Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: 86BiIR2Jhkfek7+rn40vsUBWiSa/WfYKxhRY9aXZxNc=
Subject key identifier: 62:20:4B:1D:8F:5D:AC:0E:F8:43:55:17:8B:8A:BB:F2:B1:F0:2D:B3
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019CAF48B9DC2E38DEB48BA9406F03096CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 16:01:44 +0000
Manifest this update: Mon 02 Mar 2026 16:01:44 +0000
Manifest next update: Tue 03 Mar 2026 16:01:44 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: T9ZI0KNAGAQ7abwxnOdK5grPvVuaKMA2Tx6TKAZEYD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:b9:dc:2e:38:de:b4:8b:a9:40:6f:03:09:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Mar 2 16:01:44 2026 GMT
Not After : Mar 3 16:01:44 2026 GMT
Subject: CN=62204b1d8f5dac0ef84355178b8abbf2b1f02db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:43:8b:01:20:6a:79:43:ef:f6:2e:60:20:
ce:4e:82:ad:19:27:d4:a7:92:04:3d:32:a4:9a:91:
67:47:b5:dc:f4:63:83:ef:4b:ef:3b:06:5b:d5:43:
28:8c:55:70:4a:b0:94:cb:fa:7b:2c:79:27:5c:d4:
70:6a:f8:eb:7c:be:1a:f5:68:27:45:e7:ce:e5:d4:
14:45:ed:59:5f:14:e4:32:ad:43:31:db:41:f5:e3:
18:54:4d:7b:ac:bc:d9:e2:c9:eb:a5:b2:f6:02:f7:
cd:20:96:6b:91:97:64:4f:d8:28:6d:7f:59:86:4b:
77:b0:9d:fc:f7:f9:4f:d3:b2:04:d1:e9:47:b7:de:
b5:be:46:5f:43:ee:8c:2d:fd:e2:6f:62:2f:92:94:
71:bd:96:59:98:55:c5:c8:02:1c:0b:9e:dd:e9:7a:
8b:31:10:11:9d:34:a6:0d:1e:cd:a2:03:53:33:da:
e9:47:29:9b:ce:cc:ec:ab:34:bc:5f:7b:72:7e:c7:
76:39:4e:bd:cf:84:2c:87:07:4a:1f:16:a8:b2:d4:
e7:d7:88:a0:27:cd:65:b0:2d:c0:d3:35:25:2b:e1:
86:02:06:d5:8c:d2:ba:17:e4:9e:28:bc:bc:f2:4c:
92:8b:2f:0a:c7:db:00:d6:0b:75:00:f9:4f:e0:11:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:4B:1D:8F:5D:AC:0E:F8:43:55:17:8B:8A:BB:F2:B1:F0:2D:B3
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1c:9c:8e:8f:1b:6d:c8:65:0a:5b:f4:1b:57:56:23:9f:62:
09:53:54:30:e0:d4:e9:f0:1a:3b:c2:ac:47:ff:d8:24:e2:35:
3e:f3:2a:e9:d0:06:6b:c2:79:da:ba:dd:47:ad:ca:bd:a7:cb:
ad:48:bd:00:ac:6c:35:af:25:8c:ee:87:d1:80:62:ae:2d:e3:
7a:e5:13:8f:2a:da:8e:2e:db:e9:62:5b:0c:5e:ab:c8:c9:7a:
86:c6:1b:77:f8:44:7e:cb:20:f4:e3:b4:93:b4:9f:e5:9f:c9:
4f:a3:b4:c3:de:12:77:be:67:e4:58:e6:93:79:b8:14:0d:e9:
01:14:14:d9:c8:3c:b5:34:6d:b0:ab:e7:d0:48:77:0d:84:cf:
e8:5a:a9:8b:4c:bb:ce:58:00:59:36:28:b6:49:4a:35:c7:fe:
c9:d3:67:a8:c4:bc:5a:0d:fa:7c:f0:dd:fd:1e:69:5f:dd:06:
70:96:32:b6:b1:ef:4f:f2:0f:03:d2:74:76:97:5c:a5:24:5b:
b6:4f:67:53:d6:8a:d9:93:1d:90:e8:72:8f:01:e4:cf:98:64:
b7:48:ae:29:42:25:fe:48:ad:c9:ed:67:0b:11:30:ca:25:d2:
cc:7c:9e:18:cd:e4:55:6e:53:8b:6d:f5:1c:be:f1:f5:e5:6d:
da:9c:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:38 2026 by rpki-client