Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: hKxZ89k4mr2TqakSH5k9y+ik9G4TXiS7/Jswpl9qmus=
Subject key identifier: 0E:AB:89:F6:63:22:D0:ED:95:A1:D7:6C:8B:85:75:CA:BD:69:D1:1C
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019D382E8D370AF0906F924013E52FEF91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
2: aI-ahOCwvF9dDyH09tBe3WnKiGg.roa (hash: W4z3ROiXmDdwVFy1xkMGSOsTs29f9yswRvpywgw4Gjk=)
3: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
4: fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa (hash: vgxMoBNi3xBe1kEG9Dep1UcVzUmrFFhkaO0RcMn0W+o=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: m6zqqknF5RmEw+Ot3u0c11FoisZ9r54oM8GeOXfVL5Y=)
6: q4J7inXLdfvTxzgZzcdEl_n6nio.roa (hash: tU27AK3PO1qj8TjiCSuyTiU7iIickoD0PNPU49OzhWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8d:37:0a:f0:90:6f:92:40:13:e5:2f:ef:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=0eab89f66322d0ed95a1d76c8b8575cabd69d11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:54:00:3b:2c:42:03:85:2e:86:03:5b:ed:
ff:81:d5:ea:ee:81:95:26:08:a4:33:00:2d:20:aa:
65:3e:e9:9f:19:2a:1e:d6:99:8d:b3:d4:90:1e:60:
72:c8:53:ad:0c:92:c0:cd:4b:82:38:e9:44:0e:82:
0d:a9:5d:a9:96:54:0b:8e:38:38:92:0b:91:bb:f2:
da:7c:ca:eb:a9:14:a1:7a:95:51:d4:21:11:5f:8e:
3e:72:1d:eb:a8:26:71:ba:17:a2:19:cc:5b:8a:51:
c6:b8:39:83:ec:06:04:1a:fd:0b:94:60:da:25:16:
66:7c:fe:39:5c:05:a4:6b:23:56:64:50:0c:bb:20:
f2:5a:60:5a:f4:88:03:e6:51:9a:03:f0:8c:8c:23:
a7:a8:64:bf:96:aa:e9:41:bc:8e:2e:78:20:7d:92:
7c:ec:d1:bb:cc:a6:a7:1c:bb:a8:5a:7e:12:b4:2e:
f8:03:35:df:16:68:da:4b:3a:01:bb:b9:15:2c:0b:
f9:42:59:2a:bd:fb:1c:21:f5:b0:d1:0c:aa:7c:7f:
de:89:ef:fb:72:15:16:4e:4a:c5:b0:2c:39:40:61:
1d:e8:41:cc:97:95:6f:eb:a5:77:27:12:47:87:ec:
14:d8:e8:2a:2f:45:82:6b:b8:dd:3c:21:e4:65:ab:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:89:F6:63:22:D0:ED:95:A1:D7:6C:8B:85:75:CA:BD:69:D1:1C
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:84:dd:e4:c9:d8:9e:b5:c5:df:17:dc:82:ab:33:82:e6:
0f:c9:f9:72:be:4a:fc:9a:16:d9:bb:c7:36:15:b4:b4:b2:1d:
38:31:a0:fe:28:f9:c9:1a:78:40:df:d6:ce:ac:ba:68:f0:0e:
ba:f6:c7:d2:2b:7d:54:0b:9e:c1:3a:cd:52:5c:f6:19:30:0d:
86:e1:93:9a:1d:fe:23:de:6d:e6:2f:de:4f:0d:28:d6:71:e6:
4e:ef:69:3c:d0:af:a3:3d:4b:74:72:9d:1d:46:4e:d9:f7:4a:
9e:d6:20:24:a8:aa:95:d9:ea:f7:b7:d1:c5:ee:07:62:ae:a5:
14:00:44:6f:53:e6:12:d0:76:19:e3:f4:66:de:9b:29:ea:c5:
48:06:1f:b2:29:cd:44:45:4c:a7:49:18:57:13:76:d9:3f:b8:
5d:07:e9:d6:63:95:8d:af:78:53:25:4c:8e:a5:c3:71:ce:07:
86:94:41:5a:25:84:b0:ce:d3:74:13:b3:94:7e:81:9d:b8:2a:
a7:5b:6d:12:df:06:ee:38:4f:16:a2:9c:41:5a:21:b8:2d:b1:
a1:63:e8:8e:64:a0:69:aa:ff:da:a3:33:a4:b6:39:64:7e:af:
8a:79:83:1a:c4:d7:74:76:33:96:f3:c1:19:53:e3:27:55:17:
27:e1:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:51 2026 by rpki-client