Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: pdGb+vxQfmb4/6nDiaexff/HchkRCcTdE3HOGUIjj9A=
Subject key identifier: AD:96:35:B6:7B:38:18:F3:85:F6:8B:F7:66:53:51:98:79:F2:D5:3C
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 019CAD907BFC462283409CBAFF9C78A0FAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 016D
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: KuO4RVfOzC7J67i4hXFhAay7kNrGA1Owav5FuoQhjQ0=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7b:fc:46:22:83:40:9c:ba:ff:9c:78:a0:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=ad9635b67b3818f385f68bf76653519879f2d53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:53:23:d1:e9:05:14:53:7b:a3:40:64:1b:
bb:cd:00:80:6b:64:9e:cc:b4:43:6f:f4:f5:71:0c:
90:45:e4:e5:14:02:56:3f:74:d0:e6:95:49:2e:9d:
16:b2:6e:95:3b:be:92:37:db:2b:66:89:78:0b:95:
24:00:6f:0f:4d:05:c4:67:45:4d:3f:71:9f:c9:d3:
85:c6:92:a2:27:62:79:1c:0b:bd:78:3e:31:7f:88:
17:b1:54:62:19:84:cc:09:74:1c:d3:85:a4:58:b8:
3d:2b:2b:c0:70:2b:c7:f4:c0:ef:e2:f6:85:9c:b0:
60:71:82:b2:5f:89:5d:71:47:24:c0:87:54:3a:0b:
58:6d:ce:d0:c3:83:32:53:21:ca:bb:0c:90:bf:b5:
6f:56:65:af:d2:b6:c8:00:73:7f:c6:dc:d4:a5:dc:
e0:07:df:19:04:14:18:ee:e0:4a:f3:1c:a3:c4:b2:
9d:14:fe:44:9e:8a:42:da:fb:e0:13:e7:d2:21:59:
03:03:34:d7:b1:e1:89:87:4c:c0:6b:fd:5f:4a:74:
33:59:1c:57:1d:38:b8:40:1d:99:ea:30:a2:68:cd:
60:42:ea:e4:b1:49:96:d6:fc:19:ab:af:98:36:d4:
63:0c:68:31:48:02:86:fc:a1:11:02:c6:0c:81:93:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:35:B6:7B:38:18:F3:85:F6:8B:F7:66:53:51:98:79:F2:D5:3C
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:86:0f:3a:19:17:ce:82:28:e6:17:16:48:8c:06:ae:01:
ad:a3:07:8e:1d:5b:4d:45:12:93:1e:76:ad:76:69:d0:13:a3:
ed:39:9d:55:a9:35:90:02:12:fa:cc:d1:c4:4f:ea:73:d9:29:
4c:13:e2:ca:bd:ea:2a:49:f4:3d:86:df:77:f7:4b:dd:dd:a0:
eb:98:00:8a:e9:41:fc:e7:45:62:f8:81:67:70:ac:bc:38:57:
fd:70:a4:f5:e4:ac:28:95:9a:82:cc:b4:b0:3f:c9:05:17:b9:
36:6a:49:df:a2:99:59:50:eb:b2:99:9e:4e:dd:20:a4:29:87:
5d:0e:64:5f:df:62:d1:5f:32:d0:9e:f6:bd:22:b7:6f:f4:3a:
64:c0:ae:08:12:a8:39:39:a7:5c:f5:a9:92:00:6c:19:d3:7f:
63:64:f0:7c:f5:31:d0:43:68:ad:a8:f3:df:97:aa:60:7e:a1:
b5:cc:29:97:30:c1:66:54:ea:24:7c:bb:35:7b:ac:43:6a:21:
69:ae:13:0e:d1:bd:6d:a9:be:2f:16:13:c6:79:24:44:af:63:
27:7b:81:2d:7d:4a:64:38:3a:ad:8b:e6:5a:df:14:0b:1a:d5:
64:0f:d0:f7:42:01:25:23:5c:06:14:98:eb:23:e4:62:05:d0:
c5:73:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:00 2026 by rpki-client