
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier: axmiC7GbKG6E7CYnbTsMI+ymibPKZ6mnv/XvBxs3Pfc=
Subject key identifier: 81:23:24:0B:11:68:13:C0:B4:D7:BD:03:36:18:25:FE:68:0D:80:9A
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial: 019CAE6C7798CAC2168C431D435479874386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number: 0905
Signing time: Mon 02 Mar 2026 12:01:09 +0000
Manifest this update: Mon 02 Mar 2026 12:01:09 +0000
Manifest next update: Tue 03 Mar 2026 12:01:09 +0000
Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 6Q4pzswlMx4PBtBWLC0YhNbk1ggddybH11nK7IzNWrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:77:98:ca:c2:16:8c:43:1d:43:54:79:87:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
Validity
Not Before: Mar 2 12:01:09 2026 GMT
Not After : Mar 3 12:01:09 2026 GMT
Subject: CN=8123240b116813c0b4d7bd03361825fe680d809a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:86:8e:59:fe:d5:d8:04:74:b1:80:dc:7b:
29:5f:44:f3:8b:a4:c2:98:10:cb:2d:f6:fb:d7:ec:
e7:99:5b:76:b4:a0:06:28:32:00:ed:96:73:f5:e6:
e0:4c:60:a9:9e:c1:a0:0f:dd:04:57:cf:8a:de:a2:
ac:28:27:b3:a5:cb:ab:b8:65:87:65:91:a2:75:51:
9f:62:ef:c9:77:ac:1b:33:75:2b:ec:7a:43:64:2b:
d3:1c:ea:2e:52:fb:62:f5:5a:3a:aa:b8:b5:fd:35:
f0:e4:84:cd:42:f1:63:85:d5:15:06:03:3e:cb:c6:
02:e0:f3:f8:b3:f3:37:55:dc:21:73:c6:e6:96:92:
ae:56:7e:8a:43:ca:e8:79:31:2d:09:07:9f:f4:44:
2b:07:63:41:51:07:89:0f:5f:9d:43:bd:3d:64:6c:
13:1a:f5:d6:ed:61:58:f2:8d:c4:22:15:b8:47:85:
26:a9:21:e1:d6:ea:72:f0:71:be:ce:2a:28:25:cb:
09:6e:0b:93:87:8f:54:88:a9:8b:62:ad:4b:22:d0:
40:f3:5b:1d:3a:a7:49:f6:f5:a6:ff:08:b6:cc:93:
49:f6:1b:73:d9:11:7c:30:5a:7f:40:22:5d:a3:f3:
e4:43:28:b3:73:13:d1:74:ac:b6:fb:6a:0e:31:be:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:24:0B:11:68:13:C0:B4:D7:BD:03:36:18:25:FE:68:0D:80:9A
X509v3 Authority Key Identifier:
keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a6:0f:7d:96:61:09:80:c7:a4:5e:d2:bb:92:91:53:97:36:
29:6f:95:50:bb:68:d7:53:b6:7d:25:42:a0:4c:d7:0d:60:28:
fa:cf:93:f0:e2:cb:b3:ab:c6:49:73:25:cc:37:9c:fa:e1:94:
56:ed:7c:e9:76:b4:bf:a4:b6:cf:da:d5:3f:28:41:81:ed:62:
e8:2b:8c:76:4a:da:44:c4:98:c0:6f:b4:11:d2:bf:c8:50:06:
61:6a:7f:f8:52:2e:c6:40:97:b8:ce:c5:6b:7f:5e:64:08:5b:
46:ba:f6:b3:25:20:6f:88:90:7a:3e:2f:2c:b2:46:50:76:21:
d4:fb:6d:78:2f:73:c5:ef:8e:21:33:a8:0e:62:ab:16:63:df:
7b:8f:75:a7:a0:a6:cf:b2:65:1d:dc:94:0e:ab:5f:70:ab:d0:
3f:d4:97:b8:77:3e:83:3f:89:f5:c7:63:84:dd:ad:86:4d:aa:
11:b3:20:03:d1:02:f2:ff:95:01:27:4f:c3:34:ca:ff:8e:9f:
5c:8d:d2:34:a0:d2:e0:be:90:e6:53:e8:0f:02:0a:0c:5b:e8:
16:8c:67:00:d7:1b:74:11:c9:17:ba:82:43:44:46:f9:e0:c8:
d7:f9:38:37:55:db:75:e3:6d:81:d7:ef:4a:79:c4:37:f8:e3:
fc:84:7d:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubHeYysIWjEMdQ1R5h0OGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNmZlMDA3OTE3ZWI2MzI3YmUzMDYxYTlhZjZlYzU0OGQz
NTMwNjYwHhcNMjYwMzAyMTIwMTA5WhcNMjYwMzAzMTIwMTA5WjAzMTEwLwYDVQQD
Eyg4MTIzMjQwYjExNjgxM2MwYjRkN2JkMDMzNjE4MjVmZTY4MGQ4MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mmGjln+1dgEdLGA3HspX0Tzi6TC
mBDLLfb71+znmVt2tKAGKDIA7ZZz9ebgTGCpnsGgD90EV8+K3qKsKCezpcuruGWH
ZZGidVGfYu/Jd6wbM3Ur7HpDZCvTHOouUvti9Vo6qri1/TXw5ITNQvFjhdUVBgM+
y8YC4PP4s/M3Vdwhc8bmlpKuVn6KQ8roeTEtCQef9EQrB2NBUQeJD1+dQ709ZGwT
GvXW7WFY8o3EIhW4R4UmqSHh1upy8HG+ziooJcsJbguTh49UiKmLYq1LItBA81sd
OqdJ9vWm/wi2zJNJ9htz2RF8MFp/QCJdo/PkQyizcxPRdKy2+2oOMb4ngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEjJAsRaBPAtNe9AzYYJf5oDYCaMB8GA1UdIwQY
MBaAFB9v4AeRfrYye+MGGpr27FSNNTBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQt
MDliM2I4NzIyNjg4LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQtMDliM2I4NzIyNjg4
LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6YPfZZh
CYDHpF7Su5KRU5c2KW+VULto11O2fSVCoEzXDWAo+s+T8OLLs6vGSXMlzDec+uGU
Vu186Xa0v6S2z9rVPyhBge1i6CuMdkraRMSYwG+0EdK/yFAGYWp/+FIuxkCXuM7F
a39eZAhbRrr2syUgb4iQej4vLLJGUHYh1PtteC9zxe+OITOoDmKrFmPfe491p6Cm
z7JlHdyUDqtfcKvQP9SXuHc+gz+J9cdjhN2thk2qEbMgA9EC8v+VASdPwzTK/46f
XI3SNKDS4L6Q5lPoDwIKDFvoFoxnANcbdBHJF7qCQ0RG+eDI1/k4N1XbdeNtgdfv
SnnEN/jj/IR9CQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:05 2026 by rpki-client