Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: O2/9rvoasI9RF70scQ6pS4xdeYJk5m2fli9jwcdB4oQ=
Subject key identifier: 0C:15:DA:F6:23:D3:3D:A7:BC:D5:61:D2:D7:B8:23:63:43:8E:50:E9
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019D37F7075B5662CBEEC43E5FEDFE7C39B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1523
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: whzZo6trHB9KQ3ept7fAN20a/qfdxpS6lOWAQr0twg4=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:07:5b:56:62:cb:ee:c4:3e:5f:ed:fe:7c:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=0c15daf623d33da7bcd561d2d7b82363438e50e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:17:69:a5:b0:53:96:76:6e:f4:a9:d3:68:
d5:3b:c1:1a:a5:57:31:bb:13:58:8e:86:d8:0c:7b:
f7:4e:ae:35:19:75:42:e6:98:44:f2:cf:f7:22:a4:
32:da:7b:19:7e:75:9e:ec:b1:dc:02:05:3d:a1:ee:
ea:72:df:32:44:0f:75:61:a5:ae:54:88:9a:5c:d3:
42:d0:9a:61:30:4a:82:69:4d:88:88:16:7c:80:35:
ba:3c:ad:5c:d7:fa:45:1e:9e:53:c9:90:fa:20:db:
54:4d:42:c5:88:85:fe:73:3b:17:5e:da:09:d7:68:
08:26:12:5f:4e:69:0f:ed:8b:fe:45:6f:60:a2:fc:
52:3b:8d:a3:31:ed:9b:06:07:31:25:50:25:86:ff:
ed:31:25:ad:d7:d8:08:bd:1c:f0:ca:68:af:94:5f:
51:26:72:81:76:79:c1:6a:0a:e1:c2:77:24:7e:c5:
7b:06:f9:2e:2d:98:a9:c0:a3:40:86:31:3d:4b:4e:
14:6a:5e:5c:d5:ee:e2:cb:e8:95:d5:d8:25:41:8a:
23:54:13:ce:79:2b:04:fc:1b:9e:f1:57:46:9d:b4:
63:d7:db:8c:a1:da:51:cf:90:cd:a5:ae:9f:29:17:
75:30:1a:49:0a:79:b8:64:d7:eb:b5:dc:fe:a2:71:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:DA:F6:23:D3:3D:A7:BC:D5:61:D2:D7:B8:23:63:43:8E:50:E9
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:70:1b:91:9f:f9:e3:51:87:3c:75:70:de:a2:b4:20:44:fd:
81:05:8a:39:da:66:15:6a:ad:1d:d8:2c:72:c1:89:5a:e6:73:
38:12:ed:b0:b9:a8:6f:4a:eb:7c:4a:12:7d:ac:de:c7:59:b4:
6a:0b:0a:03:f4:44:12:bb:9b:4a:b0:b6:59:5d:fe:46:5f:6b:
68:4b:cc:1f:09:44:c0:51:1c:a0:93:a6:a6:17:8e:c5:d8:80:
ad:b0:e5:78:98:35:b1:b8:81:e3:07:ed:81:5d:6c:c5:4b:29:
f8:4e:e7:76:75:1d:18:7c:ae:b0:dc:ef:b6:4a:6f:49:e9:b3:
73:be:5d:57:ab:a3:89:40:4c:b5:27:44:77:2f:bd:cf:09:70:
f6:fc:1b:4a:d2:34:a8:28:9e:32:e4:a6:fc:1f:6d:f4:c5:d8:
80:00:c3:2c:8b:df:18:0c:53:17:a2:7c:df:70:85:7c:b0:27:
30:68:d7:ad:55:ac:66:f5:d9:19:d4:e0:f6:8d:72:cb:86:9b:
10:a9:17:2f:2c:08:36:12:ba:99:35:ef:04:5e:21:2b:b7:51:
38:92:fd:b5:47:0e:cb:6d:e7:0c:e5:5e:cf:8b:d5:b3:56:43:
8f:ed:1e:df:84:4b:be:9f:36:9f:2d:7d:28:d2:2c:71:f7:ed:
cd:10:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:32 2026 by rpki-client