Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: khk/OgbemhCTO80LvSRL7t5LWM6YhxworpdxplOC/aY=
Subject key identifier: 46:96:2B:92:2C:75:44:6E:F9:E2:E2:F3:80:A6:B7:EE:4B:98:68:15
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019DA45426B1C07A33849C5931E4648E778E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0298
Signing time: Sun 19 Apr 2026 06:01:11 +0000
Manifest this update: Sun 19 Apr 2026 06:01:11 +0000
Manifest next update: Mon 20 Apr 2026 06:01:11 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: a4mQgD3uiwf8pdUNFdxnrDYgfk0TgEgP+/Xbqvkqg1g=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:26:b1:c0:7a:33:84:9c:59:31:e4:64:8e:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Apr 19 06:01:11 2026 GMT
Not After : Apr 20 06:01:11 2026 GMT
Subject: CN=46962b922c75446ef9e2e2f380a6b7ee4b986815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:33:28:00:0f:06:f7:b8:76:2d:ad:6a:a9:
1b:8f:76:33:82:f3:6c:20:f2:62:9f:0c:91:2e:1b:
99:c0:dc:83:c0:4e:33:c8:b5:9d:d0:58:09:88:d8:
ad:c0:df:ec:07:41:23:5f:48:42:fa:a7:74:b0:50:
55:da:70:f1:e8:b3:37:fa:e8:a5:d5:b7:6f:8e:14:
ae:23:42:40:0f:bd:4b:cd:57:0f:b9:10:00:0a:45:
e3:ae:57:3c:38:28:b2:21:ea:f3:0e:ee:bb:27:6b:
14:1d:38:1b:3f:fe:62:ca:53:a4:24:cd:59:48:5d:
66:17:59:44:0a:58:69:2f:8b:4d:26:cf:d3:62:bf:
4d:5f:37:7b:5f:5e:ef:a7:e9:67:e4:da:36:29:bd:
f6:ad:61:46:3f:35:7f:31:70:db:51:7a:7f:76:e6:
8d:4c:fd:98:56:98:75:a3:46:0b:3b:cc:61:53:32:
81:94:0c:5e:e3:26:a5:44:c8:ac:26:1e:15:7e:f4:
ad:45:37:a7:37:6f:d6:80:3f:91:42:ab:c4:1e:11:
ff:0e:93:54:f3:da:48:75:cc:1a:f9:0f:a3:60:3f:
ec:a7:dd:e6:ef:81:5d:fb:52:e0:09:51:0d:e0:d2:
a8:7c:d7:d8:64:37:c2:d3:4e:ff:45:3b:d6:90:4d:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:2B:92:2C:75:44:6E:F9:E2:E2:F3:80:A6:B7:EE:4B:98:68:15
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ed:65:64:4c:9b:90:9b:cc:10:8d:7f:26:d8:8c:f2:4f:78:
db:63:2c:d5:6d:4b:69:68:98:c2:30:36:91:82:5e:d9:1b:33:
cb:56:45:78:9c:64:b0:a2:fa:29:f7:bd:50:0e:f9:df:44:e0:
8a:a5:14:bf:cf:5f:e5:c9:2d:6b:7b:db:cf:17:23:f4:96:bd:
bf:59:1f:6b:a4:16:74:5f:f4:7b:8d:56:47:27:a8:cf:a2:9d:
f0:2a:99:d6:1c:b9:5a:82:54:b1:67:82:64:98:c4:f7:0e:5d:
cd:02:f8:42:e5:3a:84:94:c5:4a:db:f9:a2:ee:72:56:e4:4a:
36:c2:26:e1:10:4e:93:7b:7f:1b:f3:55:ef:d7:52:8a:67:f6:
17:8f:2b:62:c2:84:a3:88:9d:4c:e1:ac:76:82:73:19:20:0a:
7b:e3:c2:af:6e:b4:a9:7f:16:60:ed:8b:14:f8:ec:11:9d:8d:
4c:7d:d8:07:20:8b:47:01:cb:51:43:48:23:9e:2e:0c:96:cc:
87:d9:ce:f5:8d:a4:9e:76:dd:29:c4:43:bd:8f:33:21:c2:53:
7e:46:0a:df:e5:3f:91:3f:c7:b4:11:d6:cc:69:25:8e:7c:2b:
5e:85:4a:d0:0b:ed:c2:ad:bc:1d:89:de:3c:47:af:fa:1c:a3:
3c:0a:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:52 2026 by rpki-client