Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
File: hDvoY59AOZk8H254efRynkfcN64.mft (raw, json)
Hash identifier: vMh53x7stTDGCUN2lW9AYJr7/p780Tw5I/Kf1kNoyRo=
Subject key identifier: 14:40:63:50:06:C9:18:11:36:CD:BB:FE:7F:60:6B:AA:E1:5F:C3:06
Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
Certificate issuer: /CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Certificate serial: 019D389BE945CD47E7371B00DC5279DE174F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
Manifest number: 0AA4
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: 08llQ74BuBaNWqT4Y7FAkII-DJw.roa (hash: pxdI4iXE9K/M2+2A8OZhCl+4882oOXHYqUhqvnxntUE=)
2: hDvoY59AOZk8H254efRynkfcN64.crl (hash: qF/HJ+YJ7EczhVv+5wGWfSCepGop+Ah0+bEqOtHs0BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e9:45:cd:47:e7:37:1b:00:dc:52:79:de:17:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=1440635006c9181136cdbbfe7f606baae15fc306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:3b:82:34:2d:c1:8c:13:5a:df:90:c5:9b:
2f:44:8e:89:15:c7:88:8f:c2:50:e9:48:60:8a:35:
8b:3a:c0:c1:0c:a9:c7:e6:bb:7d:83:99:4b:1c:65:
92:7a:ca:03:99:15:13:c0:8f:e1:be:5a:2a:69:ea:
d0:75:52:91:e6:8c:61:ff:e7:e1:7e:f9:5b:ec:58:
be:42:6e:86:7e:5c:1b:5f:da:c0:a6:28:13:0c:6d:
ad:a9:4c:8e:47:4f:28:ae:f8:97:af:2a:c2:9d:fa:
3c:aa:90:61:ea:23:a8:13:95:f2:c2:24:93:f5:bf:
e1:85:26:9f:60:c7:a1:9e:b9:c0:d9:44:50:b2:81:
75:86:15:d6:f9:18:ba:d7:55:dd:82:79:83:93:11:
10:41:e7:53:d1:f8:39:48:01:9f:8c:cb:a8:26:67:
33:98:32:ef:91:f4:c9:cb:95:c7:4a:69:80:3f:6a:
4a:83:8f:de:ce:b7:fb:cf:66:cf:e4:83:16:99:f5:
b6:eb:46:42:85:09:0f:bf:c4:33:4d:9c:95:c2:65:
e9:6f:91:02:fa:c2:13:9d:db:6c:2b:f6:07:33:26:
4d:c7:99:e1:22:85:cc:48:36:b3:59:47:1c:67:65:
03:a3:cd:cc:66:8e:1d:e9:9d:06:b4:a0:e5:c4:26:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:63:50:06:C9:18:11:36:CD:BB:FE:7F:60:6B:AA:E1:5F:C3:06
X509v3 Authority Key Identifier:
keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:0d:29:0d:a3:13:cb:4e:06:ad:4d:f3:cd:6d:11:91:17:
31:82:c6:a2:93:14:9f:ad:f2:9b:0a:04:b3:39:40:45:f0:e8:
69:a9:4e:2f:3d:77:2d:92:0c:48:8b:ae:06:d4:02:e7:98:a8:
f2:fd:c3:47:8d:de:2d:da:4e:4c:05:36:92:76:17:d6:65:b2:
aa:4d:b1:c3:9d:af:4e:5d:26:89:d1:24:62:a9:b0:68:c5:a8:
47:90:ae:18:34:ee:1d:62:27:13:8d:e9:4c:28:41:e4:1f:2a:
64:68:ef:be:ef:7a:db:d4:75:bf:ed:43:c5:15:55:14:08:85:
3d:5b:0b:a2:a2:35:01:73:5a:f1:f6:61:ce:9e:2d:bf:13:c6:
b7:24:0a:98:4b:d3:e0:ef:37:1b:65:7b:52:b1:03:0b:29:9c:
86:8a:ca:79:6d:16:6c:dc:71:d2:8a:64:62:d9:48:25:9e:b3:
f9:3d:ac:e1:cb:a9:b1:5a:25:2e:0d:4b:4e:9e:ef:2e:0e:b5:
58:ee:da:8d:cf:9e:20:1e:cb:1c:21:2b:7c:20:f4:c2:59:a6:
3a:73:73:bc:c4:ff:1f:f6:2b:5f:fc:92:b5:7d:19:a7:df:fe:
1b:44:e4:52:65:ff:cc:08:b8:80:a6:a7:2f:2c:13:2f:11:05:
b7:f8:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:01 2026 by rpki-client