Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier: hnTPbRUMrv0X9CcwjiojJc2lu/5xf8TCMYa0k3d4azE=
Subject key identifier: 60:32:74:8C:74:68:64:A9:72:A7:6F:CC:B0:9B:F1:A9:CD:1E:D8:36
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 019CABD9354D2ED16567EA6C249D9037211C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number: 1853
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: 0AGeCz7jJPnIaYNKPI/sBf8aPpPTzXCxZMM9KWhHCtQ=)
2: QpYzfBnkNKh1yttKF2r35caalhE.roa (hash: ErOSkBHWiEYZj20zKnAchEbhylp7yOAjTawscXS8Sqw=)
3: VI84dAQT7kBRBItG-CpBi1i7u2o.roa (hash: PcXRGeOwzKCNST2FKMw8zsw2WTFr5u++h/7gasiKs04=)
4: j60o4dW09KsfcomsLl91WfS5uIs.roa (hash: orsN4oeQS9rxzvmJ709FrlKbBIl59zacw9FKE6EQoA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:35:4d:2e:d1:65:67:ea:6c:24:9d:90:37:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=6032748c746864a972a76fccb09bf1a9cd1ed836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:85:06:cc:fe:66:96:47:4c:fb:15:0a:f2:
08:70:ba:44:64:42:26:7a:f1:23:bd:3c:e1:d4:97:
ff:01:43:9f:72:c9:bc:db:cd:0e:cb:c7:03:fa:df:
11:e7:67:bb:5b:37:8e:cb:f1:a7:78:bb:7f:22:50:
c1:e3:cf:45:23:f2:60:02:b5:8b:d7:80:5d:05:72:
76:51:01:8f:de:3d:ae:73:b3:e3:4d:d2:fe:c5:f4:
cc:bb:a9:a5:cf:39:08:8a:a5:ff:a4:81:a1:8f:a4:
e0:a1:55:fe:0d:20:7f:3c:70:a9:cd:1a:3d:73:cb:
9c:2e:6c:7a:6f:a2:6d:34:e3:d6:41:c4:4a:8b:6f:
e9:03:de:d9:5e:23:87:11:71:5a:a4:1c:db:37:18:
27:e9:36:e0:ff:29:5c:b9:29:d2:02:d3:e2:23:e7:
6d:e5:fd:42:ff:01:9c:d8:31:ed:f4:30:29:c3:95:
0b:a2:9a:7e:c8:16:89:a4:ed:08:ab:f4:a5:15:ee:
97:7c:f9:6b:b6:27:5b:c1:5e:7a:b2:0a:7a:17:ee:
2e:2d:5f:e9:36:ec:01:b0:65:b3:43:96:48:df:ca:
b1:f3:58:91:50:26:36:71:b3:1a:71:87:f0:5e:43:
0d:9f:90:ba:6c:71:bc:3f:36:cb:e5:ad:4a:a6:b9:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:32:74:8C:74:68:64:A9:72:A7:6F:CC:B0:9B:F1:A9:CD:1E:D8:36
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5d:a6:49:96:14:cb:fd:1c:94:b5:1b:a2:89:01:a1:65:0d:
b2:43:77:47:00:84:93:39:80:78:35:3d:04:e3:bc:cf:e7:6c:
75:16:d1:7e:5c:2d:ab:af:8d:e6:ab:21:9e:7e:36:ae:11:79:
ae:2c:b0:ae:9a:22:8d:51:39:ae:4f:f1:7b:4e:4b:cf:39:13:
79:57:24:6d:f7:28:8e:94:11:66:a2:a3:fa:ea:7f:c3:1c:1d:
cc:2d:29:34:3e:a2:fd:c8:0e:fb:18:f0:de:94:9d:00:fe:91:
7c:16:44:cb:8f:95:1e:ec:dc:45:f1:93:7f:7f:b8:ad:32:1e:
9d:ad:29:30:2a:08:7a:87:a4:0d:58:ee:7c:ae:24:dc:bd:5c:
75:6e:da:b0:e2:90:b4:9b:71:57:b2:98:e3:6e:9b:07:0b:c6:
6c:d0:63:2e:eb:b2:98:63:86:c9:06:26:e7:75:f8:fe:0c:69:
64:18:c9:1c:08:54:71:72:4d:f1:75:af:0c:cf:47:a7:bb:20:
5e:fa:73:04:f1:ea:9a:dd:49:a2:bc:1c:9c:c3:18:c8:27:34:
c3:e4:98:92:28:e4:89:43:97:0d:23:91:ab:2b:05:0c:7c:18:
a7:e4:40:2e:e9:ca:a8:b0:59:35:c1:50:08:04:ab:80:c6:e5:
f5:44:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:04 2026 by rpki-client