Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier: IMD+Am58GyGQgIZuQ9e6ETsojgBCeKGwbfxMmg19si4=
Subject key identifier: 0B:47:EE:8A:8B:62:FE:FE:38:84:3D:31:D2:4D:C8:6C:C1:36:59:75
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer: /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial: 019D39E5A4E0ADA90F7ECCB3901C259AC433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number: 132B
Signing time: Sun 29 Mar 2026 14:00:44 +0000
Manifest this update: Sun 29 Mar 2026 14:00:44 +0000
Manifest next update: Mon 30 Mar 2026 14:00:44 +0000
Files and hashes: 1: MRe9Jn2vQUNBgH-RANmr0FhgGxI.roa (hash: rNl8kN+vuqRjmFOphk7qL6AzwoKLgjg4geeKr4yHMYs=)
2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: IJpK8JKU05cCK0bMAOCfOv1mxckFrxWlIw3MxTXT8gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a4:e0:ad:a9:0f:7e:cc:b3:90:1c:25:9a:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Validity
Not Before: Mar 29 14:00:44 2026 GMT
Not After : Mar 30 14:00:44 2026 GMT
Subject: CN=0b47ee8a8b62fefe38843d31d24dc86cc1365975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:27:ee:0b:19:17:f0:03:42:e5:c2:a2:73:
42:48:cf:b0:85:5f:d5:9c:c4:bc:bb:50:cb:29:2e:
e2:02:b5:1b:01:c8:c7:7f:cf:9c:82:8c:7c:7c:f0:
34:26:c8:0d:06:83:fe:25:f0:db:a6:dc:f9:f3:f0:
2e:9f:e2:52:c3:46:83:91:e7:42:90:0a:d1:9d:74:
f7:84:74:6f:e7:af:cf:3a:97:fb:5c:02:82:ed:12:
4d:21:b6:d7:fb:71:43:0f:92:ef:e7:3d:ad:c5:0d:
28:6f:64:31:c1:6c:3a:5f:f6:c3:e1:da:31:25:7d:
f0:b8:4a:d8:ce:20:f1:dd:62:18:6d:3f:8e:4e:e6:
46:49:81:9e:4e:c4:30:03:ca:64:e9:37:4f:4a:31:
59:27:98:a6:93:d9:5e:2a:2b:d5:38:81:72:ee:ef:
d6:de:4c:ce:ea:69:db:60:85:df:0c:b2:cc:5c:0c:
d9:60:e2:10:c5:79:63:6f:1e:04:44:fc:10:9d:d8:
af:68:c7:c6:69:ee:4c:97:b6:43:40:50:8f:57:51:
ab:75:ba:04:f7:4b:a0:87:7b:ce:22:e6:13:1d:50:
c7:47:b1:37:c9:46:c2:92:51:9e:7a:71:15:19:44:
20:ef:59:ff:be:40:58:c4:04:28:c5:88:21:56:70:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:EE:8A:8B:62:FE:FE:38:84:3D:31:D2:4D:C8:6C:C1:36:59:75
X509v3 Authority Key Identifier:
keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:88:2e:28:61:13:43:78:48:42:79:2e:b6:f3:4a:e4:c3:00:
77:47:64:ce:e0:19:e1:84:81:43:51:33:59:10:94:9e:7f:5a:
86:74:25:d6:15:2c:21:44:52:99:ac:78:ea:c8:d5:b3:68:74:
25:86:dc:d4:2a:97:e3:e7:5e:82:b4:5f:a7:2d:8d:21:e7:53:
d2:c8:d8:51:03:d0:49:b1:a2:14:12:ed:d7:b0:06:40:1f:29:
06:31:a1:85:90:8e:25:da:8e:2b:e9:12:13:ad:64:06:2b:a8:
91:f6:45:44:e0:77:1f:34:29:30:f2:7d:27:9c:38:f2:87:26:
25:52:bf:24:b6:44:4f:86:f5:6b:0d:3d:66:01:e4:9f:c8:d9:
0a:d0:f8:eb:d6:77:cb:93:52:e1:db:38:71:d6:63:fe:ef:d4:
09:5a:79:9a:72:27:e3:2b:50:8a:9d:19:ee:af:2e:27:ed:4b:
c5:98:04:7f:14:ab:b3:66:4c:01:57:88:eb:99:9b:09:bc:71:
78:23:47:76:7b:b5:dc:16:96:ad:35:c3:f2:19:5b:06:3a:c3:
b4:0a:cd:2f:a8:2a:83:c0:10:dd:2a:13:71:ad:88:d2:6a:9e:
9e:c0:95:7c:5d:b8:ab:8e:5c:96:35:1c:70:a5:28:59:ef:bf:
c1:d5:01:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:34 2026 by rpki-client