Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: dLdJpWjw4zesNqT6k4qP0SInbapcJLiRFUMxi0pN55I=
Subject key identifier: 62:FC:3F:37:5A:F3:FD:4B:8D:B6:BC:71:1D:8F:25:52:3A:42:40:39
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 019CAD226C9E8D2524B88324A13845CB0AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 0BDF
Signing time: Mon 02 Mar 2026 06:00:40 +0000
Manifest this update: Mon 02 Mar 2026 06:00:40 +0000
Manifest next update: Tue 03 Mar 2026 06:00:40 +0000
Files and hashes: 1: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: wU3FSHg03MyL3Ipj1hS3XWdwEGgxfg3MSbok6IUo7Qc=)
2: S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa (hash: HALtWZ0hiQzMkL2eGHauQhHqRPrLY/Kagy5eLk2wo9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6c:9e:8d:25:24:b8:83:24:a1:38:45:cb:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Mar 2 06:00:40 2026 GMT
Not After : Mar 3 06:00:40 2026 GMT
Subject: CN=62fc3f375af3fd4b8db6bc711d8f25523a424039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:d5:3f:aa:b3:06:34:b1:fb:48:a1:3b:2c:
2a:bf:0e:8c:db:7e:51:cf:2f:e1:db:1c:ec:8c:d5:
86:38:38:21:04:f9:3b:0b:00:12:df:ad:f5:9b:e0:
9c:31:ec:59:35:5d:83:ab:da:05:d6:95:08:ff:cf:
41:9e:de:36:fb:fd:e1:69:4f:f2:f6:9d:b8:7f:a7:
f8:1c:7f:e7:9c:ce:e7:e4:04:3e:c5:dd:c9:05:89:
79:f3:02:e2:d5:9f:4e:df:39:bc:f4:b9:4a:17:cb:
c5:18:8d:6b:32:eb:6e:c2:ac:e1:78:8e:86:5a:cd:
a7:14:d2:7e:6e:fd:de:5c:10:1d:8c:ef:f8:f5:e1:
38:88:9e:f7:8a:76:a1:c3:69:e5:0e:91:db:c1:46:
42:f6:17:f3:37:49:73:aa:43:a6:1c:de:17:5d:df:
85:f0:b3:5a:2e:99:1d:69:ee:8e:9b:74:37:70:2f:
5c:c0:13:ca:60:f9:13:a8:ac:24:f6:e4:0f:ab:f4:
8e:05:b4:35:5d:85:38:06:e6:ae:ff:10:1a:3d:4c:
b4:c1:2d:92:2b:71:c7:49:5e:b7:ec:6e:a3:1c:0d:
65:bd:68:06:cd:c7:03:55:45:25:2b:29:77:18:0c:
19:e4:7c:bf:ad:2a:7b:6b:39:62:10:f8:7f:20:2b:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:3F:37:5A:F3:FD:4B:8D:B6:BC:71:1D:8F:25:52:3A:42:40:39
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:58:4d:09:75:9c:4f:20:4a:da:ff:33:1b:47:30:1c:cc:a9:
28:c0:b5:86:bd:45:54:0a:5e:1a:10:9d:1d:42:12:42:87:fd:
bb:aa:34:a8:be:8e:c1:52:c3:c8:c2:9f:1f:23:32:73:dc:2d:
63:7b:51:87:86:a1:ed:b2:1f:31:45:fb:0a:10:48:10:da:f0:
05:f8:3e:2e:4b:8e:5f:40:4c:30:23:21:c2:ee:ec:e1:36:8b:
6f:0c:f8:ce:d9:69:4a:17:e6:40:80:9c:7c:87:f1:19:7b:84:
5b:42:97:db:20:4e:ca:07:8f:af:33:be:6b:cb:b2:9e:ed:83:
94:a2:46:72:04:bc:43:21:10:e0:3e:27:99:fc:4d:79:88:fc:
87:a8:c8:af:3b:25:40:5f:3a:36:0c:99:17:b7:bf:c1:39:b4:
79:03:11:a0:3b:01:eb:e3:b7:23:bd:cc:ae:3f:81:b8:03:9b:
3d:04:75:24:e2:fb:7e:4d:77:fd:be:ed:28:71:ff:84:41:5d:
30:b1:1c:df:87:64:67:63:db:cc:c2:00:d3:b7:d0:c5:49:d5:
64:dc:01:97:2a:d6:f2:56:0a:67:10:a5:09:ad:f0:e7:30:8d:
d4:77:15:a1:7b:b6:b7:19:d6:42:c1:75:a2:63:78:34:0b:0b:
b2:6d:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:30 2026 by rpki-client