Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: 3mTZN8kVM6vz/L0k5zw8La1nOii9egfAIuUhtXggzlI=
Subject key identifier: 91:EE:5E:C0:BE:84:16:52:94:99:74:C2:65:60:E5:80:B6:24:D2:5E
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 019CAA5826D321D608AE22C8FE24E04FE5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0E37
Signing time: Sun 01 Mar 2026 17:00:29 +0000
Manifest this update: Sun 01 Mar 2026 17:00:29 +0000
Manifest next update: Mon 02 Mar 2026 17:00:29 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: Ug+vqxX6sqCzit+PAKp9sN8BKEJJjwq+EmCIG/kp5aw=)
2: NJax3QvlUxuz0S34cv9iYVlYSQU.roa (hash: u51xEsV9ElXZprx9W5HKiMp5RG9k+7g4oH4KGNb9sDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:26:d3:21:d6:08:ae:22:c8:fe:24:e0:4f:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Mar 1 17:00:29 2026 GMT
Not After : Mar 2 17:00:29 2026 GMT
Subject: CN=91ee5ec0be841652949974c26560e580b624d25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:88:65:05:bc:c6:f3:84:5a:fe:7c:82:79:
70:57:ea:14:d4:c9:57:06:02:f7:68:13:78:ca:27:
71:33:6b:98:a7:a0:45:6d:6d:72:5f:b7:bb:19:18:
18:28:34:6d:0d:d9:fd:09:34:95:09:1a:bb:8a:15:
33:2b:8a:f4:eb:24:54:c3:70:c7:49:46:5e:1d:1f:
6b:c3:31:e9:f4:41:ea:0a:60:e4:a9:70:a8:f4:92:
85:c0:9f:5c:96:04:9e:8f:6a:20:a0:93:79:34:6d:
df:98:91:fb:b5:ac:23:bb:ca:b4:13:b5:c0:27:da:
ed:9d:d5:f3:12:5f:49:28:1e:45:2f:c3:4b:a1:20:
e2:7f:86:86:4a:59:54:53:e4:a4:1c:b7:86:80:e6:
1a:f6:da:bc:d7:e2:f5:0d:c8:d8:ed:5b:d7:3a:cf:
88:4b:b1:72:63:55:69:8a:d8:7c:bc:99:74:ef:69:
69:e0:c7:5b:77:4f:bb:17:ff:af:0a:e2:c8:a4:00:
21:e2:29:d3:8c:ba:d4:a1:bb:f5:17:18:05:90:ec:
85:bf:e2:f5:92:f0:1e:75:3b:e3:31:26:dd:b8:ea:
75:2b:46:05:a8:a6:41:94:85:d4:7f:23:da:37:38:
6d:35:ee:a2:63:00:ac:ad:0d:fa:45:a5:66:da:95:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:5E:C0:BE:84:16:52:94:99:74:C2:65:60:E5:80:B6:24:D2:5E
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8b:18:bb:24:cf:cb:23:74:cb:91:2f:0f:f1:4d:03:68:0a:
ee:af:ef:8c:2c:e8:ea:3d:72:8a:00:a0:fb:91:b9:cc:9e:a9:
2a:2b:d0:65:6f:f4:a5:7b:f9:b7:6c:5a:6b:a2:52:6c:c2:cf:
d9:33:d7:20:5f:bc:43:c4:aa:09:57:97:34:ee:b7:a8:ac:c5:
74:24:af:fe:7e:f4:35:16:a8:20:89:43:3f:67:86:a0:98:d9:
dd:53:f0:bf:12:b7:71:6b:0b:eb:16:72:7b:04:7a:a9:a7:38:
6f:32:0a:27:d1:9d:0c:59:b8:6d:92:88:3a:af:cb:4a:c7:7c:
d7:60:bf:1f:8f:a1:ed:23:5f:56:3a:e3:b1:39:1f:3b:30:e2:
ce:b4:0c:1b:fa:dd:52:ee:8d:4f:43:2d:43:2e:49:41:05:c9:
55:d1:bb:2c:22:77:bb:be:e9:c3:a0:37:32:43:32:f8:fc:46:
e2:1f:3d:dd:73:71:eb:50:96:66:50:c5:50:bc:cc:a5:c5:37:
50:b3:29:77:e2:2a:6a:32:a2:32:57:e6:e7:5e:22:97:8b:67:
49:c1:db:07:6f:78:d6:17:19:f7:79:b7:03:13:8f:db:e9:c5:
24:b8:2b:4c:bb:c9:51:05:47:6c:24:5e:51:97:57:bc:d9:43:
d5:e2:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:14 2026 by rpki-client