Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: J2C1dp0kU83v9PLa2rryTJNEQuNkNPx3Y5no7ls3pVs=
Subject key identifier: FE:23:47:5C:C4:5E:C6:3E:C9:DD:1D:C8:93:02:E1:09:0F:12:85:91
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 019D382E031C8630F776C4560A5A04608722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 069B
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: 7ObucnjBknjOc9VGyDvq-rah57Q.asa (hash: AfmsB5ElxTW0o9bXlvelsvJ0CpTckZTI7iwTHE4nG1E=)
2: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: jd78HhhqMsi3mGOSVdz0hr58vbLWCzr/xEYXfoA/nWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:03:1c:86:30:f7:76:c4:56:0a:5a:04:60:87:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=fe23475cc45ec63ec9dd1dc89302e1090f128591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:59:c8:40:85:e6:5d:46:0b:ce:80:be:13:
11:e3:de:44:73:8f:d1:5f:03:7a:a1:c0:3b:00:ee:
3a:a5:46:7b:07:ed:f4:85:18:81:8f:7d:71:be:d8:
9e:21:3a:7e:f9:ac:74:76:2a:81:2e:9d:dc:62:47:
55:78:06:f7:ce:75:0c:7c:ac:3e:98:ab:2b:43:c2:
04:48:a3:e9:cd:96:5d:df:fa:1f:be:b0:0b:fa:f2:
09:4a:b0:eb:d8:bb:4b:c9:b6:c3:b9:2f:cb:00:58:
99:f6:b5:0e:42:5c:f2:8c:0b:86:18:f4:43:42:1a:
b9:3b:de:07:45:eb:8c:b5:a1:09:01:59:90:fe:ad:
13:2b:3a:95:93:72:57:95:02:65:20:7d:8d:34:41:
de:a0:89:df:4e:87:3d:5b:ec:ba:39:b7:a3:0f:eb:
8c:79:d4:b6:f1:48:de:ec:5e:80:c8:bc:28:aa:6c:
dd:d8:58:dc:6f:29:96:49:0e:18:6b:7a:19:5e:3e:
a1:f6:9b:10:51:2e:99:99:2c:f8:dd:ee:9b:9e:00:
ed:52:4e:91:b7:a9:01:0b:0b:e2:4c:4a:18:4f:29:
5f:23:55:1a:bd:88:eb:c9:2f:cb:0c:d4:76:cb:5a:
9f:f9:b3:98:fe:31:7e:59:33:f3:8f:af:4a:69:ea:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:47:5C:C4:5E:C6:3E:C9:DD:1D:C8:93:02:E1:09:0F:12:85:91
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:1d:6f:64:5c:e0:9b:a4:b5:2c:7e:82:4f:53:63:45:53:
16:a5:17:68:c5:63:ed:c5:ca:e0:91:54:15:2f:4e:71:ae:be:
12:e3:37:79:fd:6e:e4:af:cb:25:bd:cf:99:3b:76:8a:3c:71:
8b:12:0e:0f:71:ea:e7:b0:45:e5:f3:bd:32:c5:bc:32:f7:bc:
5a:84:4f:0a:c0:d8:8d:0a:6d:ea:85:d8:e8:b1:c0:56:ea:bf:
e4:ca:e4:cc:fe:45:67:fd:d3:91:91:cc:56:2f:16:f9:9a:fa:
c9:39:94:cf:cb:c6:f6:eb:8b:36:50:e7:c8:9b:c4:79:77:d3:
8d:77:32:11:19:ea:c8:6e:bc:08:17:27:d6:de:9a:3e:2a:cc:
28:72:6a:c1:99:9b:04:93:9e:ee:53:0f:d1:1e:06:7e:9f:da:
5f:26:89:74:11:6e:28:9f:16:2c:78:c6:05:35:62:10:9b:ae:
b8:29:7f:63:fe:aa:3f:55:4d:fd:06:c0:8b:7e:53:f7:60:4e:
d5:ea:be:b3:ec:2a:ed:22:52:f8:17:5b:72:fe:f9:a7:2a:d8:
95:c0:3a:a8:a7:fe:25:e7:95:be:e2:3c:a9:c0:ef:3f:95:dd:
98:96:4b:6f:1a:78:49:e8:1c:cb:a4:20:b5:7e:15:c3:f6:93:
8d:b3:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client