Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: Dqo8VYQvmaQ9k7IXy5rmYaRZdJhYjoyucSLvyQKpA5M=
Subject key identifier: 25:C5:11:1D:AB:5C:9D:FD:9E:45:5B:3E:57:B6:08:97:C6:DE:40:3F
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019D26962F123FCD8C93A24BA75AB6D7A5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 0824
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: C2QirCSNzHEVOx595AYBgWsaXCeuInQd0qqHYmYuxHU=)
2: tWUs5_OoSfOVpkRE9FrQnWN345I.roa (hash: Ik3wfYejmGeFJTK3ER8Y42u6+FSgfq4mC824weZ/UdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2f:12:3f:cd:8c:93:a2:4b:a7:5a:b6:d7:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=25c5111dab5c9dfd9e455b3e57b60897c6de403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:62:be:64:4e:cf:c0:89:71:47:2e:40:8e:
41:5c:19:ea:51:02:73:5d:06:1b:78:5b:a7:33:c8:
b6:26:06:1b:e1:d4:ac:a2:90:3d:bc:ee:1a:05:66:
1f:5f:00:6d:16:74:09:01:d5:0c:fa:75:77:af:74:
70:ad:b8:be:1b:3c:0d:4a:4b:a3:00:88:f9:f1:69:
f8:36:65:a6:2a:24:12:cc:cd:bc:00:dc:b1:47:73:
6a:b1:7e:4e:0f:23:9a:5c:1c:bc:6e:b8:79:e1:e0:
96:e9:52:0a:65:66:1f:fe:1d:e1:e4:c2:bb:f0:64:
76:f5:60:3d:d3:06:1e:cd:1e:65:6a:52:92:4a:ea:
97:e0:cf:9c:78:eb:e8:c2:0b:b8:d7:65:75:99:a9:
fb:7a:e6:7f:75:6e:9b:3a:6c:ca:2c:67:91:4c:7d:
09:5f:b8:4c:d9:65:3a:be:7e:13:be:c6:8f:b8:db:
32:62:a8:1a:1e:0e:d8:24:da:6a:02:01:ba:88:31:
50:ec:ba:97:ed:77:ff:d8:02:28:ea:8a:bc:be:f8:
58:18:38:43:1e:ac:10:f3:dc:3b:4e:c6:a1:09:e7:
8d:94:f7:87:6a:7f:8b:f5:4d:5d:17:d8:c1:d1:59:
68:34:f9:04:b5:0a:66:3d:f3:bc:c9:57:46:27:5c:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:11:1D:AB:5C:9D:FD:9E:45:5B:3E:57:B6:08:97:C6:DE:40:3F
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:34:e5:e7:b4:b4:ba:ee:ed:b9:2f:82:67:94:5e:3e:cf:16:
d5:6c:74:9a:6f:44:b5:2d:7e:95:25:dc:c9:a4:6d:85:99:0c:
c3:a7:50:a9:6a:f8:97:6f:da:9c:d5:74:ed:99:e8:f9:f2:2f:
e7:2c:52:e6:13:4d:df:9a:64:b0:34:48:d8:36:9f:7c:12:d1:
91:89:ac:6d:39:87:53:e1:ed:cd:1c:53:5e:9e:16:24:3a:3b:
7e:05:42:dd:2a:b9:78:f8:35:78:8f:97:3f:e6:24:5f:4d:88:
e3:16:a2:bc:e4:f3:01:a0:ed:28:71:e7:14:f8:dc:2d:2e:1e:
c6:27:f4:16:62:fd:5b:28:32:46:9e:ee:21:92:6a:e5:51:20:
95:33:c1:29:2d:f6:eb:47:2c:af:cb:c4:5d:e1:92:05:95:11:
d7:03:97:fe:d2:f5:11:ff:aa:cc:7e:aa:e8:27:87:33:50:45:
6e:23:72:97:c4:3e:db:01:4f:fa:76:2a:b6:59:f3:7d:4d:97:
ea:9d:45:14:b7:30:5a:f7:f2:17:5d:b9:db:17:6d:1c:72:bb:
d8:6e:1e:40:61:80:b7:b2:ba:ab:a9:30:6f:2e:73:4a:a3:80:
02:43:73:5d:08:83:9a:41:79:42:7a:77:51:4b:9f:e3:76:b7:
8f:66:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client