Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File: hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier: T4ZMWXXLsKbjvGRS7d0xyrMcAu50r0pHkoqfh2oce8U=
Subject key identifier: 0F:F6:54:3A:DA:38:A9:ED:D7:72:A0:2D:4A:99:CA:E3:E4:08:51:A6
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 019D3941036C68AAE2FA78FBD426663935D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number: 0ED3
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: fFmupf3ZOulomw7RbTfFJI9HA-I.roa (hash: T13v7SVdmP/WoBkNmWlki+xwBbJ6Z16koZYacLEH9hQ=)
2: fVLd8tnnZrZdk6_lGRwthnV2H_Q.roa (hash: 18IWDikGUyDUw9Z2asfSid0KurOOqdvL3jCCr8MGrKw=)
3: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: u0YxSNS6ttBcw74pVdjbjXc2lvUDgwd2nZGfHo6zihg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:03:6c:68:aa:e2:fa:78:fb:d4:26:66:39:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=0ff6543ada38a9edd772a02d4a99cae3e40851a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e1:7b:dd:b9:c7:48:5a:39:41:2f:4a:d5:10:
32:c8:83:79:c9:5f:62:91:8c:89:ac:d1:b1:de:9c:
37:d0:86:b9:95:73:b6:ef:89:ca:4c:bb:b9:35:f6:
9c:63:29:d9:6a:3d:5b:9b:33:6b:e1:44:02:ec:af:
32:0a:9b:75:8b:2c:38:e1:13:3f:38:9f:89:06:4d:
52:6a:55:c1:c5:2c:cc:6b:0f:d5:3e:11:77:08:9d:
cd:2d:27:9c:18:b9:42:c4:66:b1:27:de:a4:d4:8b:
26:7b:1e:77:91:f1:c5:7a:db:92:8d:0b:56:b0:b8:
38:11:59:dd:b9:d0:cb:9e:c4:64:26:b1:a9:65:a7:
be:68:48:3a:84:d0:a2:1f:ec:fd:f1:b5:89:cb:d4:
2c:82:58:67:2b:a6:61:ba:83:21:d6:be:b5:0f:50:
51:19:c6:ff:60:0e:55:89:33:ec:42:d5:84:b8:0d:
70:8f:fa:a4:6a:86:88:0f:e6:b4:e2:1a:72:a2:bf:
4e:7b:0d:15:40:d4:4a:23:0e:c3:b0:20:dc:3a:a1:
9c:77:1a:2d:32:a5:e0:91:ea:eb:e4:c4:39:7f:ee:
44:60:34:17:b4:a2:f6:a0:94:45:f9:ba:83:83:54:
c4:2e:11:02:d0:7a:04:92:5f:5a:fd:c8:ed:d6:35:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:54:3A:DA:38:A9:ED:D7:72:A0:2D:4A:99:CA:E3:E4:08:51:A6
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:26:9e:2a:c8:42:41:63:74:41:d2:54:fa:92:35:d9:4d:ae:
fa:e1:ab:f7:a3:75:20:22:36:88:e6:4c:f6:c3:a1:54:13:05:
8e:e9:dd:4f:ac:e6:8e:a5:92:9d:4e:0e:af:1d:81:b6:bf:75:
25:d7:0b:cc:93:e5:bd:e4:72:e0:31:89:34:31:dd:8b:30:a7:
b0:2a:76:03:26:93:22:5d:e8:f0:ac:75:29:87:fa:0a:63:2a:
0c:ef:56:96:a6:1e:e1:38:de:19:81:e8:e8:b7:0e:30:37:e7:
0d:26:f6:0c:19:41:0e:1c:c1:ee:27:d5:d7:d3:f1:a2:c6:f5:
e1:99:6b:d8:81:07:f4:9a:c0:b3:aa:1e:a2:09:70:fd:4f:c6:
6d:43:90:5d:1d:57:88:cb:6c:d1:65:20:5b:f2:2b:67:4b:5e:
4f:f8:54:8e:c9:cc:d7:d1:27:a9:f3:2e:aa:39:a7:aa:79:6f:
c8:fd:5c:37:e3:f2:a3:31:0e:27:47:d8:75:3d:65:96:bd:5b:
b4:84:13:00:4d:83:01:70:fb:80:f6:59:55:89:d7:b3:63:18:
11:83:6a:70:6e:0a:23:e4:5c:f3:64:b4:eb:9a:30:fe:e7:4c:
eb:4e:76:90:f9:56:7e:28:3b:37:bf:bc:11:a2:56:1c:a4:6f:
85:64:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:03 2026 by rpki-client