Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: NvJ2kYD3lXkYOgYLUKp0oIjk5ox8MU4CJ/JovqMI3Yk=
Subject key identifier: 3F:0C:3D:E5:A4:05:9A:97:9C:E5:B6:6D:B6:D1:28:5B:02:23:38:31
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019CE55A658AF219EC84774346DDB537B1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0835
Signing time: Fri 13 Mar 2026 04:00:32 +0000
Manifest this update: Fri 13 Mar 2026 04:00:32 +0000
Manifest next update: Sat 14 Mar 2026 04:00:32 +0000
Files and hashes: 1: CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa (hash: knYWc/a4bI5GtK7g0Qth1pZAN74E2q8jYjqFwaqxRKI=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: PRUAgWrisGRG1umP9LlNUh021tO+KhvUak7nF3KvRDQ=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:65:8a:f2:19:ec:84:77:43:46:dd:b5:37:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Mar 13 04:00:32 2026 GMT
Not After : Mar 14 04:00:32 2026 GMT
Subject: CN=3f0c3de5a4059a979ce5b66db6d1285b02233831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:5c:4b:71:54:ae:60:2e:6c:28:c2:12:bb:
e9:1d:76:01:29:f3:0f:25:2f:dd:ae:86:94:3d:0f:
b4:ea:da:db:b3:e0:ed:c6:03:a2:3f:d5:c1:5c:4a:
05:b6:b5:14:12:88:44:52:61:e6:8a:f5:91:fa:6e:
40:bd:db:7f:65:3f:77:95:21:79:8b:c1:3c:5b:f4:
7e:1f:c7:39:2f:6b:48:70:b6:3a:de:c3:d7:ee:2f:
03:97:54:9f:91:bb:a0:ac:d9:cf:2f:39:22:bd:c8:
eb:70:6c:2f:bc:1b:c0:07:8c:bb:9e:fa:0d:58:8e:
a9:28:a6:1b:6f:86:e6:d2:ec:35:8d:9b:39:ce:bf:
cf:17:fb:40:4c:7f:d6:29:0d:02:b6:17:b9:af:78:
3e:a8:8b:fa:9c:3e:da:0f:9a:cd:2b:59:78:32:e1:
37:1b:da:2b:33:81:17:c5:7d:fd:2c:67:21:0e:bc:
15:8e:10:9a:9d:55:20:b2:1f:41:24:b1:9e:d4:90:
5f:32:98:cf:95:66:a7:5f:dc:c3:1d:42:44:67:b2:
aa:aa:6c:70:d2:05:3d:bf:95:63:38:52:7a:03:1e:
2c:32:87:f1:e4:01:49:b2:d8:e4:e4:d1:29:20:a7:
0f:7a:cf:fd:63:f0:ec:ff:22:9f:d7:9d:d5:92:0c:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0C:3D:E5:A4:05:9A:97:9C:E5:B6:6D:B6:D1:28:5B:02:23:38:31
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:04:06:db:04:9c:40:59:87:b3:01:5b:17:aa:2d:a1:ce:8f:
29:ad:4d:d9:48:e1:d4:4a:d6:f9:3a:eb:4c:4e:64:ea:03:bf:
e1:9c:32:49:1a:5d:e8:78:9e:eb:d7:b6:6f:a0:85:f4:e2:40:
7c:b4:ca:ef:b9:ca:49:d9:ea:73:42:e4:66:34:b4:26:48:6b:
a8:23:be:f8:c2:e7:5d:15:20:52:e4:fd:a7:1b:57:16:cb:98:
a5:76:19:92:21:48:3b:ea:90:68:57:ad:66:6d:83:61:9f:8f:
88:74:d1:6c:ff:6a:46:fe:b7:5f:24:32:ab:0a:4e:ea:53:4b:
8b:e2:ee:b3:0e:a4:f0:ba:21:5c:a8:ac:c6:bd:8f:e1:ee:c5:
e0:f3:48:ef:88:fb:1d:d7:7b:a9:94:df:7f:ac:65:f3:57:78:
4b:0c:b9:a4:c3:2f:91:9e:da:8d:bf:b3:f7:eb:27:7c:de:d5:
0a:f5:a4:f1:0c:7d:c0:a2:81:4d:51:a6:94:d3:6e:1b:cc:d7:
f7:bb:08:b7:68:ec:5f:09:84:ee:08:5b:4a:b8:85:20:2d:17:
e8:3c:58:e5:87:bb:c2:ec:68:65:27:4a:61:b6:3b:d0:4e:d8:
b7:76:10:c5:46:c3:88:d4:c0:3f:6e:34:95:1c:95:ec:15:77:
11:3a:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:14 2026 by rpki-client