Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: eG0LBI9cSLqCpkxC35yckOdKiXIlLfJmUihzBPvJex0=
Subject key identifier: 26:FD:87:60:58:07:F9:E6:A2:8D:87:85:B6:0C:DE:3B:DF:19:C7:44
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019CAAC6A84573986A37D2387A1966A95694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: ZQqETd3lUV0tb7w/ha5UMOQwUAH8m7WhUZsMB8wpGgQ=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a8:45:73:98:6a:37:d2:38:7a:19:66:a9:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=26fd87605807f9e6a28d8785b60cde3bdf19c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:b1:3f:94:f0:23:64:d0:e4:0b:74:f0:be:
c3:bf:be:cd:43:63:53:82:55:1a:74:43:65:68:63:
91:1c:2d:eb:e4:6d:e5:cb:3f:74:bd:81:58:7a:f5:
9d:0a:2a:5a:e3:e2:27:12:8e:d6:6f:da:f4:26:3e:
fb:01:35:bc:8d:c7:cd:c2:14:9c:8e:30:59:07:c9:
30:cc:61:9c:d2:b9:89:0b:1c:65:34:e8:ef:5c:50:
79:e0:5f:04:16:bc:63:5b:d3:84:62:8f:62:04:28:
7e:68:5f:eb:6e:a2:48:ef:88:02:f0:0b:ed:30:50:
92:6b:02:4e:17:ab:d5:77:55:89:1a:82:6b:b3:f0:
30:4a:eb:7e:4b:f2:72:6a:1a:39:6d:49:87:32:66:
ed:c7:e7:91:e0:33:d6:81:ad:37:58:ed:13:18:78:
14:74:de:65:91:dc:95:5c:e6:87:5d:84:07:ab:2e:
c1:85:e4:83:4a:57:aa:48:e4:0b:61:9c:82:4a:42:
8d:02:38:05:fe:6f:80:25:b3:7f:34:f5:0f:75:47:
86:4e:1e:b0:59:0d:1f:fa:d5:a9:06:3b:cb:97:7e:
ed:19:0a:c2:dc:95:89:4e:fb:f8:40:28:d4:2d:d5:
70:08:b2:8d:49:a4:84:ed:bd:30:38:d4:31:52:00:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:87:60:58:07:F9:E6:A2:8D:87:85:B6:0C:DE:3B:DF:19:C7:44
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d1:d5:f1:15:b4:e8:8b:6b:bd:62:22:a1:d3:dc:ce:bd:0e:
28:12:f5:1a:30:02:51:09:ca:3e:58:2f:94:9f:d9:d3:31:32:
2b:61:04:9d:02:7f:cf:e7:60:c0:1b:c9:85:6a:54:e4:f5:3d:
2b:65:06:ca:97:8a:3c:68:ae:72:38:93:96:50:91:f4:b0:78:
ce:80:57:82:f5:f1:97:28:d9:cc:ea:68:3a:ab:b3:1f:9c:b4:
af:8a:b5:7c:36:d1:de:50:6f:ab:3d:49:3d:55:f4:0f:2c:6d:
5f:db:2e:17:70:f8:87:c3:89:d6:ea:a9:39:ea:b2:c7:0b:51:
17:65:aa:d7:c4:f3:1e:a4:ff:17:bb:0a:e1:ab:c2:32:79:81:
97:d7:5f:53:38:e6:e7:2e:68:0d:9f:e8:43:c2:71:24:24:08:
09:2a:ec:27:7e:c6:b6:13:09:3e:4c:2c:b5:3b:20:a6:b2:8c:
8d:10:8c:fe:de:16:22:d2:31:76:97:e3:28:b2:9d:e6:a7:33:
c8:34:da:a7:17:57:c6:54:e3:12:af:5f:5a:44:04:b1:cc:e6:
bf:a7:67:da:fa:c2:24:a2:0d:16:12:48:0e:9d:0e:71:44:75:
cc:f8:9a:8b:c5:d7:ef:0c:b4:9b:27:d0:7d:2b:b1:f1:4b:6f:
23:12:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:10 2026 by rpki-client