Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: 6tGstFHpTrrk4zS4bCp2qx8Geh2HF8dgG2EIJ7uRIJY=
Subject key identifier: 6F:56:D5:AE:98:0C:6E:53:82:54:B9:75:B7:16:94:1C:0D:F2:5E:B9
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019D2884B9F3E833DCC013FB62E3E748DE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 018F
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: 8u+MBIoeFZ3UoF5kTdXEePcMezAJrWyJg4Pu5VLskRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b9:f3:e8:33:dc:c0:13:fb:62:e3:e7:48:de:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=6f56d5ae980c6e538254b975b716941c0df25eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:d3:46:95:8b:1f:e3:b8:5c:2c:9b:0f:38:
fe:8d:0a:70:b9:f1:06:c0:06:a5:c7:9a:0e:9e:01:
22:03:7a:84:94:24:d6:07:8b:f5:ce:5d:18:77:c2:
22:dc:14:ef:d2:f3:3a:b9:4b:42:01:f4:eb:c3:81:
46:22:40:0c:22:cd:28:c0:66:02:23:51:b9:2a:5a:
91:91:2f:9c:3d:8a:a3:38:5b:c2:c8:7b:77:fa:46:
cc:f6:31:d3:3a:09:74:5e:22:e9:c6:eb:cd:df:f9:
83:80:58:71:8f:13:90:9a:bd:ca:71:86:31:fd:0b:
96:a1:92:8e:ad:9e:83:9b:75:a0:16:60:9f:c4:5a:
25:a4:2f:31:fe:cb:48:08:01:4b:09:0c:4d:81:34:
1f:b5:be:da:39:0e:72:57:64:ec:6c:06:b1:c6:15:
00:bf:c1:4a:67:c3:74:53:b3:54:56:ca:07:0e:85:
9f:0b:33:75:58:5f:66:62:9f:bc:51:6a:42:4f:80:
94:a4:e5:b8:64:f3:66:34:ba:b2:12:22:95:db:14:
9a:26:24:d5:17:d8:b9:4c:db:ae:0a:38:22:87:64:
0e:74:3d:36:48:95:79:f7:6f:39:18:6f:29:a3:5c:
3c:1d:c3:53:4a:63:87:6d:8b:f5:8d:96:0c:eb:95:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:D5:AE:98:0C:6E:53:82:54:B9:75:B7:16:94:1C:0D:F2:5E:B9
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:0f:97:62:95:83:48:fa:69:78:46:fa:8b:2a:97:e7:c6:
72:54:b6:1a:38:f4:2a:3c:ce:4a:f3:95:f6:06:98:96:ab:1b:
ff:3c:63:55:e6:5f:bc:d5:8b:62:42:cd:32:f6:3d:5f:db:6c:
1a:4e:0f:4c:ed:f3:b6:f3:29:b1:c5:4e:bf:b0:2e:18:b2:8d:
2c:de:5a:08:94:0a:a8:e3:7d:d7:bc:80:f0:a5:03:3c:e0:76:
5a:a6:b9:46:10:dd:27:f5:e5:28:0b:d2:ef:f0:0a:e9:2e:9c:
db:83:c5:7d:5d:5c:99:6b:1b:d3:d2:2e:ab:36:86:93:9d:9d:
dc:47:31:0c:d7:4e:9b:dd:e8:e1:b5:a6:ef:9a:2b:02:31:3b:
9f:de:40:fd:dc:71:94:de:f8:6b:a5:8c:8f:bc:98:8a:6b:3b:
2d:f6:77:f2:64:71:0f:4c:80:bb:93:05:b2:6e:59:ad:b6:81:
17:65:ad:d9:c8:69:9a:7a:7f:47:dc:34:d3:7c:79:7c:e5:22:
2a:44:3d:55:ee:fa:ee:e0:d6:a2:d5:88:73:32:34:2a:ce:3b:
7e:55:dc:91:c3:b4:30:a5:a3:b5:48:22:af:20:f1:75:9c:67:
c6:48:1f:71:31:ae:40:07:35:d7:b0:a1:b0:4f:f0:2e:25:3f:
0b:ab:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:38 2026 by rpki-client