Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: BNn49xlJAsrMoqSPCqv+ybEgahBFQqDD+CCe4CJHzMs=
Subject key identifier: CB:43:2B:61:85:39:94:FC:5F:72:EE:84:19:95:05:B0:1A:6A:BD:4B
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019D3262BFD703364230E46153F54078CADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 1871
Signing time: Sat 28 Mar 2026 03:00:25 +0000
Manifest this update: Sat 28 Mar 2026 03:00:25 +0000
Manifest next update: Sun 29 Mar 2026 03:00:25 +0000
Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: Ocx0TMBVj0TBsG1oPGrcQPfbd7VYizl2NEvkjdAiUDs=)
3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:bf:d7:03:36:42:30:e4:61:53:f5:40:78:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Mar 28 03:00:25 2026 GMT
Not After : Mar 29 03:00:25 2026 GMT
Subject: CN=cb432b61853994fc5f72ee84199505b01a6abd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:2d:1f:9d:39:f5:1c:a9:0f:52:2c:6c:37:
87:d5:99:75:f1:f3:b8:45:d9:7d:70:e7:29:fa:07:
88:08:7b:b3:97:07:22:5a:ad:b3:7f:7f:24:c6:90:
6e:10:73:75:dc:86:fb:bd:4b:3e:57:4a:57:3a:3b:
42:ff:c2:58:ec:ef:5d:df:f7:56:b4:05:f5:72:37:
a4:1d:cc:f6:64:b8:1f:a4:64:f0:5f:2b:ee:9f:13:
82:64:ff:09:1e:c2:68:3d:11:f0:bf:a7:a7:2d:c6:
15:79:0a:63:98:41:71:d4:c6:8e:65:fd:99:8c:e2:
af:18:f8:a9:91:72:40:33:9c:40:98:33:ba:e0:5d:
0c:38:13:21:15:6d:19:35:ea:f3:5d:40:d6:ff:b3:
66:5d:2c:d4:ab:cb:d2:d5:d3:c6:4b:0e:78:c2:99:
37:98:49:60:4c:02:a1:c0:1e:c2:34:03:60:4a:af:
f5:08:9b:ea:6a:2a:7f:e6:9d:6a:f6:f4:7a:b3:e1:
b2:f7:e1:af:c2:f0:ad:31:bf:3c:a0:ee:c7:33:0c:
4b:e3:1d:6e:87:51:ab:5b:c7:1f:f4:8b:e5:5e:24:
b2:a9:63:b7:fa:0a:36:7d:48:06:37:45:68:51:ba:
71:e4:10:3c:b5:6e:51:2f:5e:5d:02:8d:d1:0d:0c:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:2B:61:85:39:94:FC:5F:72:EE:84:19:95:05:B0:1A:6A:BD:4B
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:87:66:ea:4f:3b:32:ab:f5:bc:83:e0:2c:aa:a2:4d:47:5c:
54:12:2c:c9:c0:d8:f1:2a:49:ab:28:b7:12:35:70:43:c2:2a:
1f:60:05:5c:07:c2:2c:0c:d5:10:0c:88:4e:f1:23:84:2c:00:
ef:70:4b:6b:7f:fc:1b:19:25:1b:e5:11:cf:75:14:00:fd:4d:
4a:07:3e:10:7e:70:20:e4:fc:12:f1:ce:34:78:3d:70:2b:17:
84:6f:4a:41:bf:95:86:08:36:30:91:3e:56:d5:94:f2:a2:68:
94:87:7b:82:6c:42:96:3d:3c:c2:a3:28:1c:57:20:d1:b0:98:
b7:a9:a4:d4:8c:e7:18:89:93:12:64:be:79:d5:ea:62:4f:85:
5f:87:69:f6:c7:17:8d:f5:0c:a9:6f:f0:4a:2f:21:82:89:2d:
7c:5c:bb:1e:ae:8e:99:5c:69:86:f4:5c:33:c0:29:86:59:b8:
84:46:79:af:8e:d9:30:64:fb:f5:93:51:a0:89:6e:68:65:4a:
f3:2b:c3:a9:7c:cc:67:4d:6a:8a:67:a3:88:37:32:92:d1:2c:
6a:ac:78:3d:0c:02:4b:bc:33:fe:c3:ab:ea:06:85:34:a8:18:
3b:73:70:0d:0b:60:61:b6:f3:44:18:6e:0d:1d:8b:b4:b4:3c:
34:86:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:02:03 2026 by rpki-client