Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: BzBgaCCG+jk23VMA5Gp1oR/qGAXyLsFl0czD1vKioHg=
Subject key identifier: AD:54:24:56:8E:F7:F5:29:19:62:30:57:11:B3:06:A6:10:AD:DA:A7
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019CACB50A5955A062FD43092FE30726EB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:11 +0000
Manifest this update: Mon 02 Mar 2026 04:01:11 +0000
Manifest next update: Tue 03 Mar 2026 04:01:11 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: iTlGd38bSCcs3qQFenNyLYqeFw156iNgoAREPjEZqNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:0a:59:55:a0:62:fd:43:09:2f:e3:07:26:eb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Mar 2 04:01:11 2026 GMT
Not After : Mar 3 04:01:11 2026 GMT
Subject: CN=ad5424568ef7f5291962305711b306a610addaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:7c:c8:65:0d:9a:0c:f2:f8:90:9e:6f:d2:
19:49:95:88:90:4f:3e:d5:ac:f3:51:de:32:e6:23:
64:cb:0b:18:01:44:7f:2d:35:7d:6c:8e:8c:d4:7c:
43:7b:6f:b0:9a:be:94:9a:eb:bf:fa:d7:b0:fe:a2:
d6:6f:d4:ca:0e:92:9a:c0:5a:f1:60:51:35:e9:f0:
7f:7d:72:56:bc:af:a3:8d:46:c5:c8:1c:8c:fe:70:
f5:60:6c:0f:84:d7:61:e4:9f:6b:e5:c1:5f:c7:aa:
f8:37:bb:de:61:64:5d:d4:62:8a:8d:34:46:87:bf:
6a:9b:63:f8:53:8d:24:85:21:10:e1:a5:15:a0:3b:
64:77:75:e9:00:38:2d:a5:4b:1d:d1:fb:7a:34:d0:
56:98:96:6d:97:29:a7:d1:9c:cf:0d:ab:92:7b:74:
29:65:9a:71:26:ec:47:c5:f6:d5:1a:a4:43:22:74:
ac:49:f3:3d:38:62:0f:04:ea:fc:4b:69:2a:f4:10:
2f:1b:23:6e:c7:13:b5:ec:dd:db:c8:9e:48:fc:fc:
54:1e:3f:6d:2f:65:ff:b0:5b:1e:a0:9a:d8:0c:41:
5f:02:fe:51:c0:0b:bf:4f:e0:6f:5f:fe:1d:17:0c:
c9:c3:b4:ab:92:0c:e4:b3:50:14:d5:77:dd:7b:6b:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:24:56:8E:F7:F5:29:19:62:30:57:11:B3:06:A6:10:AD:DA:A7
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a4:b0:67:ce:b4:0b:04:e1:7c:05:05:f2:8c:18:76:c8:24:
7d:be:b3:43:e8:7f:9b:07:df:a4:60:35:c1:fe:57:87:7a:51:
29:86:dd:18:56:13:02:c5:55:8c:e8:aa:c4:d0:46:c3:cd:7d:
c1:30:bd:73:27:16:20:1e:77:ca:51:87:47:e7:ce:d4:3c:86:
55:4f:a2:cc:7b:ca:66:e5:ec:44:dc:c5:51:93:1f:98:7f:ec:
23:48:3c:ef:e2:59:52:0a:3b:d6:6a:c7:98:a1:35:2c:e2:ef:
50:1b:da:3b:b6:b5:cf:56:58:93:d5:ed:13:ec:d0:c0:dc:f0:
01:76:3c:d9:92:82:85:a4:2a:56:ac:54:c0:10:73:9a:f2:38:
ab:fd:07:20:2a:c8:b3:89:b2:44:b6:17:e2:2f:73:5f:5b:d4:
71:72:17:69:51:57:19:37:1c:1e:17:fb:22:d1:ba:c3:9c:b9:
97:f4:ec:0f:c3:92:d0:fd:de:8d:fd:11:cd:d1:ac:1e:c6:c8:
3f:ce:8b:b3:55:df:7c:41:6f:a8:09:0c:5b:d0:07:4a:98:b3:
59:a6:e3:7e:39:8b:30:74:8b:7c:8a:1c:f6:50:00:57:e4:58:
4c:e7:9b:cc:d9:1e:e6:23:cb:aa:ac:07:c7:3d:c2:86:c8:08:
cf:12:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:55 2026 by rpki-client