Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: CPIJzLMZ5324V/f4vXtm0iz0KdzanZYVOnoJXhNXCm8=
Subject key identifier: 45:9A:E4:A1:83:8F:CE:60:27:5E:3D:1D:F2:B3:14:9F:8C:30:2D:94
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 019D258431FA18BD038ECD5C3D4AE0E1D2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:53 +0000
Manifest this update: Wed 25 Mar 2026 15:01:53 +0000
Manifest next update: Thu 26 Mar 2026 15:01:53 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: AvljofAD8jumUTTiMyFfTysqvJCYxO6Nl8gsmwBOQEk=)
2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:31:fa:18:bd:03:8e:cd:5c:3d:4a:e0:e1:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Mar 25 15:01:53 2026 GMT
Not After : Mar 26 15:01:53 2026 GMT
Subject: CN=459ae4a1838fce60275e3d1df2b3149f8c302d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:e4:59:dc:b6:89:24:59:d9:5d:68:ce:7a:
b5:87:f1:76:09:3b:d3:ef:56:29:6c:8a:ff:03:c3:
98:00:d3:ca:4f:3d:d6:21:ee:52:07:55:d8:fc:69:
60:70:9c:4e:29:22:fa:89:08:d4:b3:e4:15:9d:b6:
97:8c:83:32:58:87:14:b6:ee:f5:9a:0f:b1:38:e0:
31:0c:58:7f:c3:67:3e:ca:1a:6e:48:7e:ad:47:36:
84:46:b9:db:b2:3d:d5:4b:a6:1b:98:0c:1e:23:18:
87:2f:65:80:78:9a:d4:3a:e9:ce:7e:9e:86:cd:7d:
4a:e8:02:a7:9a:c3:bd:9d:43:a2:5c:48:65:ce:88:
7b:ec:1c:61:2c:d2:cd:24:6f:71:8b:47:30:3d:3d:
10:20:2f:ac:02:57:47:4b:5c:62:78:8c:26:7d:ac:
a8:53:cb:31:cf:64:03:0a:ae:7c:6e:2d:36:d0:b7:
ac:07:00:cd:31:06:fc:13:5b:e3:1b:b8:58:09:8e:
34:2b:b1:ec:12:2e:65:cc:77:8e:f7:5d:3c:cf:f4:
02:bd:b3:3f:b0:c2:dd:cd:a4:8f:d8:d1:98:bc:d7:
2f:3b:b9:01:b7:16:76:95:e0:63:8d:c3:cf:01:7e:
da:a8:d8:aa:2a:4d:0c:3c:c6:f8:15:78:c7:a7:c5:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:E4:A1:83:8F:CE:60:27:5E:3D:1D:F2:B3:14:9F:8C:30:2D:94
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:1b:5e:6a:9e:f5:f3:f5:37:ae:4e:b8:81:4c:f6:d7:4e:
37:7d:d3:da:40:64:0f:70:00:14:3b:1c:67:36:61:ab:ea:d4:
67:fd:35:32:b5:b6:08:cc:b0:f8:fd:52:af:91:aa:43:2c:5f:
b6:a8:48:27:e4:2b:55:42:84:de:3e:66:26:a2:42:e5:ab:f3:
52:58:90:02:c9:f8:29:42:79:67:94:e9:51:42:67:ac:75:1d:
f2:b0:b8:19:a8:27:8a:e8:9c:c2:bc:18:bb:dd:0f:6b:ab:02:
72:fa:08:2d:91:f2:0e:99:ce:0d:11:d5:4d:25:24:12:70:87:
d4:a8:76:a3:ab:b9:89:26:03:e9:df:34:2f:5a:b5:8d:42:b0:
e1:cc:21:41:35:de:1a:9c:97:ba:ac:41:94:a4:fd:6b:a7:bf:
b0:87:ab:62:77:2b:5d:83:1a:89:c4:c6:f2:07:fe:69:55:15:
fd:ba:ca:a1:d1:ea:8c:a5:6e:64:51:73:4f:c4:5b:e8:76:47:
4c:7d:1c:e4:9a:8b:d2:84:04:26:ee:c2:f8:c9:01:e8:b5:31:
00:13:38:94:46:7c:51:54:dc:80:1a:f7:5c:75:0a:9b:bc:4e:
3e:75:33:bc:60:5c:1b:d2:43:0f:02:e0:a8:fe:e4:77:4e:28:
05:b3:c5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:14 2026 by rpki-client