Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: iQGSzAcpaSb5X5QX1mrNNymS0IePhe0pmCT5F0z19R0=
Subject key identifier: 8A:EB:62:68:10:98:51:D3:4F:2A:13:33:3B:5C:23:02:10:A0:BD:D8
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019CB6CA8FE01DC61C947CE6F1751700735B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0529
Signing time: Wed 04 Mar 2026 03:00:54 +0000
Manifest this update: Wed 04 Mar 2026 03:00:54 +0000
Manifest next update: Thu 05 Mar 2026 03:00:54 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: I7FUFXdRSLd1gKblCqY4lSKmoNi5oZLpT0XKtaHyFw8=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:ca:8f:e0:1d:c6:1c:94:7c:e6:f1:75:17:00:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Mar 4 03:00:54 2026 GMT
Not After : Mar 5 03:00:54 2026 GMT
Subject: CN=8aeb6268109851d34f2a13333b5c230210a0bdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:54:d8:0a:95:6e:8d:c7:f9:85:21:37:64:
02:e6:34:53:d7:0e:8c:ed:66:87:c7:56:0a:e5:18:
0d:5a:41:b7:15:a6:e6:5f:8c:37:06:99:eb:4d:8d:
01:ea:fc:3e:ad:88:f9:19:a0:9a:da:7c:e9:d9:15:
92:09:cb:93:ed:01:15:e2:25:c6:a0:56:f9:bf:42:
4c:b2:3a:dd:7d:ff:8b:db:14:bd:24:12:e8:a0:56:
17:5a:6a:39:17:2a:45:f0:c6:fd:33:1e:1c:fd:88:
6b:fa:7b:51:f8:12:c5:1f:13:45:a4:fc:11:0c:05:
76:37:cd:29:e3:7c:54:c5:fe:76:b4:2a:da:92:2c:
40:38:bb:18:d1:9a:cb:04:13:67:84:1f:a2:f4:98:
9e:69:8f:36:15:87:ac:77:5c:02:f7:15:20:14:d4:
16:c9:4b:b9:32:ee:b4:d7:2f:cd:6d:df:16:c5:1a:
76:48:83:77:72:c0:73:b4:a4:dc:42:38:0a:34:50:
e3:8b:cb:a4:d4:7d:fd:ea:86:6d:92:22:f4:b9:12:
bf:e4:d2:64:c9:b3:10:92:12:eb:d4:7c:d8:44:89:
27:f3:61:73:a7:bf:15:d8:9a:e9:7d:01:15:0d:cf:
da:b5:4e:32:b4:cc:27:bd:41:62:2f:e8:c1:2d:19:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:62:68:10:98:51:D3:4F:2A:13:33:3B:5C:23:02:10:A0:BD:D8
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:86:c4:62:07:7c:65:d0:96:7c:3c:40:b3:e5:5b:5a:c9:70:
d2:23:bc:a4:43:fb:22:46:fb:96:c8:27:7d:ef:ab:76:08:fa:
5e:85:61:c7:b1:1b:05:3d:fe:b1:51:99:d5:d5:0c:c3:ab:3b:
50:0b:8b:56:82:46:89:c0:5d:cb:2c:c7:83:a8:ff:8b:93:10:
b1:6c:61:bd:3c:2c:60:61:ee:be:c6:c7:c1:b2:52:0d:13:fa:
7f:8d:58:ff:86:48:40:b2:fc:f2:0a:59:a3:23:7a:69:9b:c9:
8f:a3:df:8c:6b:8f:e7:d0:71:18:a7:ef:e6:b5:92:fc:e0:1a:
c6:4b:98:1c:56:9f:b3:20:56:25:83:34:d7:19:2d:66:97:b2:
55:e7:a2:77:bb:4f:5a:4c:bd:f1:81:03:a6:65:0f:03:d5:c6:
d4:d1:4b:32:40:e4:a0:7c:f8:87:cc:47:c0:92:76:0b:b8:d6:
86:d8:88:ae:49:bf:5f:2a:df:d2:29:b9:07:81:c5:31:03:38:
c0:42:bf:2f:92:3a:7b:0c:d2:06:37:b2:b4:e5:94:34:e8:d0:
36:f3:a0:0f:90:94:43:4a:0c:57:42:cb:8f:53:14:06:a0:8b:
4a:e7:c7:35:bd:23:b5:53:2f:68:fe:84:b2:98:7a:e7:28:e4:
36:16:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:02:11 2026 by rpki-client