Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier: stZBIfrRiuj9ky3evlWTbgZJnAAZ5/OLUqggyPH2+ks=
Subject key identifier: 71:8B:7E:A7:94:AA:80:F3:B9:CA:B9:5F:04:DC:D5:99:14:12:C7:FC
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer: /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial: 019D37C0D454130F40F53EE7BDCE317C61A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number: 01C0
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
2: ETMpToqTleOoqImfhhOrXw4lz3Q.asa (hash: CY0wY17SWUl1vZ+zGcUwbXDJHsRR/4ff/AIuJo1+GZo=)
3: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: ry0vTOa8F2UWEdCVx6urMKbzVxeJB/w7bthVtrx1lgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d4:54:13:0f:40:f5:3e:e7:bd:ce:31:7c:61:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=718b7ea794aa80f3b9cab95f04dcd5991412c7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:cd:e4:d1:89:db:79:b5:01:da:15:79:1a:
e4:54:9c:28:ed:e9:eb:3c:c3:72:5b:11:a3:bc:32:
99:2a:9f:77:3a:a1:45:87:46:db:46:86:30:18:cd:
ba:e3:b7:19:55:61:eb:93:b4:1f:70:86:21:90:cd:
31:23:7a:8e:39:cb:21:24:40:c0:51:88:ad:95:b1:
37:bd:ce:13:89:4b:f5:6c:34:bb:be:ea:5d:fb:99:
ee:52:e6:eb:0f:28:9f:6f:6e:66:20:c2:50:b9:43:
06:06:6e:17:d3:2b:0b:4b:e7:4a:19:93:51:6d:07:
e7:25:03:5c:3b:71:bc:3a:2c:91:94:19:69:8a:13:
b6:f9:5a:0e:d9:d5:c0:fb:41:a8:33:a1:3f:43:9e:
49:57:f9:c9:bb:79:8e:f5:94:f5:14:36:bb:9c:af:
0e:f7:b1:d4:20:7f:a1:2b:44:68:13:6d:05:bc:cf:
f8:6f:74:cf:e3:5b:05:74:f3:e4:45:25:20:32:2a:
63:e0:a2:c5:bf:98:18:1f:6c:d4:ac:bf:71:3d:9b:
a6:09:15:ac:4d:55:fe:ae:9d:75:ab:c7:45:e7:57:
0d:8d:79:76:4f:8e:3c:f4:bd:58:95:65:e4:d0:c3:
a4:67:6a:df:cc:87:15:71:a8:5f:80:35:6f:00:64:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:7E:A7:94:AA:80:F3:B9:CA:B9:5F:04:DC:D5:99:14:12:C7:FC
X509v3 Authority Key Identifier:
keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:cc:5c:17:98:76:59:96:0e:fb:8a:79:a7:af:3e:a7:b5:
cf:5d:37:72:71:ee:5e:76:49:cd:a4:62:49:0c:8d:91:8a:ef:
4c:d0:c5:e5:70:a7:1e:05:11:79:d1:28:a7:20:84:f4:92:7c:
49:02:4b:df:da:ae:e6:da:3e:29:3a:2e:1f:28:a1:24:ab:90:
7b:ce:25:3e:97:22:1c:a5:d1:74:c9:05:92:a4:a9:89:b2:31:
db:51:b4:43:6e:ec:85:9f:56:f0:a3:56:79:62:d6:9b:d3:50:
2f:5a:e0:18:75:4f:23:dd:f2:d8:03:a8:ac:c7:45:cb:ac:40:
f9:be:6a:60:bf:b2:4b:a1:66:2e:e2:91:63:f7:ab:47:b4:13:
42:65:1c:94:d4:f7:66:8c:a7:e5:5e:19:29:c4:09:aa:45:8c:
e8:a5:af:7d:4e:cb:7a:f3:eb:74:e9:f3:71:de:0f:c6:04:34:
ec:88:0a:ff:4a:28:3b:a9:c3:02:0f:f7:1a:29:5e:45:47:12:
77:1b:d5:1a:04:90:df:85:06:39:3a:1b:45:7d:41:ad:a7:0b:
f7:f3:83:3c:d0:e2:d1:86:d6:1d:c2:ee:b4:87:8a:65:b0:57:
d6:53:b0:b3:84:83:4d:bd:fd:a2:a3:52:69:5e:c6:2d:6b:3c:
2b:50:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:27 2026 by rpki-client