Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: BMnQ0jtHUG3s1BLRi6qlKlFJrSez86UWpeeWi2QzTbI=
Subject key identifier: 2B:2E:5A:54:BC:56:F4:D8:8E:F6:34:13:0A:2F:07:85:BC:2D:19:13
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019CACB4C875841F512E6B21DF7909965EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 06C4
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: NrmYzh8tP8e76UVA8zjlpk/BGOFd9lVBAPOX7BTmRpg=)
3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c8:75:84:1f:51:2e:6b:21:df:79:09:96:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=2b2e5a54bc56f4d88ef634130a2f0785bc2d1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:7f:6f:26:ed:af:be:5f:b5:7e:05:21:7d:
8b:a0:ac:b1:3f:1a:27:7f:f1:25:af:30:ed:f7:8c:
a4:8f:37:30:8b:b6:65:ef:6f:9c:ca:0a:2f:3f:39:
85:1f:43:0d:13:12:41:b7:24:14:a3:a4:a9:7b:f7:
5d:dc:50:4e:22:65:9c:a4:9a:56:97:50:5d:b7:b6:
34:2f:dd:81:14:b6:cb:ec:12:65:31:e2:3e:32:58:
0a:e8:00:7a:fc:6e:74:8b:8d:18:5a:39:05:af:b6:
7e:24:74:f9:b4:63:09:e2:93:77:da:ab:25:ac:aa:
ab:79:c0:fd:2e:6a:5e:a5:71:2b:e9:21:b2:2c:cc:
c2:be:11:f2:d3:c1:e2:28:5c:47:ad:0f:aa:e3:55:
00:18:12:77:2b:4d:79:da:a2:a6:19:15:ba:4f:d9:
ad:48:49:86:e3:0e:18:33:a9:a2:a4:13:4d:6d:c6:
18:85:09:da:a1:99:14:6a:65:a4:5a:a4:45:97:df:
05:01:06:94:03:c6:cc:e1:47:b0:2d:6a:84:e8:cc:
4c:ba:6c:0d:59:93:ea:71:3d:e8:2a:54:23:2a:16:
f0:bb:4a:6e:7a:d9:99:3e:99:a2:47:e1:28:d1:e4:
19:91:c6:d2:95:67:46:cc:48:49:8f:79:01:6d:01:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:5A:54:BC:56:F4:D8:8E:F6:34:13:0A:2F:07:85:BC:2D:19:13
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b7:d5:22:c2:7c:b5:8f:79:40:f9:bb:ed:d7:3b:fc:a1:12:
a8:2f:9a:f0:b0:56:a7:c8:4f:5e:52:f6:4f:09:a9:59:1e:0d:
89:e7:d4:8d:59:7a:d8:e0:e3:72:83:6e:22:d9:3d:56:f1:de:
0f:02:ea:03:23:e4:a9:ad:e5:d9:88:c1:52:2a:dd:d1:5c:50:
27:5f:3e:91:2c:b8:ba:5b:a5:89:f9:64:1a:0b:39:56:e2:e2:
9a:6e:da:75:95:8b:86:93:3d:bb:ac:db:cb:ac:84:8a:72:df:
4c:94:5e:55:e0:a1:14:54:2e:61:e5:a8:ca:ad:71:b3:c2:b9:
bb:f5:da:bf:6d:87:7e:c0:fe:32:b5:53:e9:d2:4c:98:5d:b6:
7d:e6:75:8f:09:63:20:b4:fc:e5:71:c1:a6:fc:30:69:1e:36:
63:0d:4b:1c:5a:67:dd:ae:59:98:e6:2d:c3:a5:af:75:eb:85:
6c:de:ca:45:38:ec:03:84:ca:6c:92:f1:55:d3:10:ce:67:89:
65:d7:64:0a:85:1c:68:b0:a9:70:28:80:0a:56:e7:c2:5f:cc:
59:2d:0a:f7:ea:b9:ec:42:9e:3d:70:68:f8:56:84:ae:48:0e:
93:51:b4:14:ea:79:c0:d1:58:38:2b:f1:a1:2b:8b:6a:03:f2:
36:a9:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:28 2026 by rpki-client