Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: fjJRv5f53HazjNl/EYeWEhWwMaIZPkEIT7HpS3ArSKg=
Subject key identifier: B8:F2:6D:60:6C:CA:BB:7E:97:90:D9:BF:2E:DA:5E:7F:47:A2:FE:4B
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 019D9A74DF7F33F0F91D19B3ADE86BEDBD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0E1B
Signing time: Fri 17 Apr 2026 08:00:43 +0000
Manifest this update: Fri 17 Apr 2026 08:00:43 +0000
Manifest next update: Sat 18 Apr 2026 08:00:43 +0000
Files and hashes: 1: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: J8It1yO+2eh4NmS3XK5sbEPoH4S0BBXD1sLLuaz56hE=)
2: LmAKZqBdTFF5oLsEoluyDIA0344.roa (hash: hZY8m7f3JelI/bgQwSPE+IWZx3xID2uYH6Ji+lC9gck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:df:7f:33:f0:f9:1d:19:b3:ad:e8:6b:ed:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Apr 17 08:00:43 2026 GMT
Not After : Apr 18 08:00:43 2026 GMT
Subject: CN=b8f26d606ccabb7e9790d9bf2eda5e7f47a2fe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:8b:fd:ea:d2:3f:ce:19:79:cd:0b:f9:2d:
d8:1d:f6:c0:0e:b4:f0:f7:ab:e3:5f:0e:57:b4:55:
39:90:12:4a:56:68:03:fd:16:bf:12:64:b2:b3:94:
59:c0:41:c5:e5:b8:1c:6d:f1:e2:1d:b8:b1:0f:8e:
76:c8:f1:d1:43:c0:94:22:30:d9:3d:bd:9f:80:ba:
4d:6b:ea:ce:73:f6:3d:5f:b3:d3:56:5e:29:db:66:
bf:f7:9d:2e:00:2e:92:ee:f4:c0:6c:93:35:89:72:
52:e1:bf:71:2d:bd:c9:70:12:ce:9a:b6:e5:e8:ee:
ab:ed:6b:6b:1b:d0:ae:5c:7d:dc:bd:4c:5b:61:3b:
ff:d2:09:26:07:22:09:35:bd:9c:bc:4d:99:73:67:
26:cb:0a:4f:35:7d:13:51:f2:3f:01:96:fb:db:65:
a8:ce:5d:92:7a:74:c1:28:b7:90:91:b3:ec:15:d6:
eb:7a:ec:fd:44:32:b0:61:3e:b1:f2:31:e9:09:28:
1b:23:9c:9b:a0:29:a3:46:c6:37:01:12:16:b3:d9:
52:a1:bf:a8:86:a1:2b:6d:f2:f3:e0:24:21:3c:15:
35:e9:b8:e8:16:98:bb:25:e2:cd:ad:44:a1:ff:b9:
5d:17:21:6d:a4:1d:02:3a:b6:24:fe:de:18:85:8a:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:6D:60:6C:CA:BB:7E:97:90:D9:BF:2E:DA:5E:7F:47:A2:FE:4B
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:48:54:ca:9e:45:f3:66:0c:5e:46:19:5c:ba:a2:44:86:b4:
d1:84:76:73:17:8c:40:9b:7a:15:4e:e0:0b:8c:bc:9f:15:d4:
df:72:bb:15:6e:e8:d3:8a:a3:06:8e:0f:a5:30:d4:2a:5c:ff:
7e:12:46:02:f8:5c:16:65:52:95:6c:d1:68:5c:3c:2f:d6:37:
0e:f5:fc:9f:15:41:b7:eb:dc:3d:b9:94:29:0d:cf:53:4f:04:
ba:c5:26:62:df:91:af:8e:e8:25:a2:b1:b6:44:89:5b:65:f0:
00:47:eb:82:60:21:94:1d:2c:09:c5:d9:c0:7d:f0:89:da:21:
b9:e8:77:4b:ff:64:e1:53:d1:a0:2d:bd:66:be:19:4c:1b:77:
77:41:27:a7:37:cf:e6:92:13:2a:df:d8:90:32:b8:4b:24:5b:
a2:b3:c6:58:e6:57:46:64:71:37:bf:c2:e6:a2:d2:8c:d5:a0:
1d:24:f2:dd:e3:90:5e:f0:4e:e7:d7:0b:72:ef:49:2a:bd:09:
44:70:36:6f:7c:4c:85:1a:56:1c:2e:5c:58:03:b4:ae:d5:92:
ef:c3:86:cb:8d:01:bf:85:1e:dc:55:15:02:e1:82:2a:48:70:
fa:9f:c7:2a:29:3f:f5:96:66:78:7e:6e:75:80:8e:4d:d7:3b:
77:0b:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:58 2026 by rpki-client