Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: sJ+uy1IfAAlaWPS4b2jYgtIGI40TVxdbkRe4s6qSVQg=
Subject key identifier: C5:F6:32:62:40:8C:95:04:FB:B3:02:05:63:05:15:B3:A0:C8:E0:01
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019D3A8B153FE588C391E5DDE2F365308098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 01CB
Signing time: Sun 29 Mar 2026 17:01:26 +0000
Manifest this update: Sun 29 Mar 2026 17:01:26 +0000
Manifest next update: Mon 30 Mar 2026 17:01:26 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: W5HDOMgOBTA8B6YzTpjuSYUAIsjciYkPCKkYrDr24P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:15:3f:e5:88:c3:91:e5:dd:e2:f3:65:30:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Mar 29 17:01:26 2026 GMT
Not After : Mar 30 17:01:26 2026 GMT
Subject: CN=c5f63262408c9504fbb30205630515b3a0c8e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:14:29:db:90:73:ce:2e:db:7d:64:5b:12:
33:a6:0c:34:59:73:3e:09:93:77:6f:bd:43:9c:c4:
88:04:50:b4:da:7a:62:bf:1e:57:2f:5f:c3:34:80:
24:3d:dd:e8:88:57:6d:c3:66:58:9d:f6:89:fc:91:
ab:c7:4a:a8:38:17:9f:a6:99:24:c9:f7:45:e1:70:
06:98:51:8e:88:7a:58:45:b3:7d:19:63:a2:56:58:
7b:50:72:9d:ed:07:25:ca:60:92:bd:cd:29:6e:c2:
ed:e4:af:59:23:44:ba:94:a0:00:96:66:a8:70:76:
44:17:1c:78:d1:38:43:4c:b4:0c:2e:04:a0:30:91:
90:c9:03:a0:79:4d:66:e6:1f:7f:93:ba:43:d4:fc:
0c:11:f1:1d:2f:76:0d:81:15:95:96:12:fb:c7:51:
c9:fd:c1:4d:9b:26:44:4a:52:f1:7a:18:68:9c:71:
89:45:25:fe:f6:f2:7f:42:1e:ef:be:18:e0:04:8a:
92:02:6f:c3:29:76:3c:61:79:ff:da:e2:d6:bb:dd:
4d:05:07:06:14:2d:08:e8:a5:e4:bd:15:f4:83:7a:
7d:f6:63:91:77:37:70:37:2e:65:a7:e0:ae:41:8c:
af:bc:80:94:63:c9:06:5d:8d:04:80:39:96:c3:8f:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:32:62:40:8C:95:04:FB:B3:02:05:63:05:15:B3:A0:C8:E0:01
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:75:72:38:2e:d0:8f:c9:34:9e:d9:9b:11:f9:b3:5c:57:26:
19:2b:e8:b3:61:8a:59:c9:ea:4a:ee:3f:bc:09:9f:73:ed:c3:
d6:b5:d6:c9:ec:fa:b0:d5:b7:9f:df:76:3a:33:81:b9:28:62:
0c:91:b7:54:37:b8:fa:80:1d:f7:5b:5c:09:1c:20:b1:cc:18:
09:27:a1:cb:2e:4a:f2:fa:2b:71:e9:11:6d:52:00:2e:0a:d9:
98:d2:8a:10:b6:03:8d:25:17:0e:e7:0d:9f:3d:36:bf:c2:29:
d8:16:32:39:95:7c:ff:08:76:cf:2f:88:f6:aa:06:62:03:49:
09:86:fc:ab:53:a1:cb:1c:cb:dd:18:54:ea:1e:a7:b8:d5:26:
ed:52:25:71:96:ce:17:c2:ac:cc:31:d7:86:e8:e7:0d:f2:57:
91:77:b4:47:83:09:15:f7:d4:7c:37:fd:87:f1:b5:65:38:ac:
01:d1:11:b0:95:4e:c6:1a:60:12:bb:18:59:12:60:8f:f0:45:
c7:7b:00:18:c8:62:a3:8b:12:ae:ed:99:4f:b3:bd:1b:73:15:
24:e8:dd:79:b1:37:ae:34:dc:fb:4a:90:5c:3a:6f:ed:42:5f:
21:c9:83:30:cc:83:c1:b6:89:9c:b9:f6:e5:d0:f6:cc:1e:b5:
cd:ed:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:00 2026 by rpki-client