Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: Hi4KU9SZZ+Cch0It7/Eb7+60V4eWoJO1FgM4PXraYK4=
Subject key identifier: CE:DC:24:D0:CA:91:D9:BC:28:72:9E:CA:DD:E2:19:70:9D:61:74:B6
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019CACB4824AC3CDAD425E93CB70391C71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 045C
Signing time: Mon 02 Mar 2026 04:00:36 +0000
Manifest this update: Mon 02 Mar 2026 04:00:36 +0000
Manifest next update: Tue 03 Mar 2026 04:00:36 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: 4aNvE3z3VoCUtpWRdADFJqhfgTSQNk1uH4IPgclX450=)
2: PchT168ujFib-nY79tBpP-zJgdY.roa (hash: X54RZoJH7rp6pAWMbh3u6FOekQubaYZ6ugL/JB3twaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:82:4a:c3:cd:ad:42:5e:93:cb:70:39:1c:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Mar 2 04:00:36 2026 GMT
Not After : Mar 3 04:00:36 2026 GMT
Subject: CN=cedc24d0ca91d9bc28729ecadde219709d6174b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:5d:dd:c9:f7:c5:4f:b8:2a:9b:e7:fc:14:
90:43:2e:8b:93:53:f0:ac:54:2c:20:cf:1c:77:65:
ba:e0:21:17:9f:e1:15:96:ba:eb:54:8e:41:0d:28:
ab:74:80:98:de:a7:ef:a8:e2:53:11:84:44:a4:82:
64:dc:c2:d1:65:7b:70:a6:ed:99:3d:92:71:7b:76:
58:1b:01:ff:81:7d:4d:8a:73:1c:d6:ac:55:fe:c4:
03:c0:a9:02:43:44:41:81:bb:9c:ca:ce:4f:51:21:
f4:cb:2e:42:ff:8f:c9:91:96:ca:41:77:28:cf:97:
88:91:ee:7f:7e:e0:1f:26:ae:f3:b9:6b:fd:85:b6:
9a:49:1f:f9:63:ed:46:14:46:ae:19:7e:7c:2f:f6:
fb:00:c7:0a:de:46:dc:9b:41:78:cd:c7:aa:ed:9c:
bb:f1:d0:e5:ec:a5:c2:1f:f9:2e:24:3d:57:62:23:
fb:6b:28:38:85:c3:a2:44:1f:ab:2c:2c:51:5e:9a:
c2:3a:34:ab:41:93:e8:ec:3c:31:b0:df:52:b4:e3:
3c:82:47:8d:b1:5e:cf:e8:df:b4:80:c2:8f:58:ff:
ce:c0:7d:56:22:49:cc:c1:3a:31:ab:3c:71:e9:76:
35:ab:c6:8a:c1:fa:5b:7b:cb:16:c4:de:1f:76:42:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:24:D0:CA:91:D9:BC:28:72:9E:CA:DD:E2:19:70:9D:61:74:B6
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:0f:b3:26:12:48:b9:85:6b:94:09:a4:fa:a6:39:27:9e:d9:
65:6f:62:00:3b:ac:b7:57:2b:97:51:67:4a:1a:97:08:cd:99:
ed:5a:77:7c:d3:43:dd:e9:54:fd:47:69:1f:d8:8c:d7:4d:92:
4d:cf:80:dd:c7:f4:68:3a:8c:e0:4f:6e:84:a9:56:78:d0:c3:
c7:42:67:b9:1a:f0:1c:ef:00:d8:97:96:5a:de:5c:50:73:2d:
50:1b:eb:d7:27:f2:2d:b5:cd:ef:3f:de:88:07:2c:d5:84:80:
69:11:f1:c2:4f:ef:25:9d:34:8d:a6:29:35:5d:86:08:44:fc:
ee:7e:a8:5a:96:da:f9:d2:26:45:f2:91:c1:34:34:70:d8:e5:
c8:43:cf:91:79:52:79:14:df:10:43:1b:a6:76:74:68:94:f7:
c8:ba:f7:75:c6:46:b3:e2:bf:a4:5b:21:31:3c:d3:a1:d7:53:
e9:2e:08:a6:21:38:12:20:b6:3a:65:a1:68:0b:1f:52:6e:42:
56:d3:5b:63:c9:6b:52:2a:54:f6:8d:08:45:4a:50:b1:05:27:
df:a1:20:22:d9:fe:a4:b9:17:af:c4:c8:fd:79:00:f8:4e:17:
03:2f:c8:58:d5:70:a8:dd:cd:a6:ab:a2:51:0b:d4:b5:99:34:
b1:95:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:16 2026 by rpki-client