Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: JUEIGbIgD7OJjDhjui/j9E+IZhuq7DTMT+kNWNildbA=
Subject key identifier: B6:A2:82:27:98:E6:AE:64:A6:4F:59:BF:73:37:34:71:8B:25:30:DA
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019CBCCC9451931C79AABEC8EF61D035D059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 013F
Signing time: Thu 05 Mar 2026 07:00:49 +0000
Manifest this update: Thu 05 Mar 2026 07:00:49 +0000
Manifest next update: Fri 06 Mar 2026 07:00:49 +0000
Files and hashes: 1: 9mXLft8tWj3ND21SZ2EnzTtS7VU.roa (hash: aPk5QCp+d6NH9kl7Q2Ikryx7fdjc3+hRQdArIsf7we0=)
2: UTM1CR1pMYaFXHZzCtiduNbVB5s.roa (hash: v1x9VJ2yRV2qLCy6+vcnGUOTPUPi2aAkt7M842PxmE8=)
3: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: fupHq8LPMOLecbPUVsT0rMGz4mLXKcoGAnjybjAc6AU=)
4: q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa (hash: T61Ks0RxaruCy37gdj+R+3mq9ALV4w5YaetmHDahPKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:cc:94:51:93:1c:79:aa:be:c8:ef:61:d0:35:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Mar 5 07:00:49 2026 GMT
Not After : Mar 6 07:00:49 2026 GMT
Subject: CN=b6a2822798e6ae64a64f59bf733734718b2530da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:53:82:3b:0c:b8:51:03:d1:c8:fd:f0:74:
5f:1f:32:53:59:a8:75:19:e5:5e:bf:3a:0c:59:d9:
63:56:5d:99:e3:f9:e4:f3:b7:b4:3a:78:88:7f:35:
29:f6:e9:91:dd:db:31:b7:0d:41:80:4e:62:d0:3f:
96:e8:75:83:dc:78:96:10:f2:40:64:77:ee:d8:ee:
ac:a2:b9:6d:67:c4:63:db:2b:71:42:f8:94:82:45:
3f:cf:99:76:1e:59:95:45:b4:d0:29:40:90:74:40:
69:44:63:6c:59:df:cd:b2:6f:d1:71:6b:ff:36:53:
bf:3a:16:09:fc:10:dd:d9:df:d8:b0:14:b6:e7:bf:
45:6d:25:1b:48:75:36:b4:43:2f:ef:04:f5:9b:a3:
6b:74:18:e6:6f:dd:05:15:37:d5:63:2f:5e:ee:e9:
ec:b7:23:77:af:74:30:49:45:f1:57:fc:a8:dd:d7:
d6:42:a9:21:73:ab:70:56:66:34:d3:30:f0:5a:5a:
7c:30:61:f2:31:5f:f7:77:63:53:18:8c:62:cf:02:
cd:d8:fd:66:16:f1:32:79:1f:f2:71:0b:d6:75:80:
2c:66:24:88:0d:4c:52:93:a2:1a:f9:2e:b6:cd:14:
34:79:e6:c4:c3:e6:a7:06:5a:76:44:cb:db:7b:5d:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:82:27:98:E6:AE:64:A6:4F:59:BF:73:37:34:71:8B:25:30:DA
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7b:2b:d2:82:80:6b:ad:3f:75:6e:44:64:c8:47:df:7b:2d:
d0:30:93:36:5f:70:1a:b0:ee:05:ea:f6:dd:44:dc:6d:ad:fa:
a8:e4:ab:3f:11:fa:bc:8b:4d:cf:40:2b:2f:19:86:a7:70:82:
57:3a:fa:9c:b4:7f:87:3c:48:18:12:dc:b1:26:39:9c:c5:af:
43:23:1c:f7:0d:15:e4:b8:4f:41:19:c7:3a:bd:58:7a:e2:0b:
12:a2:17:fb:ad:34:d7:ed:da:46:31:20:30:aa:65:8b:14:5b:
20:ea:26:c9:3a:c0:9a:39:dd:35:74:37:34:57:8f:c8:95:7d:
2a:b0:57:db:35:e7:82:42:1e:be:41:d1:01:31:d8:01:c4:cb:
4c:81:5e:01:44:9a:31:41:46:bb:8d:ed:0f:74:e8:8c:e9:be:
82:e4:ba:d1:5e:ba:05:ea:a9:b1:fe:2a:0b:de:6e:10:b0:de:
25:bd:cd:16:30:2f:b7:fa:0a:ca:7f:90:4b:ec:bd:17:c7:9d:
88:0f:e2:64:c2:31:c1:2c:06:17:57:2e:fe:7a:f5:19:d6:4f:
db:5a:67:25:16:b4:c2:6d:0a:c3:88:02:96:86:84:21:2d:07:
a3:ad:bc:11:05:f1:fb:8e:ff:04:2b:d1:97:5a:af:30:06:59:
65:9d:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 13:47:23 2026 by rpki-client