Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: DE6vVhjgnWdBhFWMuYPvo1vllZWI1P57sV+g9rqAV8c=
Subject key identifier: 95:BC:C3:DE:ED:3A:19:33:4B:5D:EF:F4:47:B1:A6:8D:49:07:E7:C2
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 019CAC474508A2D04A32E7D618155E755BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 089F
Signing time: Mon 02 Mar 2026 02:01:17 +0000
Manifest this update: Mon 02 Mar 2026 02:01:17 +0000
Manifest next update: Tue 03 Mar 2026 02:01:17 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: e8XYlxekf4l/2XGyOw9M4W0PpkgFXsCgpYDwCY0ruWc=)
2: c4GD0N5ffflgM4WSJFRdKaORXEg.roa (hash: ANDRx+abOUWpKzoyrqtGua8LAFv82Wy6OwjQEBpNXbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:45:08:a2:d0:4a:32:e7:d6:18:15:5e:75:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Mar 2 02:01:17 2026 GMT
Not After : Mar 3 02:01:17 2026 GMT
Subject: CN=95bcc3deed3a19334b5deff447b1a68d4907e7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:4b:a2:d5:df:d5:43:90:2f:68:c4:81:4a:
e6:0c:61:01:bf:74:5e:c5:d2:28:04:2d:af:a9:97:
1f:b7:a5:f6:3c:ac:66:76:90:74:01:0e:fb:e1:3b:
8f:72:0f:2b:f5:3e:19:f8:3d:e3:b2:4c:46:76:de:
90:f4:b6:7f:d0:3d:25:3d:ea:9a:b8:99:dc:33:07:
e9:47:e4:ec:9e:c8:b9:d8:0c:cf:c7:2e:98:92:2d:
61:a3:85:cf:05:fe:70:57:8b:e6:13:47:99:91:e5:
5a:04:8b:63:00:d2:88:69:ae:51:55:8a:c2:46:9f:
e0:e9:d2:dd:13:b2:d3:9e:c9:2c:36:b5:6c:1b:90:
23:a0:b3:10:66:2a:b2:5b:84:c1:b0:18:08:f3:34:
ed:66:8f:ff:5f:d8:d6:b3:19:a3:df:a3:5f:47:3a:
ea:b4:4b:7a:8e:c4:05:28:25:cd:e3:d9:a0:14:99:
89:e5:1e:50:d6:fe:b0:88:14:c6:fe:af:16:69:93:
ae:e1:94:71:84:89:a5:25:88:38:0b:fe:35:9c:a1:
87:b1:3b:6e:e6:09:9b:33:d2:06:bf:70:65:c6:24:
27:85:11:39:b5:27:1d:8b:43:62:bf:91:3c:33:dc:
b0:2a:39:98:41:f0:92:0e:51:16:be:0c:a0:96:bf:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:C3:DE:ED:3A:19:33:4B:5D:EF:F4:47:B1:A6:8D:49:07:E7:C2
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:42:46:0f:b7:9b:39:72:98:68:72:ab:4a:c8:a8:8f:c9:ee:
17:de:95:80:38:23:f6:52:fa:99:c7:fd:d7:c5:ef:62:e7:2a:
2a:5c:af:6b:2e:a0:28:d7:7a:77:dd:1f:a4:39:49:01:60:c4:
49:2d:fc:48:28:ae:5f:d2:5d:75:a2:fd:ef:4a:65:18:3d:98:
70:13:39:6f:78:3e:f9:71:a2:3f:17:aa:f3:8b:9b:ac:1c:23:
00:b0:b0:87:e0:f4:5a:14:34:22:b8:84:f5:64:d1:89:ab:2b:
c1:2d:73:8c:2d:c8:51:4c:78:24:cb:8a:8f:27:43:ef:b1:ab:
67:d0:0c:15:28:8c:9d:29:30:26:40:9f:26:c3:7c:52:cf:42:
1a:94:1b:78:a0:10:c0:a2:1a:67:37:21:e3:e7:95:4c:6d:21:
0e:1f:92:1a:8b:95:22:3a:ce:4a:14:54:40:38:5d:f2:58:12:
1f:d2:4f:ca:40:03:fd:8b:85:57:3e:0a:d0:de:9a:67:74:c5:
bb:a3:0e:d0:56:7c:ae:7f:c1:e5:64:5e:3d:12:d3:fb:c0:6a:
b7:70:1a:94:fb:bd:13:bd:d5:24:bb:01:27:b0:cd:cd:bd:6b:
1f:b9:fa:36:59:b5:11:ed:6f:c9:ec:02:89:93:51:f9:3d:f6:
29:b8:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:29 2026 by rpki-client