Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: B3NyPdSdf1eILKrk/98hbJdPiJPs5U4KQ/dVZdmhcMo=
Subject key identifier: FD:02:18:D0:C1:81:1A:10:D0:04:D7:4D:94:55:3F:45:72:55:A9:71
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019D299727C3BCE976A1F30E8F8CC73AE264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 10:01:04 +0000
Manifest this update: Thu 26 Mar 2026 10:01:04 +0000
Manifest next update: Fri 27 Mar 2026 10:01:04 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: oWxMtQiBYgzLB7Iix0K+SjGcJiYG1vDbrGluNEr9hpo=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:27:c3:bc:e9:76:a1:f3:0e:8f:8c:c7:3a:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Mar 26 10:01:04 2026 GMT
Not After : Mar 27 10:01:04 2026 GMT
Subject: CN=fd0218d0c1811a10d004d74d94553f457255a971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:91:98:16:3b:01:e6:fa:51:4a:79:b4:d4:
03:b7:d2:28:32:15:9f:fd:2d:71:a8:3e:00:24:2a:
d7:17:4c:4c:28:90:0e:00:b9:8b:4d:bf:77:0e:62:
41:44:d5:1e:dd:ba:7a:ac:fe:9c:4a:17:df:5d:b9:
97:32:fc:91:7a:e4:e8:9b:9a:cf:10:ea:0d:f4:03:
78:1d:f5:3b:fc:5a:05:5c:a4:b3:34:31:58:ed:50:
4d:27:ea:f3:32:d2:9a:67:f9:14:2e:64:d5:e4:4a:
c5:3e:ae:de:ba:d5:a8:99:8c:84:c1:ad:16:d9:88:
5a:6d:e9:e7:ab:1e:2d:be:af:30:32:e1:29:8a:dc:
3d:bb:22:a4:ab:ad:41:a7:11:44:a6:61:40:be:35:
32:72:ed:42:c0:a1:8d:65:d6:ea:82:d8:eb:5f:6f:
7d:0a:4b:01:ea:38:e6:8a:f0:d0:59:8e:d1:cc:6b:
bd:32:6c:31:bf:f3:1d:ab:fa:bf:7d:74:b5:1f:fa:
3c:44:62:bf:fa:f1:de:56:d3:a8:b4:0c:b3:96:17:
fc:d1:f9:63:c9:97:8f:21:81:a5:c3:25:cf:c7:89:
74:ac:1f:6d:3b:08:87:63:36:d7:79:1f:b3:cf:03:
c3:9e:fb:30:97:97:c9:e1:fc:9d:5c:3f:90:da:86:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:18:D0:C1:81:1A:10:D0:04:D7:4D:94:55:3F:45:72:55:A9:71
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bb:d3:dc:86:bf:56:b9:fa:c7:8b:6e:77:36:ad:66:21:09:
fc:be:4e:ba:d7:57:a8:fc:ac:54:33:34:df:5f:10:a9:23:f6:
23:07:b3:e6:7f:48:13:bc:81:0e:82:60:b4:3f:2d:af:fe:95:
08:e6:3a:4f:03:43:33:9f:a4:01:57:7e:a9:35:8f:e1:67:12:
31:e4:65:a4:dc:60:85:57:bc:fb:98:25:7d:42:f9:64:ba:62:
09:1a:1f:be:fa:67:4b:80:e7:e9:fb:cb:ec:30:d1:65:27:fd:
e1:7f:a8:a4:b6:59:ea:40:84:c4:14:f2:b6:63:57:bb:6f:48:
fd:1a:45:06:72:e5:41:a4:d4:e1:56:a9:85:86:f4:5d:c5:ff:
24:c6:09:0f:a1:20:c9:9b:3f:d1:d5:35:c9:d1:59:2c:ec:12:
85:2f:52:17:b2:30:85:39:4c:9c:8a:6e:3b:b5:ab:c4:59:ad:
b6:ea:35:c3:92:7d:84:26:e4:df:68:74:dc:19:a6:3f:70:14:
3f:67:a6:65:69:a2:59:78:0f:03:51:9d:70:38:06:6c:d7:ee:
9b:ab:af:03:bd:45:dc:37:09:8c:fe:c5:ad:f3:33:b1:57:85:
16:26:5c:57:4b:7e:71:cb:4c:15:ad:d2:17:ed:33:af:a4:03:
ce:44:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:02 2026 by rpki-client