Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: 2ZFIjE6rR90TJMY2gWCeSswRH+FIV2rsauGdZ8/LZQw=
Subject key identifier: 12:54:2F:D7:49:AB:11:BB:7B:FE:09:33:86:66:AE:41:68:E9:1E:CD
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 019CABA22E9EB12E3A13AA536D4AE0B237D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 07A6
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: pJt1Orh07fsy4sJZgdoOiAwBMpQCB2Fopao+Hi57fBY=)
2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2e:9e:b1:2e:3a:13:aa:53:6d:4a:e0:b2:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=12542fd749ab11bb7bfe09338666ae4168e91ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:82:cb:dc:6a:7b:d6:88:3c:a0:4b:de:2d:
09:7f:40:4b:db:56:df:05:99:a2:db:b7:ef:ef:00:
26:7f:e0:46:71:bc:1b:1b:a4:15:11:1f:23:67:24:
5a:a1:e8:5a:de:40:0d:f5:8a:2b:a4:fa:be:c7:1e:
34:7c:93:45:f7:38:af:67:74:ff:b6:84:b0:02:27:
0e:3e:8a:0b:41:d0:9e:30:d5:86:80:58:bd:7b:d2:
ba:81:f5:16:10:85:c9:eb:fa:c7:52:02:c6:19:f1:
4a:7d:92:cd:37:10:f2:40:42:14:d6:51:b7:c6:3e:
bd:69:5f:3e:ed:63:9d:91:36:01:cf:3e:92:67:56:
ba:c1:4c:88:80:43:b6:56:4a:4f:50:40:6e:85:5d:
7b:d2:39:c0:67:35:f4:a8:49:84:99:fb:ef:a4:aa:
97:bb:91:6b:82:5c:9c:74:98:a4:81:99:30:f8:24:
cd:dc:87:46:61:33:29:40:c3:c2:5b:08:88:65:fc:
aa:bf:a8:a0:dd:5b:86:ad:61:0e:20:51:cc:6b:cb:
c3:ea:41:ba:f9:89:ba:e1:2b:91:77:e4:c3:ba:30:
12:57:4e:8c:92:c4:fb:05:cf:6e:08:81:e7:94:8a:
76:8e:f1:54:4c:cd:15:71:63:8f:0d:c8:af:76:da:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:2F:D7:49:AB:11:BB:7B:FE:09:33:86:66:AE:41:68:E9:1E:CD
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ca:ee:da:e1:2c:aa:71:0b:c4:a3:4b:35:e1:bf:40:7d:60:
1c:9d:ae:35:e0:cc:92:07:55:d0:42:af:74:39:13:89:98:12:
fb:63:c4:b5:d5:57:c3:c8:1a:92:c9:19:7f:7e:b4:7f:87:e2:
82:8c:ce:6d:c8:94:6c:ff:8f:f8:ce:10:5a:8b:e3:c6:0b:30:
39:80:f9:d3:ab:19:68:e9:b6:3f:eb:41:b2:49:13:51:f3:ac:
2b:78:06:8b:f6:53:82:e3:80:21:ad:c2:eb:53:dc:af:e9:ab:
dd:b3:73:87:39:f1:ef:52:0e:8b:59:7b:92:11:b6:6b:29:2b:
a0:2d:1e:2b:c1:7d:dc:dc:78:e5:30:0f:ff:6d:9e:4a:14:e4:
ec:b5:64:da:c3:2d:05:02:b1:9d:b4:fe:f0:16:a6:e1:26:ee:
2b:fc:29:58:cd:1a:b4:14:75:6a:a2:28:da:47:f4:59:73:a1:
a1:bf:b3:7b:c1:ed:9c:9b:6f:3b:3c:54:71:2c:ef:81:78:e1:
bf:5a:ff:85:74:73:0c:ca:eb:bb:d4:0d:cb:3a:e8:9e:6e:68:
df:c5:d1:cf:26:84:13:37:71:6c:1f:e9:b5:25:42:b5:7f:08:
9d:49:3f:86:77:c8:29:2d:5d:bd:9b:2b:f6:ed:21:a3:07:0b:
51:59:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:09 2026 by rpki-client