Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: XZBY/qhKYe7zACpQs+X5o6m+HmDyrx4ayUUSirnj0fk=
Subject key identifier: 3B:68:45:E1:59:01:25:FA:68:73:C3:82:48:AF:41:22:E8:6E:F8:00
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 019CACEBF11717CD1BC3EFBED3EF62F4C280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 1101
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: 2l99nd2gnT8qGIyvQoSzo4AE6B79MdbsQuRA4EDxdvI=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f1:17:17:cd:1b:c3:ef:be:d3:ef:62:f4:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=3b6845e1590125fa6873c38248af4122e86ef800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:64:73:12:52:cb:3e:82:1f:5e:1d:c9:c2:
0a:f7:00:3b:21:37:b7:74:0a:12:e5:d8:a5:b5:e4:
fe:5b:64:01:c4:da:ee:46:fa:02:ae:cf:da:5e:d5:
f7:ed:1d:37:14:c3:84:81:87:ca:06:8a:f3:80:7f:
3b:fb:e5:23:0f:7e:ef:88:da:9e:2b:c3:32:dd:ea:
ca:a6:24:1a:ad:09:b6:a2:ca:01:10:d1:cf:90:bd:
0d:bb:68:91:a3:99:f1:42:77:88:e6:98:20:61:5f:
74:12:2f:3e:eb:2a:cf:7d:84:e0:13:ad:96:d8:52:
83:09:26:fd:02:55:48:a5:91:b1:ba:b4:07:06:86:
60:6a:42:28:79:1e:ce:1a:47:a9:16:97:a8:69:ca:
2a:91:f3:3e:0d:3e:e1:af:fb:b8:d5:6f:03:a1:4c:
c1:4e:a1:ff:a4:c3:0c:2e:46:ed:da:00:38:95:ec:
04:bc:7e:27:ae:36:a4:11:e3:2a:42:a4:7a:39:8c:
78:82:1a:de:a5:f2:85:4e:83:f0:c9:e4:dd:c7:e2:
74:c2:e8:89:db:13:43:7b:cf:e6:25:a0:47:c0:1e:
8c:98:35:ad:ec:9b:29:47:66:6e:8c:a8:28:65:eb:
bb:f1:72:78:5b:db:35:e2:cf:e2:5d:63:87:80:13:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:45:E1:59:01:25:FA:68:73:C3:82:48:AF:41:22:E8:6E:F8:00
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d4:02:14:8f:f6:07:35:0d:26:23:8f:d2:7b:b2:bd:3d:24:
54:8c:db:96:42:3f:8a:d1:1b:eb:4b:fb:40:0f:09:f0:55:a2:
dc:ec:5e:97:17:32:dc:90:74:37:a0:a6:6c:08:00:08:6c:8d:
7f:ce:05:ed:2c:78:82:d3:55:4b:57:9c:2d:52:75:cf:89:fc:
1b:33:97:0f:7c:8e:6a:1d:3c:f6:c1:1e:30:62:be:d9:c1:5e:
b8:19:74:0a:2b:30:60:d5:07:c9:de:0a:2d:50:da:40:d9:66:
ab:68:c0:fc:ef:d6:04:ae:64:10:1f:cb:48:aa:29:4f:87:59:
cd:e7:99:04:94:9c:5b:02:5a:4d:f4:91:b0:1b:20:14:cd:eb:
1c:bf:f5:e4:55:d2:e2:97:4e:b6:0a:df:1d:5d:5a:c7:50:db:
3a:37:6b:71:0b:fc:42:84:90:30:20:c3:a3:ab:7b:20:66:fc:
3f:b1:da:34:58:2c:cf:a3:76:ca:04:64:78:46:c9:a0:03:18:
46:91:4a:e7:69:df:f4:d8:88:04:58:3c:8f:2a:b6:c2:39:83:
1b:af:a8:51:27:78:06:ca:81:98:63:19:d3:a3:e1:85:62:77:
13:9d:d4:58:a9:ba:1f:32:03:a4:53:5e:01:22:fd:c0:bc:05:
d1:b2:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:06 2026 by rpki-client