Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: YzKuTkQ4QvU2p13vmquu0lH5TwUKpAk7yLvqHV+Gemo=
Subject key identifier: 3E:6B:E5:DC:AB:BA:40:D8:0D:0B:BC:28:B0:E0:C1:C8:F2:93:52:FB
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 01A0D4CB9A7C7FA6CF128C2BECFA2F4558A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 19:01:48 +0000
Manifest this update: Thu 24 Sep 2026 19:01:48 +0000
Manifest next update: Fri 25 Sep 2026 19:01:48 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: wOMW1C8FBnsZGAyyKJ+VeGG+WZe/i5Y4y06w75slOSw=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:9a:7c:7f:a6:cf:12:8c:2b:ec:fa:2f:45:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Sep 24 19:01:48 2026 GMT
Not After : Sep 25 19:01:48 2026 GMT
Subject: CN=3e6be5dcabba40d80d0bbc28b0e0c1c8f29352fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:e6:0b:f1:34:26:db:6a:0d:0d:d1:a6:e7:
4c:43:7b:96:7f:0e:77:1a:08:6c:6e:b2:e6:11:e8:
11:36:51:eb:97:b0:c8:23:f2:c1:59:e3:6a:67:94:
d4:89:db:72:19:4d:5e:1c:93:d3:04:7e:9f:57:d8:
53:c1:57:bd:a9:4e:b4:3a:95:a5:da:f3:13:60:5f:
f3:c2:25:8a:17:b1:26:b3:a2:4b:ee:f9:bc:af:25:
c7:a1:9d:82:52:80:e7:2a:09:f1:d1:82:ff:a3:d6:
c4:4f:dd:f7:e1:1b:1c:ab:8d:f5:95:15:e3:68:63:
b0:b1:f5:f0:d1:a2:35:d5:99:95:c0:a1:a3:fb:2d:
72:91:7c:04:84:76:0a:47:a3:c7:eb:bd:76:96:32:
f8:b1:db:28:c4:ff:dc:8d:af:a1:7f:4d:57:45:31:
77:c0:39:cf:5d:a7:47:f5:d6:1e:2e:75:2e:25:f6:
83:78:43:91:61:71:4f:03:90:c6:d2:a4:eb:50:d3:
87:6d:b0:7b:9e:f3:3a:18:11:8a:b2:86:a0:4a:e5:
17:4d:02:03:cf:9c:83:d2:07:46:4c:01:67:78:e2:
5e:fc:df:db:56:16:ca:04:19:16:fa:2f:dd:85:7d:
f5:8b:6e:24:46:84:8c:fb:0c:26:80:e5:9f:7c:61:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6B:E5:DC:AB:BA:40:D8:0D:0B:BC:28:B0:E0:C1:C8:F2:93:52:FB
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:aa:23:a1:2a:ba:23:3c:6b:ae:71:73:5d:da:66:f2:77:
ab:dd:2b:04:eb:a5:b2:00:b7:12:fd:31:d0:8b:71:93:bf:c3:
58:a5:b7:35:6f:c1:b7:48:23:74:a7:cb:a1:b4:a3:05:43:5a:
03:fc:86:5d:4e:fc:ba:cb:aa:06:11:ba:77:2c:9d:40:6f:aa:
9d:f4:2d:d2:21:f9:79:b8:57:9e:d9:5a:a7:8b:16:c0:46:68:
38:40:ce:ae:d6:13:75:b3:93:da:75:fe:1a:3b:86:35:ef:4e:
3d:37:dc:82:1b:7e:9f:72:01:dd:ce:19:fb:3d:ea:8d:7f:3e:
b2:0f:1d:d0:fa:11:ca:78:3e:a8:c1:6d:23:ac:5a:6f:17:42:
17:d8:c2:dc:d0:d7:02:f8:ee:7f:c7:89:e9:58:6e:e7:ca:2f:
7d:42:f7:27:19:f4:8d:61:32:4f:8c:3f:6d:4b:f3:91:0e:1c:
3b:10:27:03:5f:79:99:1c:b4:ea:44:42:3a:e9:c8:83:61:c3:
0e:c3:85:06:7e:0b:33:2f:9f:05:13:d3:ba:74:22:0c:ca:44:
c8:c0:f6:b8:15:63:6e:0f:13:8a:97:08:75:02:41:7b:72:f2:
25:4f:30:a6:32:e0:af:51:bd:be:6c:54:70:8f:a4:52:9c:c2:
08:a1:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:20:46 2026 by rpki-client