Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: wfFQpE8XvLpkoTva/AKU6jDbc2NluiRGxFeBcfYA5+o=
Subject key identifier: 84:25:C6:43:60:B6:18:59:E6:EB:DC:81:E2:24:C0:93:15:88:3F:C6
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019CAC4768D1AEC07EAEF34558F128AAF9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 01DF
Signing time: Mon 02 Mar 2026 02:01:26 +0000
Manifest this update: Mon 02 Mar 2026 02:01:26 +0000
Manifest next update: Tue 03 Mar 2026 02:01:26 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: QSzE4QsJZ1ikFESZNFcjZCndKqrKnHyMqJifo33hmHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:68:d1:ae:c0:7e:ae:f3:45:58:f1:28:aa:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Mar 2 02:01:26 2026 GMT
Not After : Mar 3 02:01:26 2026 GMT
Subject: CN=8425c64360b61859e6ebdc81e224c09315883fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:b6:6a:6b:04:dc:c1:1b:36:1b:aa:12:63:
f8:17:a3:df:0c:0d:c1:19:64:e2:f7:d9:c5:46:b4:
19:9f:80:31:de:34:dc:19:00:97:1d:ce:72:9e:d8:
f3:06:1e:32:7c:2d:1d:4c:d4:5c:54:2c:33:d6:0e:
35:37:8a:d3:0a:c3:06:c0:f0:74:be:02:e0:51:00:
de:1e:e1:04:80:b6:5f:e0:5a:67:e8:3d:f6:e6:7e:
84:1d:d6:b4:01:f3:57:42:92:38:68:d1:92:a1:bb:
76:09:a4:8d:6b:2c:bd:82:7e:31:03:3c:02:0e:55:
05:73:7c:42:d2:7c:a7:cb:46:be:9b:1d:32:7b:18:
ef:3f:ea:bc:b7:cd:62:21:25:7d:54:e8:b5:c9:ca:
ab:21:41:ab:1d:94:83:15:6a:86:84:fa:59:a8:6e:
d9:cc:c4:66:9e:c8:1b:f5:3b:64:d1:e6:f5:ae:f9:
ae:e9:06:42:b7:12:1b:82:5b:66:2b:04:c4:5d:d8:
e2:2d:72:f9:1c:a6:af:53:1d:83:8f:65:28:f7:0f:
8f:f7:34:0b:2c:dd:99:29:51:eb:01:34:1d:31:b8:
1d:b7:56:0b:c9:dc:84:50:7e:82:6c:55:3a:1e:a0:
2c:1c:de:f1:03:c8:cb:bb:d7:86:0b:76:9f:7b:e4:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:C6:43:60:B6:18:59:E6:EB:DC:81:E2:24:C0:93:15:88:3F:C6
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6b:4e:c4:03:84:4e:cc:40:f8:ec:28:7e:e2:8e:11:6f:34:
92:9d:e9:e9:1c:13:c7:c1:d5:a6:06:2f:d3:b9:39:77:09:fa:
ca:75:78:29:f1:51:63:ab:2e:5a:43:0e:ef:87:ec:4f:b4:4d:
ad:b6:f0:e2:da:05:c4:77:25:70:50:26:4c:11:e7:e0:d9:82:
83:c7:33:27:38:34:92:a9:1f:b1:d3:06:17:e7:92:26:ca:e9:
6c:ac:fd:4d:91:54:f3:ef:aa:26:c2:01:65:46:ea:c2:20:c0:
14:42:d6:e6:d1:42:1b:22:28:69:ff:61:d2:69:a5:5f:f7:52:
cf:de:a2:79:84:03:8c:33:fb:44:33:a9:cf:0d:06:31:0f:4b:
8f:94:8a:76:d4:ae:6c:0b:28:75:4c:eb:7a:1f:d1:67:e9:bc:
ef:a6:70:de:b7:d3:78:0c:e1:e2:d8:b3:10:09:88:cf:fa:5a:
2b:67:48:88:2e:a8:5c:d2:26:b5:4e:cd:87:ba:08:7e:f2:20:
3e:ea:73:ba:47:ed:ac:3a:3a:91:ff:2f:9c:53:f7:a4:0e:88:
10:02:f3:5c:da:d7:43:97:8e:f0:c0:d4:a5:cf:80:dd:d1:3d:
ca:09:ff:02:36:ba:18:9a:cf:1c:f9:a1:a4:5b:dd:29:ba:a3:
76:70:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:40 2026 by rpki-client