Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: LRMeJ82CtXnSXKRi9uksblcEUO0zHXJTZP/N3w9NHwc=
Subject key identifier: 5C:10:3A:C4:CD:7C:76:1C:CE:C5:BC:EF:F3:10:27:DE:62:6E:27:CA
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 019CAFB626852587A860711803FCB3AC27AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 18:01:16 +0000
Manifest this update: Mon 02 Mar 2026 18:01:16 +0000
Manifest next update: Tue 03 Mar 2026 18:01:16 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: fzd5H0YaW21xMniRd/JRuu1DdqDpMzUdizemhyL2leQ=)
2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:26:85:25:87:a8:60:71:18:03:fc:b3:ac:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Mar 2 18:01:16 2026 GMT
Not After : Mar 3 18:01:16 2026 GMT
Subject: CN=5c103ac4cd7c761ccec5bceff31027de626e27ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:01:6d:06:30:be:fb:93:ec:d2:64:01:7c:
5f:8c:a1:16:6c:ac:f8:70:b8:4a:13:df:0b:9d:e4:
ee:0f:cb:00:cb:9c:ad:bd:51:09:fc:89:e7:1b:6f:
b6:46:08:df:0f:8b:59:ee:72:ba:02:90:f6:a3:9a:
64:81:c1:71:11:e2:05:b3:b2:a2:b8:37:16:2b:4f:
5a:1d:05:84:f3:af:40:fb:8e:d9:6f:53:55:62:49:
94:18:bc:9b:3d:5c:0e:46:db:53:af:51:b6:53:8a:
19:19:f6:d4:c0:a5:fb:3d:b3:0e:0f:7c:d7:75:96:
e5:0d:b2:1b:cc:bd:84:cc:fe:13:f0:93:b1:e4:bc:
bb:2a:0a:ef:db:e4:00:b3:d5:64:fd:ea:bf:82:86:
00:15:31:db:f8:a5:dc:7f:99:0c:b5:e9:d9:a2:1b:
c3:df:ab:9d:65:db:d0:67:e0:be:9f:19:6a:c3:97:
08:02:fc:1e:3b:83:c7:68:5b:56:92:83:0c:9f:44:
9e:57:8d:13:8e:d8:5b:66:5d:08:f0:35:7c:16:7e:
5b:7e:e8:49:18:e3:35:2a:ca:d8:86:3f:1b:d8:46:
8f:8d:85:54:1f:bc:cb:12:b9:07:b6:62:c1:17:97:
88:eb:9d:26:96:1d:71:52:b2:f8:8c:00:4b:19:e2:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:3A:C4:CD:7C:76:1C:CE:C5:BC:EF:F3:10:27:DE:62:6E:27:CA
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:2f:45:54:87:8e:cd:a2:c0:ee:47:6b:09:b6:27:83:c2:
72:4b:1d:7f:06:b0:b7:5e:3b:c4:dc:f8:aa:67:c7:a4:c4:2d:
ba:56:b0:ec:c1:f5:c5:f9:14:ea:2a:46:62:d5:4b:9c:db:14:
07:e2:5e:bb:9d:6d:f6:00:42:c0:25:ad:f7:95:3f:1e:12:6e:
39:9a:4a:25:98:69:f7:37:9d:63:8d:1e:3c:c6:e7:c4:11:44:
f1:8f:a5:79:25:df:f5:46:39:3b:fa:6e:9d:04:cb:b6:2a:51:
20:e7:e3:57:35:15:8a:1c:4e:cc:97:5d:c6:9a:98:da:68:c8:
fa:fe:a9:65:ab:e5:b6:32:73:bd:2f:b8:f5:54:1d:d8:cc:27:
cd:52:b2:17:d9:51:79:f4:16:ee:3f:dd:fb:60:9e:da:18:77:
b2:d0:c0:88:91:3a:67:51:22:6c:23:91:a1:75:05:21:45:dc:
85:da:b6:58:22:9c:a6:ec:ce:fa:f4:b6:6a:b3:c8:95:93:8e:
b1:45:1f:f2:07:45:9e:75:8e:08:3a:24:a8:66:bf:8f:96:98:
73:39:bf:55:2b:e3:4b:0b:d5:14:40:2b:2e:f4:5e:aa:a5:62:
d9:8d:5b:af:43:5b:d7:43:47:a1:7a:3a:5d:fe:cc:e4:b8:e5:
b1:0e:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:49:31 2026 by rpki-client