Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: zYiQjU8XcRt4lzEhy9LaFjOtqAqZySwbyY4uFHTpNOs=
Subject key identifier: 06:9C:FE:CF:F7:AD:B9:F1:6B:01:43:A2:BB:32:72:F0:A5:AF:23:34
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 019CAAFCFA26BEF98AA17520D3C94497D79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0D9F
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: 9kqqqeQ2zrAx0H4T1UJZr/w7JLqQEQkoMVpdS1C7M6g=)
2: LmAKZqBdTFF5oLsEoluyDIA0344.roa (hash: hZY8m7f3JelI/bgQwSPE+IWZx3xID2uYH6Ji+lC9gck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fa:26:be:f9:8a:a1:75:20:d3:c9:44:97:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=069cfecff7adb9f16b0143a2bb3272f0a5af2334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:7a:84:ca:72:b9:63:83:0d:05:65:d3:d1:
a5:62:c5:eb:41:56:0c:88:24:6c:94:b9:c9:03:e2:
40:19:81:54:90:6a:b0:f2:72:90:a8:fb:d7:16:26:
32:7e:a1:14:56:a2:fb:bd:d0:7b:ca:b7:3a:f2:9b:
d7:3b:d6:b6:d1:84:0e:c4:a6:ae:05:8f:a2:61:d3:
44:eb:a4:d2:48:d1:d6:a6:a1:6a:bb:d3:4c:b7:31:
d5:17:f9:2a:a0:08:90:61:3e:9f:06:d2:39:b8:48:
65:90:3e:ac:78:42:51:d1:bc:bf:82:35:b4:69:b8:
01:f3:cb:47:30:4f:4b:38:d8:b2:3e:0e:f1:6a:30:
0b:4c:a2:01:f5:fd:67:ac:02:8e:4c:b8:1f:6f:aa:
8c:80:ea:08:6f:6a:c4:f0:31:fb:63:61:bf:e0:fa:
9b:b6:01:30:a6:7d:db:e4:2a:bf:8b:0e:a2:3f:44:
0e:7f:22:8e:2c:05:c2:ce:cd:ed:20:3e:23:da:22:
c8:15:ee:2b:8a:da:12:dc:df:b6:bf:72:c6:46:e0:
3c:e0:76:c2:e1:85:49:42:80:85:ee:3e:8a:39:02:
b7:0a:e6:fa:50:d9:c2:69:6e:a1:a3:9f:39:5a:22:
4c:fe:c3:35:d8:04:f0:37:10:84:71:55:f9:61:12:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:FE:CF:F7:AD:B9:F1:6B:01:43:A2:BB:32:72:F0:A5:AF:23:34
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9a:56:ea:fa:d8:63:24:df:28:a2:61:52:77:4d:8c:5e:1b:
a7:ab:ca:c8:bb:d6:37:c7:7f:3c:85:b8:d1:4c:26:e0:1c:9a:
1f:0d:e6:77:a7:40:4d:fa:2c:77:ac:59:7a:e0:42:24:23:d3:
de:ee:14:15:08:cb:45:22:a6:1b:07:ee:fb:02:36:e5:5e:a8:
88:6b:3d:e5:25:16:2c:32:17:9a:8f:61:86:d0:14:cf:36:83:
7b:5f:5e:dd:73:00:f2:17:c5:33:13:95:f2:fc:5c:20:8f:26:
8e:8a:ef:f7:34:ad:ef:4f:0f:84:b3:c4:59:55:10:3f:c4:ec:
67:bc:d3:67:70:d2:1a:d2:3b:d8:fc:eb:b6:aa:32:23:a6:2f:
77:82:5f:cd:55:89:7d:b3:b4:29:f4:09:bc:90:79:8f:fc:ca:
4f:8a:43:40:1f:dc:f0:a9:b8:83:0f:7a:38:bb:84:e6:a5:02:
97:43:fa:1d:43:e0:28:23:37:94:61:e0:f5:8b:4d:a3:13:f9:
a1:ce:22:c7:49:b0:3a:b2:da:eb:94:6e:68:f8:d1:e7:5d:20:
90:6c:e8:20:fc:9f:59:3a:e8:e7:ac:eb:5b:fa:eb:ba:22:b5:
c9:49:2e:3e:08:43:d2:10:73:56:6f:d0:0c:0a:b1:1a:9f:af:
05:c4:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:54 2026 by rpki-client