Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: 1p5AmfqA/GM5f8Hc5WSxfYER9nJ8Mu8VrZ50GVqth9Q=
Subject key identifier: E4:52:5A:F6:64:59:10:B1:3E:7C:AE:EA:57:76:54:0A:32:EC:62:45
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 019CABD8E103FABA67DB4BBA310A599684B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 07DA
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: saNZ0qsJK+AAbunWAC97kG9ySN7EKVpU+8pOi0IcfKo=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e1:03:fa:ba:67:db:4b:ba:31:0a:59:96:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=e4525af6645910b13e7caeea5776540a32ec6245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:25:d1:ba:ac:76:1d:57:6d:20:6c:eb:98:
e4:6b:61:1b:b3:f0:1f:fc:e4:10:cf:33:a3:87:a2:
40:d6:1d:18:9c:e8:a3:68:de:8d:fe:5c:a5:6a:db:
cf:ad:bc:85:da:14:78:70:4a:bf:21:f9:c0:5a:f8:
a4:10:53:5b:58:b9:cf:68:f4:1e:c0:45:1a:89:15:
ea:a8:25:71:08:35:d3:95:8b:78:ed:42:8a:cc:06:
2a:58:47:94:c3:b6:9b:d0:85:75:f8:79:c0:ae:35:
e6:da:03:a2:1b:10:ec:d1:f7:af:b7:6d:f1:9a:19:
da:21:bb:82:e5:f1:d3:8c:78:cb:88:b9:d4:37:ee:
d1:f6:26:6c:01:6e:37:09:b9:bf:7b:f7:a1:33:11:
63:4e:8f:0a:f6:e0:90:75:92:42:01:c6:68:a7:ba:
0c:10:e4:3f:77:75:36:c3:2e:d9:0b:d6:51:88:4e:
96:2e:44:ec:14:0a:7d:b2:ac:f5:11:37:3e:1b:43:
77:59:d8:41:5b:9b:d1:56:cd:cd:05:42:17:19:41:
d8:79:3b:69:d5:a9:83:bb:6f:82:7c:c2:70:ed:c1:
71:bb:b1:2e:00:9d:26:e4:28:92:4c:15:36:d4:d9:
6b:78:82:73:aa:35:22:bd:e6:fc:b6:9b:80:7c:9b:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:5A:F6:64:59:10:B1:3E:7C:AE:EA:57:76:54:0A:32:EC:62:45
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:a1:1f:7a:b3:7d:b6:ee:80:7e:a8:ca:7b:3c:d7:43:ff:
33:a8:ca:0f:fc:03:1a:0f:4b:c1:1c:97:b4:ac:59:3a:d5:f1:
53:99:b4:61:40:7b:a0:65:e5:03:ab:16:0e:8a:b8:70:1b:56:
79:4b:70:61:35:bf:d9:f4:1f:47:0a:94:3e:c3:86:70:fc:95:
7d:4f:48:67:97:54:ed:fd:d3:f5:02:59:e7:52:b2:17:99:7e:
12:a7:7d:49:87:a7:71:80:0c:bf:4c:3c:39:fb:d6:46:c9:c4:
fd:54:56:84:4c:e0:ea:07:f3:77:27:0f:1c:8e:25:6c:a2:6c:
d7:b7:cf:d4:d6:7a:85:12:af:a0:d6:81:61:9a:22:b2:c9:b4:
6d:69:66:b1:21:31:60:86:9b:09:07:da:0a:a3:6d:e5:87:2f:
04:de:55:6e:7c:62:cc:5a:3d:17:90:65:88:c8:d2:19:84:4a:
c7:c8:23:53:87:7d:76:c9:47:f0:14:3c:f1:d5:12:fc:d5:0a:
75:9c:3d:28:6b:d1:c5:28:8f:c8:2a:6d:be:a0:14:5c:37:da:
ec:71:67:51:12:96:0b:14:05:91:0e:8f:dd:a3:1c:61:a5:9e:
5b:3c:ba:ad:73:6e:ff:a2:71:1f:92:c0:12:cd:2f:25:30:c2:
59:cd:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:48 2026 by rpki-client