Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: eGOpme1/vlevn36UFm3Ip/ttYJDZGB/KV0i7jVjZC1M=
Subject key identifier: 87:91:F6:AE:B2:91:EC:02:4E:48:07:1A:F6:77:2D:45:14:92:47:6D
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019D37C0598A0306BBE29B687D0D14F9F44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (hash: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY=)
2: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (hash: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: HLFjijzSzyaaGQa5vagkFYnTS4uue4PwJ2Bk0jB6wAg=)
4: hPluaz2ce72z5Cezy2XMePaJEmA.roa (hash: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:59:8a:03:06:bb:e2:9b:68:7d:0d:14:f9:f4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=8791f6aeb291ec024e48071af6772d451492476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:26:53:f2:00:f7:e8:76:fa:46:6e:f2:6d:
da:58:79:6d:47:0c:2b:ee:1d:09:f6:6d:65:33:6d:
44:fa:51:7c:ef:eb:69:97:aa:22:ca:32:72:55:56:
0f:0a:c6:4e:9f:c8:4d:3b:83:d4:06:a3:a5:36:4e:
c2:96:0d:25:09:ea:cd:94:cd:fa:0b:5b:43:3b:55:
46:bc:73:c2:1f:28:c1:e6:52:c9:fb:b3:1a:05:26:
5e:f6:d6:e5:1a:46:d2:41:5c:83:1c:4c:6e:49:a3:
46:96:ea:13:4e:d2:60:04:10:45:8c:c7:7b:d2:16:
2c:5d:0a:ce:58:71:ee:9d:5b:be:a7:d1:11:59:c6:
8e:49:42:25:ba:9d:5e:80:f9:33:9a:e2:f6:79:2d:
8d:ea:db:f2:64:19:c9:70:be:0f:a7:fd:ca:26:5e:
20:5d:3c:5c:5c:27:05:27:d1:b6:0a:a9:0e:fd:1c:
5b:9a:30:62:cb:81:93:c2:20:28:46:af:a1:b1:86:
98:6e:f8:68:3d:c1:b0:e8:2b:b5:5e:d3:3d:16:be:
e2:dd:3f:5e:6d:c4:94:21:36:8b:32:4e:5b:01:cb:
11:2e:5d:36:f6:56:9b:e7:9a:41:7f:c1:89:f2:89:
10:d1:f4:50:af:5d:e3:2d:e2:9f:46:0d:c4:3e:ff:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:F6:AE:B2:91:EC:02:4E:48:07:1A:F6:77:2D:45:14:92:47:6D
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:5f:97:ad:74:36:91:07:fe:e0:6b:1f:8c:14:69:2b:15:
8a:b0:d1:66:e3:84:82:89:9b:ea:b5:3d:19:5f:1f:d8:01:06:
58:f3:4c:df:e7:80:bd:55:46:10:9a:88:4f:36:86:5d:2d:3e:
1b:35:05:33:97:07:18:5e:2d:e8:4b:da:68:99:80:ed:36:bc:
67:2e:10:6f:4c:59:22:7d:0f:5d:c5:55:ca:54:98:8c:c6:a4:
1e:1f:ac:fb:75:10:d5:90:46:d5:6a:9b:83:95:96:76:91:b1:
44:22:23:61:e2:8a:e1:93:54:19:01:07:fd:78:e4:c2:8b:e4:
d2:cd:fe:0c:99:ab:6e:00:80:c5:0a:02:64:cf:be:fd:ae:f0:
43:c2:8f:af:97:d8:68:00:af:46:e2:0d:5e:e9:d7:f3:6d:d1:
7d:86:29:f8:b5:3e:35:0f:7f:00:df:fa:a7:38:77:61:cb:be:
ce:42:93:b0:81:ff:3f:6d:95:f6:39:ca:80:80:60:2d:38:d4:
e1:6e:d5:31:69:2b:f7:28:4a:99:4e:87:07:a0:95:74:be:0c:
9f:3e:4b:5b:f4:2e:27:68:7f:dd:38:f2:d8:81:fe:fe:1b:27:
e8:7c:a9:2d:6d:39:50:38:0c:43:64:65:c1:88:dc:62:38:51:
35:81:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:39 2026 by rpki-client