Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: Ykogm3WLLqpFO8EIfOTcuBHV2fIuKy7VtLmc/HA4pk0=
Subject key identifier: 0D:3E:A5:B0:15:82:94:3A:8F:43:D6:C1:20:A9:28:EE:6D:4B:A5:73
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019CE712AED92E62C9F23ABFBCC39A1082A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0C5E
Signing time: Fri 13 Mar 2026 12:01:27 +0000
Manifest this update: Fri 13 Mar 2026 12:01:27 +0000
Manifest next update: Sat 14 Mar 2026 12:01:27 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: eTzoR4kHaxxgd3CGZDinuUpzQROVUpD4anIUznOPliM=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:ae:d9:2e:62:c9:f2:3a:bf:bc:c3:9a:10:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Mar 13 12:01:27 2026 GMT
Not After : Mar 14 12:01:27 2026 GMT
Subject: CN=0d3ea5b01582943a8f43d6c120a928ee6d4ba573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:f2:d3:47:55:89:4d:9f:be:35:5c:c5:28:
6d:b8:04:95:04:f0:73:66:64:c3:31:83:3d:b0:a0:
80:b8:e9:5e:de:2a:65:09:eb:04:71:85:8b:5f:83:
2d:71:23:eb:25:02:f7:a6:63:99:54:ce:ce:e8:3f:
ce:53:dc:0d:0d:a0:0b:51:e8:7c:9a:05:5b:38:da:
d0:d5:59:ad:79:6f:85:58:9c:09:cd:2f:5e:ad:78:
9f:58:4a:ee:68:2a:f7:69:ba:de:db:1c:c4:c0:e1:
b7:23:54:a4:14:ac:0f:db:a7:2f:ff:37:af:1f:a7:
62:5e:db:36:5f:c5:90:ae:ad:40:0d:f5:64:da:b7:
62:d1:04:b4:a4:e2:bf:a7:cd:80:27:4e:ba:4c:80:
c4:6e:da:52:90:eb:60:5a:32:e5:75:0d:25:2f:97:
fc:c6:f0:29:8f:25:54:95:37:2f:c1:f5:16:d7:3b:
8f:5e:4c:f7:8f:de:1c:44:a4:e6:4f:b2:84:78:c0:
f8:25:b3:b7:ca:2b:fb:7c:a4:7f:15:1d:39:e3:b7:
50:93:fe:f5:40:27:94:5c:f3:78:fa:10:db:9b:24:
74:40:67:e5:9e:3f:bb:63:9f:62:c2:72:3f:ab:82:
7d:51:cf:d2:a5:6d:82:fc:70:43:ee:9c:83:66:99:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3E:A5:B0:15:82:94:3A:8F:43:D6:C1:20:A9:28:EE:6D:4B:A5:73
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:15:15:16:21:b4:33:81:77:1e:de:0a:ba:d2:56:90:cd:10:
a6:7f:7d:b5:69:05:af:69:95:5c:e0:1c:48:20:dc:9b:85:b6:
cf:bd:9f:bc:a8:3e:29:02:d3:50:39:9e:59:02:80:93:49:aa:
76:6b:39:cd:00:f9:64:9a:09:bc:5b:16:28:60:8e:6f:db:ec:
6d:8b:73:f5:a9:fb:ab:f9:62:ca:f8:50:a8:97:ea:ac:78:81:
02:99:fe:ad:53:06:64:b7:ae:5b:14:26:2f:04:c3:ca:18:c8:
37:01:1f:78:a6:30:48:e5:d0:bc:2f:16:cb:8f:1b:50:f8:26:
20:57:75:79:3a:83:5f:1f:7c:c9:35:62:07:68:4f:09:8d:a3:
10:bd:ab:13:9e:b6:e5:10:ce:b5:87:60:2f:64:81:9e:d3:66:
04:89:7c:7e:47:17:ab:7d:c9:44:4f:82:eb:72:b0:88:5d:32:
89:ab:a0:39:ea:39:ec:7e:b2:8c:e8:78:1d:f4:55:ce:6f:85:
e8:a2:52:14:a7:c1:3c:8e:bd:1c:20:2b:7c:9f:c2:b6:84:cf:
83:29:fd:66:a9:d3:bd:0c:79:bd:52:39:31:8b:4c:fb:94:ba:
f9:f7:10:ab:69:66:88:d5:fe:0e:55:90:a9:94:c4:9f:f0:a4:
db:14:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:15:11 2026 by rpki-client