Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: A5xbRBcMl9sLqbO0RT0gOUeYwoAtt4UfIRJ8mqdLOo0=
Subject key identifier: 0F:63:02:62:41:C7:00:F8:65:9F:43:69:C5:04:55:B3:70:94:B0:A0
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 019CAB6B328D42AA89F497FB198BCEA2A161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 179D
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: AByMdd9uAUk4zvwxWrxsWoOWpY0AjFl0y/2JgTyzXkg=)
2: XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa (hash: PLd3AjjjU/YjEzgvUwnUvjyB10O7EBQqmUUYsFik7AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:32:8d:42:aa:89:f4:97:fb:19:8b:ce:a2:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=0f63026241c700f8659f4369c50455b37094b0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:9b:5b:17:43:f8:f6:68:16:3b:81:8d:b9:
5b:21:66:03:2d:71:01:d2:01:fd:5d:df:d5:62:c6:
8f:62:3f:43:75:09:0e:80:a0:d3:70:a0:4f:a9:3c:
bf:31:23:df:1e:ca:dd:21:e7:29:88:c6:9b:9c:dd:
8a:80:4c:9b:b9:ab:11:92:bf:25:2e:20:b2:c5:d8:
79:ff:92:a0:15:66:a3:b0:06:2e:d9:d7:af:ae:4b:
38:6e:dd:4f:38:34:57:14:51:ff:ef:10:81:a9:60:
63:8e:ec:88:1a:93:b2:aa:39:8a:fe:66:27:66:19:
e4:73:0b:ec:7c:44:02:e1:1a:ad:08:fe:c7:0e:d9:
53:c6:26:3a:e8:34:49:eb:81:5b:08:e2:1b:27:a3:
05:f7:30:88:dc:05:2c:62:82:c1:f1:6b:d8:ee:af:
c7:ff:6c:50:de:4a:09:22:1e:89:78:b0:16:fb:45:
c4:d2:c9:d7:1c:ff:3d:ed:9c:80:cd:b4:0a:49:77:
71:74:b0:0c:3e:33:ae:18:f2:7a:09:be:66:25:b9:
da:5b:81:aa:be:37:a3:aa:55:d7:11:b3:b3:73:57:
b2:39:3c:e6:85:13:f3:c5:f7:f7:a7:9b:4d:fc:06:
cb:65:27:3c:ee:84:b1:cf:d2:c4:b5:26:7a:d4:9f:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:02:62:41:C7:00:F8:65:9F:43:69:C5:04:55:B3:70:94:B0:A0
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:a0:1d:73:df:6a:f5:f3:15:84:04:dd:45:39:8a:46:99:
c2:3a:a9:13:1e:3e:73:74:b6:00:dd:4c:b6:9e:01:4b:6d:1a:
83:7b:9a:10:13:6c:1f:96:1b:e7:5d:33:d4:07:e4:af:92:ed:
82:58:c2:cc:a3:9b:18:b2:4a:d5:76:5c:ee:ed:5f:8a:65:9c:
1b:5a:f0:d9:f7:31:ad:c2:52:1b:88:61:df:6c:dd:78:9e:53:
77:64:4f:f1:0c:56:f5:e3:1f:be:b4:45:9f:9b:cb:ae:94:66:
71:44:10:62:eb:7d:7f:76:e6:16:82:b4:1b:7a:c2:e4:ed:02:
0e:76:97:3c:88:78:7d:3d:7b:cf:34:8c:97:75:aa:5f:0d:00:
13:5e:5c:6c:97:79:97:62:49:32:3d:55:16:04:f2:bb:9c:d8:
fa:b6:1c:a8:af:6c:48:d9:b9:dc:24:e0:14:ac:a0:65:40:b5:
42:31:38:e1:ca:c1:0f:1a:5e:65:49:f5:e0:90:1b:9a:d7:f1:
9b:d4:54:b6:23:ef:9c:19:63:29:f5:8c:60:67:82:d0:68:5a:
3c:dd:1b:0d:17:1c:d8:d3:01:2d:8a:98:4c:98:c0:02:f6:3d:
78:f9:ab:6c:99:c1:df:a5:68:e4:90:2e:e8:a5:27:8e:dc:ec:
18:b3:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:38 2026 by rpki-client