Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: TZfUAqmQGl8r39lLXajQqPipdhGrm+EZj4V3SFFz5to=
Subject key identifier: 3B:D2:A0:3F:EF:C6:DE:DA:D2:EC:F2:9C:F0:30:8B:4B:DB:C7:13:93
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019CAB6B47BDCBED4758B2EC71D0B9D04B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: WiRYyynyFarHPC7PHS3NPvMvHMsPnDFVn447KHMxNyM=)
2: UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (hash: g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=)
3: eBV3wtUeMu2mQzbDRhT7v_8FhCM.roa (hash: dfSD4t+IvLSwRtvheEfZG9CM1+g6QasEUhniYPszLJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:47:bd:cb:ed:47:58:b2:ec:71:d0:b9:d0:4b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=3bd2a03fefc6dedad2ecf29cf0308b4bdbc71393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:84:d4:b2:4a:2c:e0:49:d3:36:d0:56:66:
17:01:d2:6a:96:8c:51:f1:e2:b9:58:d6:03:28:38:
1e:12:6e:0e:e6:ae:cd:51:99:4e:d0:ae:df:4d:34:
66:85:11:e6:4b:c1:f3:69:ef:34:de:e1:92:f6:3f:
af:19:a5:b2:f1:be:7a:6e:fd:33:3b:e8:49:e9:e9:
1d:53:6d:0a:62:d8:95:22:8b:6f:e0:dc:23:98:a5:
57:03:81:19:74:65:e1:13:dc:a4:68:ed:10:b9:6c:
17:84:4c:00:59:28:6b:38:8a:09:f4:8d:af:42:42:
61:26:6c:12:15:c9:b6:6e:d2:5c:46:b5:87:84:6b:
16:27:03:3d:73:97:31:62:89:2a:3e:4b:f4:d7:bc:
ee:60:4c:3e:89:97:f0:0b:fc:ee:1b:08:90:d1:70:
83:2c:b6:ea:b3:1d:cb:a0:4a:13:f9:d3:58:7d:a6:
1d:0f:d5:69:97:20:64:de:12:97:92:ef:a4:f3:f3:
e7:38:df:e4:4e:db:a9:4c:ae:35:9e:76:d8:81:d2:
b4:cd:1b:d8:08:7f:c7:6c:42:83:c2:1e:33:b9:be:
24:1d:07:13:0e:e0:90:a7:ba:2b:84:51:b7:ad:f4:
ae:88:45:2b:24:75:2d:a7:ed:e7:db:a5:65:a8:0f:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:A0:3F:EF:C6:DE:DA:D2:EC:F2:9C:F0:30:8B:4B:DB:C7:13:93
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:9b:f6:ea:59:94:40:a6:0e:f7:78:45:8d:4d:cb:df:fa:
88:79:f0:e8:2e:b1:52:da:aa:86:d0:72:f2:ed:77:5b:4b:9d:
c4:8e:43:4b:02:65:66:3e:1d:97:d6:37:38:f8:d2:bf:90:0e:
e3:74:70:fc:fd:52:93:82:2a:e6:40:95:b1:b0:4f:14:01:96:
e5:93:1e:d5:a2:8f:a2:37:1c:c6:73:32:cf:2a:7e:c0:d6:5e:
d5:03:ab:a5:ae:2d:c8:d1:5a:7d:b7:51:ed:f6:18:08:bf:4a:
7b:c6:c3:24:ed:d7:8a:99:c8:cc:85:71:21:76:ea:bb:94:90:
ca:15:17:52:74:4a:50:78:66:58:6d:ca:c7:bb:f1:e5:09:c0:
6f:d0:f5:be:7d:60:57:b7:bc:c0:c7:80:7d:0a:18:f8:09:7b:
08:81:b9:48:ff:93:34:7a:d0:89:4f:b7:64:32:74:11:61:bb:
6d:d2:da:68:fb:90:63:23:15:8e:e3:b3:a6:b3:78:65:96:6c:
35:6e:8f:e4:2b:d4:bd:18:c6:20:24:de:a4:b1:74:af:19:d8:
7d:a2:b4:d4:1c:7f:27:a4:5b:03:96:ab:5f:c2:98:4f:ab:09:
a3:42:ac:33:69:27:f2:28:f3:a0:0f:06:6e:12:60:49:a5:b3:
7e:1e:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:45 2026 by rpki-client