Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File: hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier: KO0MIFwDCNZAMAAyy2IGOsqlWGsN3opB89ejuWUiFhc=
Subject key identifier: 44:F4:01:7E:32:A0:EB:69:72:07:9A:D1:73:1A:EA:F3:3B:6F:F4:A0
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial: 019D3789A3A6BA45682F993E5018EA5ABA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number: 0E8E
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: ADhWXszHmYrhjaTOxkuNxHT1mUT4NpShxIrIFckzyYA=)
2: jDEnqn-3YuF66yIBAhedG-WVric.roa (hash: IDGCz+PvQFoiowdwxmnOy7ewUe35+rT1xoCOPSA60wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a3:a6:ba:45:68:2f:99:3e:50:18:ea:5a:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=44f4017e32a0eb6972079ad1731aeaf33b6ff4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:cd:44:fd:2e:3b:ae:ef:a9:2e:4b:4d:b2:
5e:09:a6:ed:45:a5:07:fe:72:12:9d:bc:55:aa:2b:
af:da:7e:6c:fb:04:f2:06:0e:46:67:94:20:35:56:
bb:2a:95:93:3d:52:63:cc:8f:b8:36:f2:9f:8c:b0:
cc:f2:0a:b9:74:0f:e4:32:c7:d3:e8:ff:82:32:9c:
38:f1:d9:02:05:9c:0c:c5:ae:4c:d0:30:e2:be:f0:
31:2f:a7:2b:b6:da:de:f1:a4:88:16:07:6c:16:49:
a6:06:71:ad:77:ad:32:52:85:44:71:be:85:1c:2c:
4f:43:19:62:15:10:91:b0:1d:00:39:77:dc:07:07:
5e:1f:01:3f:be:f6:a9:f4:fb:b1:6e:a9:38:9d:d8:
53:13:a3:83:5b:ab:00:9e:fc:4b:ef:58:03:ce:6c:
ed:5f:15:f0:45:9f:2d:e3:a5:af:87:cf:c6:f4:39:
bb:f6:85:88:20:5d:22:45:15:45:4d:cc:b3:6a:df:
50:26:73:76:4a:50:52:e5:c8:e4:eb:96:6b:f8:14:
15:08:04:c4:86:b6:28:9d:a5:80:a6:fe:19:46:96:
40:b6:bf:6b:48:2c:22:0c:1f:16:4d:06:a9:73:97:
a7:48:e3:9f:2b:51:72:ac:99:05:71:a8:ae:ae:6f:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:01:7E:32:A0:EB:69:72:07:9A:D1:73:1A:EA:F3:3B:6F:F4:A0
X509v3 Authority Key Identifier:
keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1d:c5:70:d6:43:2a:69:b5:66:3f:63:79:bf:36:a0:9e:3f:
5d:41:f3:ad:cf:89:0c:6e:8a:7d:33:1f:7f:7e:2e:53:8c:e9:
9e:a9:be:d5:d9:c4:20:82:a1:4f:7d:37:6a:d1:9a:78:35:b2:
2f:cf:69:bd:d5:61:dc:c6:c1:8c:65:2c:6b:60:83:08:fc:1f:
88:75:46:c2:3e:5f:23:e5:56:7f:95:99:7b:ff:26:58:a4:e7:
2d:75:d5:10:63:e5:ef:fb:4d:1a:13:6e:eb:f1:15:9c:5e:06:
a1:69:82:28:70:3b:55:70:db:b3:d9:03:7e:37:c5:91:d3:0c:
0a:f0:33:8a:be:36:8f:04:ba:b3:18:ce:38:0b:44:ad:ca:39:
9b:46:64:60:52:08:f0:8e:bf:61:44:ac:6d:13:31:2d:a3:52:
85:e4:8b:2c:16:3c:00:94:c1:6c:f3:c1:53:87:03:6f:6c:8c:
62:39:48:98:31:d7:0b:ab:3f:93:80:97:43:38:02:8b:2b:3c:
b9:db:af:7f:bf:4a:6e:a6:7c:80:a0:01:eb:9b:63:3e:cb:1a:
72:7b:de:00:22:f8:d2:86:29:08:77:b9:fd:a1:94:dd:8d:49:
a2:19:a7:ee:87:8d:29:2c:81:31:0f:b4:0d:9f:6b:b3:ae:79:
c2:17:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:44 2026 by rpki-client