Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: gRTy7aBPty3D9nIMCgkcuztQpHmRRE4SymEviQ5Dkqk=
Subject key identifier: 52:27:20:A0:B8:B5:AB:40:3A:73:7B:FE:E4:B5:32:A5:23:F9:7C:97
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019CAC4751622E7973F429A96D5C38B674BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 08F8
Signing time: Mon 02 Mar 2026 02:01:20 +0000
Manifest this update: Mon 02 Mar 2026 02:01:20 +0000
Manifest next update: Tue 03 Mar 2026 02:01:20 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: iNXWzPglHxOaJzE3hxzB+3kPS+DZFGGatF1aCQRrTRg=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:51:62:2e:79:73:f4:29:a9:6d:5c:38:b6:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Mar 2 02:01:20 2026 GMT
Not After : Mar 3 02:01:20 2026 GMT
Subject: CN=522720a0b8b5ab403a737bfee4b532a523f97c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:bf:07:b4:19:fa:68:13:c9:a8:f4:5d:cf:
59:0c:ce:13:62:c4:5e:e2:79:b4:70:65:7e:e1:0b:
bf:13:af:fd:91:e7:5f:2b:e5:cd:95:5d:e5:76:77:
81:9b:ee:22:56:c4:43:64:f0:ef:98:0a:c3:e9:72:
a1:6e:9c:99:dd:2d:37:1e:76:f0:55:17:b1:d1:2c:
6c:2f:cf:10:0e:48:c0:b3:c1:4e:5e:87:39:8c:44:
3d:d6:2d:7c:20:ad:68:89:7d:57:9e:cc:2b:00:c1:
88:84:4b:6b:7c:64:c0:82:79:71:f0:34:82:14:5c:
91:f1:c2:3b:f1:36:29:31:76:3a:d1:ac:d9:eb:36:
e0:d6:5a:88:9d:33:62:bd:c6:ed:b6:0c:52:34:8b:
26:22:49:c5:3c:be:59:34:ec:4f:b3:14:84:72:3a:
ad:e4:4e:ca:b7:2d:f6:c6:76:ec:e8:25:e2:f0:4c:
0c:48:76:db:e2:a6:07:3b:9d:30:8a:bd:c0:1f:4d:
71:6d:1d:6e:ef:49:9b:19:fe:29:44:74:be:8e:cd:
54:cf:3c:dc:4d:0c:02:fb:46:3a:73:ca:2f:08:15:
3b:43:3e:5b:92:6b:28:da:ff:db:3e:97:bc:dd:c6:
35:d1:99:9f:ba:6a:bf:82:ff:fd:7c:85:a3:18:12:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:20:A0:B8:B5:AB:40:3A:73:7B:FE:E4:B5:32:A5:23:F9:7C:97
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:86:87:5a:03:82:26:87:d6:86:61:60:ac:cc:86:96:b6:
69:71:37:6f:c6:cb:83:f3:14:23:66:21:aa:19:4e:43:7b:32:
86:b9:8b:97:1f:40:64:f1:26:2a:ca:af:9d:75:a8:7b:60:6c:
76:40:da:ac:47:4a:75:08:4d:84:90:9e:ae:28:ea:9f:18:8f:
8a:c4:b8:ab:9b:38:37:0b:fa:90:72:92:fa:c0:ae:e0:99:ca:
39:62:5b:15:27:3c:24:3f:c4:2c:90:17:52:28:76:cf:6d:f4:
76:a8:82:c7:ce:2f:5e:da:08:a1:81:fa:09:83:3f:97:fc:f5:
b3:62:5c:4e:42:ab:a7:32:a5:5a:7f:50:6d:e0:d7:bf:ba:e9:
69:7b:92:0b:02:7f:b9:c9:cc:8f:6f:e9:59:51:b9:a6:e5:10:
4f:73:39:14:ea:28:74:73:ee:67:da:36:5a:7e:a1:24:a9:77:
61:28:b4:18:a6:c7:67:85:fe:a2:3a:2b:66:c3:30:df:17:a5:
fb:2d:3d:96:06:4c:ca:04:b0:92:81:dd:71:7d:2c:16:ea:ef:
21:9d:54:21:c1:e6:5a:73:57:db:a5:93:51:94:0e:85:0f:9e:
36:9a:bf:22:63:ee:cb:cd:d3:57:0c:af:f4:03:fd:c8:22:b0:
70:8c:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:48 2026 by rpki-client