Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: jrL+nLTAPQ/q0miqMe3616A5PYX7U4rQ4/xe4/l4zl4=
Subject key identifier: F6:B4:A3:C2:3F:41:9A:72:40:16:67:3E:37:4B:99:34:8B:D3:A1:41
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019CAA21DE1C52644F17552228B498C7F77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0F4F
Signing time: Sun 01 Mar 2026 16:01:12 +0000
Manifest this update: Sun 01 Mar 2026 16:01:12 +0000
Manifest next update: Mon 02 Mar 2026 16:01:12 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 38gu+zxOvvi3l65ngFE9UHV9iXRpDoA0c+4w0cUsMb4=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:de:1c:52:64:4f:17:55:22:28:b4:98:c7:f7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Mar 1 16:01:12 2026 GMT
Not After : Mar 2 16:01:12 2026 GMT
Subject: CN=f6b4a3c23f419a724016673e374b99348bd3a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:3e:f9:f4:51:a1:7b:24:8e:d0:a9:eb:f2:
c1:a4:47:b1:a0:24:af:9b:32:0e:eb:a5:18:51:e3:
7b:dd:f7:e7:95:82:4c:25:bc:44:82:a3:61:ac:9f:
fd:41:10:84:2b:b5:91:39:07:34:c8:82:fa:a1:aa:
a7:27:aa:10:33:85:a9:15:64:bd:37:ba:d6:ce:67:
04:b7:d0:5e:70:97:c9:6a:f7:5b:fe:55:1f:95:b6:
69:5d:89:50:c8:dc:ed:f4:f5:19:e4:59:28:46:a3:
12:75:c8:7d:b3:70:02:ac:3f:9e:0b:a2:45:4f:b7:
b9:0c:01:1b:e5:df:06:ed:2d:19:92:b9:7e:56:80:
28:59:85:b6:51:5e:28:4d:99:f1:49:50:1a:86:18:
87:80:d3:8b:a2:e7:bf:31:0f:d0:97:af:b8:c1:93:
af:63:dd:d2:91:22:51:18:d7:67:1b:29:99:f4:8b:
d9:93:cb:00:1b:ad:7e:68:bc:0c:0c:12:42:56:32:
5e:00:87:ff:c3:57:54:d8:7a:4d:de:15:3c:13:1b:
06:44:d4:a5:63:89:5c:22:57:28:6a:bb:89:df:13:
69:1b:4b:c5:a8:28:65:dc:44:9b:63:ea:a0:3c:20:
13:dd:4f:25:24:66:95:40:02:45:e6:08:31:39:c3:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B4:A3:C2:3F:41:9A:72:40:16:67:3E:37:4B:99:34:8B:D3:A1:41
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:7c:ad:9d:26:36:7a:d4:88:a3:fe:d6:27:5c:ab:5b:e4:
49:cc:b3:f1:b5:7b:9d:21:38:aa:e5:49:7e:9d:77:60:15:2e:
67:41:54:1e:46:65:71:18:18:36:eb:d1:72:62:23:5e:e8:de:
10:7d:1e:3e:7b:99:7e:ab:25:c6:ea:2a:d2:9c:b1:31:29:d8:
59:27:00:39:0a:a7:86:72:bb:2c:d6:17:d4:ac:ad:a3:a4:40:
48:be:57:96:82:7e:a6:eb:69:c1:55:8d:6f:76:04:2b:39:50:
3c:3c:cc:0b:ea:d9:88:c2:97:8e:1f:a5:89:69:9f:a7:38:1e:
dd:05:d3:c5:05:61:f5:c8:46:af:85:c2:28:54:64:d0:73:1b:
70:da:a2:f9:65:78:87:ca:e7:8e:51:c8:5c:12:c2:cd:9f:02:
eb:5d:a6:d1:90:6c:f5:3b:b8:f1:4a:b5:38:de:5e:c3:0b:08:
c4:62:a8:ba:cf:8b:b7:d4:17:c8:12:ce:7a:45:0d:50:36:f0:
a5:0a:b6:f9:78:0a:a2:ba:b2:0e:34:6f:99:b1:ed:b3:99:e2:
95:b8:b3:18:81:62:a2:17:e1:09:af:97:ff:9e:29:21:ac:c7:
6d:1b:c7:fc:d7:35:6f:2f:19:59:18:06:46:76:35:66:1d:c9:
ff:02:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:17 2026 by rpki-client