Manifest this update: Sat 07 Mar 2026 10:01:23 +0000
Manifest next update: Sun 08 Mar 2026 10:01:23 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: d26aEREfh2qe2yfPE521QhruNXKwwIAMbfwrVD/JXEc=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:9c:60:46:04:ee:ed:94:e5:d2:2f:69:d0:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Mar 7 10:01:23 2026 GMT
Not After : Mar 8 10:01:23 2026 GMT
Subject: CN=b98b3934a06c1341e169ae3639e1e0f76b9b1f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:6c:da:2e:d4:c5:b0:50:9e:b2:e4:1e:29:
a1:8c:ae:fd:a2:3d:15:02:09:cc:a0:12:18:6b:ed:
47:8f:a9:1b:d3:5a:d1:17:c6:c5:10:c8:33:f5:1d:
57:6d:92:55:73:57:6f:33:d8:7d:71:70:7e:02:f2:
cc:9f:f5:0c:9c:35:75:50:88:4c:2b:aa:8c:cc:c9:
04:d1:13:d1:11:1d:16:2a:7b:ca:18:8d:b5:21:e7:
87:74:2a:ba:86:d4:64:d9:e9:a1:c5:df:44:1a:3e:
9b:9a:36:70:91:d7:af:9d:36:9a:f6:4d:ed:d1:5b:
a4:37:52:e2:47:2e:1b:97:48:e5:ef:87:0a:d0:5f:
66:91:3d:ce:13:6f:b2:2a:f7:4f:1e:ef:df:8b:85:
14:83:65:93:15:d8:a8:81:7a:81:be:95:60:04:d9:
92:21:d9:b0:31:33:90:4c:aa:c3:6d:7c:b1:9d:ad:
be:8c:22:bc:5c:84:89:a7:a3:f4:8c:eb:f0:f1:08:
a8:30:ef:36:f5:d0:d0:88:f4:df:03:e0:a2:78:21:
5f:5b:7e:78:93:80:6e:5e:69:23:41:05:0d:45:da:
80:1e:8c:73:e3:9e:3e:fe:61:a8:24:57:cf:93:c3:
83:1e:78:2c:47:2c:23:9f:78:ea:bd:c0:29:c4:75:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8B:39:34:A0:6C:13:41:E1:69:AE:36:39:E1:E0:F7:6B:9B:1F:3D
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fd:40:76:84:46:ac:d1:17:cc:e9:4a:af:fa:bd:b8:4d:4b:
33:1e:cd:d7:9c:2f:ed:a8:d2:09:31:87:d1:ea:0f:c9:44:15:
6a:59:cb:da:a5:2a:84:82:a2:27:5c:01:0b:41:f5:b0:d2:a1:
7e:ea:55:c6:98:c5:a5:ec:50:31:1d:00:68:80:c9:65:93:82:
6b:54:4d:cf:b2:ab:2c:a4:92:5b:a0:47:30:87:29:36:57:d9:
72:e1:09:33:28:78:fa:1b:ea:8a:c1:63:1e:20:33:11:fc:60:
8b:0e:04:3f:75:b0:96:95:b7:5d:2d:ce:fa:13:40:35:6e:98:
ba:d3:81:19:22:8d:8b:b0:11:e1:b0:93:3f:2b:26:a0:8f:5e:
de:a0:0b:33:6c:0b:58:83:f2:12:f2:53:4d:10:f8:2d:87:af:
5a:ef:73:f4:04:5f:d0:5d:c3:b8:9d:25:07:3c:7b:42:0a:72:
ca:e8:39:2b:d0:d5:df:93:fd:26:59:99:6e:d6:ec:df:9a:f8:
19:a9:2b:18:1c:55:fb:71:c6:46:42:98:3e:cf:42:d9:f9:42:
da:76:85:1e:64:ad:9b:63:c5:63:46:65:f9:9c:c0:54:42:55:
46:79:ed:2d:c9:db:c2:de:e7:ed:f3:dd:c1:46:56:bd:5f:4e:
69:a0:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:05:59 2026 by rpki-client