Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: krIzMXM+FU13FCZKPoHzx2zmHJk/h5aAbtM1jEnqRxc=
Subject key identifier: F7:5D:3B:C0:4E:81:1F:4E:BC:D8:28:33:B2:26:F1:D3:5C:2F:A3:CD
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019CAB346079B23F23C8AC2B5DEEF61510A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0217
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: JepDHi3jNgO+HZfzVGuLvoUQJWqcl/eSPQvHD1/TRM8=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:60:79:b2:3f:23:c8:ac:2b:5d:ee:f6:15:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=f75d3bc04e811f4ebcd82833b226f1d35c2fa3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:d2:a3:4a:f2:9a:91:6b:3d:a0:4c:6a:ff:
41:c9:58:41:d9:c2:f4:ee:4f:64:7e:2b:a1:1e:c7:
ee:18:8a:08:c5:b7:bf:c0:06:d3:6a:1f:b4:2b:64:
38:df:08:3a:68:47:05:96:b4:be:c7:46:5b:7c:35:
e0:64:17:00:92:f9:42:78:e3:92:df:74:d1:aa:f0:
58:21:c9:05:9d:0f:2e:db:74:62:c4:f0:b3:ab:18:
f1:a4:12:bf:7d:76:65:64:8e:30:e5:ba:ad:cb:0f:
ff:fd:75:05:f8:5e:47:f0:63:db:89:91:2e:dc:11:
04:ec:d6:69:63:0e:8a:f3:22:8f:bc:30:32:ae:83:
44:ec:30:05:6b:84:56:08:32:c6:13:c1:c8:99:7d:
32:fa:3b:ea:73:db:af:66:52:56:4e:8b:ce:20:95:
7a:b3:84:d5:fd:a8:6e:b8:77:ff:b2:40:7e:06:8e:
c8:75:b0:c2:3a:50:fb:53:27:cf:42:83:91:3f:35:
40:ac:f0:43:b8:f1:e8:75:58:f8:25:a5:1a:8a:42:
84:f0:44:7d:ab:a1:aa:c6:59:cd:e8:62:a1:28:0d:
cc:f4:09:d1:9c:53:47:5b:41:11:dd:65:3e:05:3d:
93:17:7c:21:43:a3:3c:46:b0:30:e5:4d:c7:f1:09:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:3B:C0:4E:81:1F:4E:BC:D8:28:33:B2:26:F1:D3:5C:2F:A3:CD
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d9:8e:23:a5:4c:c8:d7:7a:6a:34:3f:e7:3a:d2:f5:71:1a:
d1:a7:28:f8:75:39:5a:41:fa:66:a1:16:e0:b9:64:00:6e:c5:
b4:33:94:61:43:ed:07:13:17:96:c0:91:6b:f1:0d:a8:f8:7b:
43:b0:09:a3:de:41:ca:d3:43:3c:60:3f:61:b7:eb:41:a0:32:
2e:42:6c:be:89:d3:b9:ae:98:b8:43:d3:f8:03:43:bf:d2:73:
51:ec:02:7d:f0:a1:aa:67:84:c7:fa:f2:21:71:8b:95:62:4a:
10:79:e7:46:44:37:7c:9d:e5:2a:b1:85:33:9a:cc:5f:59:98:
2c:6c:1f:8f:50:b7:ec:f2:5f:a4:4f:04:35:71:e2:df:f8:d9:
63:98:b8:b7:04:b7:0b:ec:49:31:22:d8:a0:22:e4:d4:9b:7e:
5b:da:e9:5c:24:ab:46:1f:32:40:f3:78:2d:ba:72:60:3d:0b:
f4:95:f8:81:cb:39:a1:b0:a7:f5:ac:24:47:b2:c6:fb:4c:a7:
16:02:25:b6:2b:28:88:2d:b5:c7:8a:b9:44:4d:05:7f:3a:9f:
f3:8d:3b:a0:c5:d6:d9:b2:56:e8:54:79:38:90:d7:d2:6f:56:
9c:15:39:a6:86:50:e4:aa:c0:84:be:44:15:d7:07:15:04:9d:
37:df:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:18 2026 by rpki-client