Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: ageIeNvX0URf/5MouYoDSY2U4owU0IuEtCKUQFNKG/Q=
Subject key identifier: 03:E7:E2:6B:69:0D:B4:AA:06:9E:C1:88:07:0B:3D:0E:9F:E8:8B:E0
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019CAED9BC1F43E79AC5BB91A2293564D721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 07E6
Signing time: Mon 02 Mar 2026 14:00:30 +0000
Manifest this update: Mon 02 Mar 2026 14:00:30 +0000
Manifest next update: Tue 03 Mar 2026 14:00:30 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: DgcpD+HXe2J0YD9eGxDtrIz6p4De7bEnuFWtAC19veo=)
2: tWUs5_OoSfOVpkRE9FrQnWN345I.roa (hash: Ik3wfYejmGeFJTK3ER8Y42u6+FSgfq4mC824weZ/UdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:bc:1f:43:e7:9a:c5:bb:91:a2:29:35:64:d7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Mar 2 14:00:30 2026 GMT
Not After : Mar 3 14:00:30 2026 GMT
Subject: CN=03e7e26b690db4aa069ec188070b3d0e9fe88be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:f0:88:d7:16:b8:f5:27:e7:90:31:a9:ac:
1f:bf:4a:bc:08:22:55:1f:9e:00:fe:72:fb:22:ce:
56:72:1d:0b:35:76:c2:26:21:22:c6:60:4c:c4:d8:
20:18:62:e2:23:50:83:23:7d:33:7f:82:be:9b:0c:
36:4b:aa:b3:1b:26:15:07:1b:7e:cc:d3:35:cb:35:
14:86:5e:c7:56:c2:92:5e:a6:e6:d3:29:ee:8b:26:
55:30:d1:f5:ee:a2:08:6a:7e:e0:b6:80:16:0e:2a:
f4:9d:f3:9f:ce:35:57:52:8b:f1:ef:ed:2c:f7:7a:
c6:17:0c:48:51:bc:7f:dc:89:96:7c:b8:5b:92:18:
10:98:a1:41:60:2d:11:26:ab:05:dd:78:a5:7a:b3:
92:e1:d1:97:99:3d:a2:bb:f5:4b:c7:b5:08:e8:6a:
8e:4c:74:2b:b6:d1:71:1b:d2:00:38:5d:9e:52:f1:
c7:8b:a9:0d:22:cb:98:35:aa:20:ce:63:6b:f6:c6:
be:7a:d7:a7:fd:cb:27:a1:41:dd:7d:ff:71:ff:a8:
42:19:1d:0e:d4:2f:54:b7:b2:cd:d1:61:c6:a3:bc:
1f:3b:37:57:e4:61:28:17:4e:88:1f:98:19:c9:e5:
46:b6:ee:51:ab:1c:e5:20:60:ac:d3:5d:06:d8:82:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:E2:6B:69:0D:B4:AA:06:9E:C1:88:07:0B:3D:0E:9F:E8:8B:E0
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9d:12:a9:f6:8a:58:8a:d4:7c:be:4f:f2:f4:70:32:45:9b:
dd:e9:39:38:0c:e1:9c:a6:e0:09:e1:ed:2a:2b:f1:b5:dd:65:
0d:40:32:44:80:c9:9e:18:34:78:79:ce:7d:93:68:67:29:d3:
c8:2d:f6:11:dd:11:0a:60:ec:f6:9e:0a:ac:61:0d:ef:79:55:
19:5f:b1:7b:56:91:15:23:67:f2:3b:5d:29:ad:fd:48:a5:8b:
c0:f9:d2:a5:55:97:e0:d9:37:b5:52:69:97:c0:a3:57:d3:7d:
84:f0:a8:52:31:fc:5f:45:26:08:c6:0b:40:ea:d0:c5:99:21:
d4:6e:1a:65:78:11:f0:8b:2d:aa:95:a3:cd:d6:69:7d:20:19:
e8:af:cd:b1:ff:e9:50:c9:47:5f:44:78:ee:99:93:31:cc:bd:
50:2a:c4:a6:be:04:ff:59:77:2f:90:4c:3c:c8:57:42:9a:fb:
bd:c1:5c:71:15:66:61:f8:7b:c1:0e:b1:49:67:89:24:3b:ab:
f2:3e:d6:7d:4c:0f:b5:96:b3:ea:54:f5:7d:9a:9c:01:99:ce:
66:db:22:32:84:4e:88:f7:11:d1:29:af:84:30:8a:cb:3e:d6:
a6:57:25:5d:60:eb:d8:33:d0:e8:fa:28:3f:c8:56:79:9f:d7:
26:54:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:41 2026 by rpki-client