Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: o43/bYQxwYod1oZP6cYHGEhC+ThiXPqKkscR7GhFqtc=
Subject key identifier: CC:DB:C8:66:B0:08:A2:46:40:96:8E:93:91:A9:12:3D:D0:74:4D:15
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 019CAAC6D4A93C3A5B9C3DD86E7AD07C5B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 072E
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: n7ETRZM0nPWBD9DowkJcRHrStRTJbfEtOoLNhOp6uTg=)
2: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (hash: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0=)
3: iDGkEHzaPIBC_ltNyeNPjxHWcLQ.roa (hash: m+RgaOaS95hD5eR5RGnGQAMM12oNRJddtp+/tKr5w0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d4:a9:3c:3a:5b:9c:3d:d8:6e:7a:d0:7c:5b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=ccdbc866b008a24640968e9391a9123dd0744d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:a0:98:57:74:d8:02:98:5d:b0:30:a6:d4:
16:b6:09:22:f5:a5:ab:40:51:38:ae:37:37:85:72:
d7:42:8d:7c:bf:73:87:ea:61:e1:f5:70:8e:2e:90:
58:c4:21:f6:3f:78:38:b6:3d:1a:ad:88:31:9f:87:
35:ed:d4:f1:25:81:6e:55:cf:ae:b7:83:ce:47:25:
59:44:42:42:9b:43:17:2b:9c:ef:9c:96:86:cb:85:
e8:d7:2d:e2:b4:9a:9a:44:bd:e4:eb:0c:4a:d7:4f:
e9:d0:04:42:79:c6:60:f5:be:0c:91:c3:e6:83:99:
a3:f7:fc:ab:3b:c0:f6:6d:b5:cf:07:27:ba:a8:dd:
c7:a7:b7:be:80:2e:0f:a4:ef:ab:93:5c:ed:b9:10:
39:61:e2:34:c8:8e:f7:f3:7c:6c:d8:f2:24:01:f6:
fa:44:c3:07:1a:32:77:7f:3e:37:4b:93:d7:07:a6:
c5:c2:c0:5f:ac:f4:cc:ec:82:23:5e:05:73:c3:50:
59:b8:36:f3:2f:8e:63:70:9d:0c:db:b5:80:19:68:
a3:21:93:28:ad:11:07:98:69:b9:63:20:b9:99:61:
f8:52:f1:df:ac:96:dc:df:32:f6:af:d0:f9:fa:ae:
7b:28:47:8a:a9:1f:4d:6d:e1:e1:28:32:fe:69:07:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:C8:66:B0:08:A2:46:40:96:8E:93:91:A9:12:3D:D0:74:4D:15
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2d:48:57:e3:fc:e5:a1:ca:7f:00:4a:a0:b7:49:21:a3:fb:
58:ed:55:26:81:50:33:fc:d0:4b:cc:45:ee:6a:2e:6d:1d:71:
66:6e:08:90:29:e0:4d:a9:f4:76:d7:05:7f:fb:75:25:a0:c0:
06:60:a4:fb:ef:b4:34:87:a3:2f:d0:7b:5d:80:f3:cd:fc:66:
55:28:b8:80:47:eb:a3:f4:2d:d5:ae:f5:a0:e3:81:93:38:df:
2e:33:44:af:55:bf:c7:d6:3c:03:28:3f:1a:cc:21:64:b2:92:
01:19:b6:6b:43:06:1c:79:50:de:42:de:ac:ae:b6:42:29:7e:
ba:ad:b5:2e:65:5b:93:d2:a1:82:e2:da:88:f7:df:3d:94:93:
e4:14:2c:32:5e:e3:21:3c:9c:49:15:26:27:6f:88:9f:9f:8c:
79:96:c2:0e:23:37:de:26:eb:be:34:96:f6:d0:7d:d6:e6:87:
98:b5:37:ec:3e:b6:08:73:d9:68:9c:3a:f1:97:a9:b9:1e:13:
e3:b7:eb:30:83:14:14:eb:47:72:f3:4d:16:98:b2:de:11:7f:
d2:5c:e8:6b:9a:5a:46:cb:0e:ea:2d:06:44:bb:3e:88:f9:8e:
84:26:9a:f0:d8:00:1c:11:2d:e4:f4:58:b6:b9:a4:73:7e:be:
bb:2a:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:51 2026 by rpki-client