Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: OKQBLmdf3prK6g7Ya9IhggscoCze2r6yIiAuv7Isf3g=
Subject key identifier: CE:D1:40:7E:65:A3:35:B0:7A:57:54:B0:C0:F4:A1:A5:0A:24:1B:37
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 019D27E0530B4C44882AC4E9AD98C14B366A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: eFIy406BgPFyYBRZn0OuOh+pU3SXEMU1EkKFXgPX0do=)
2: gzR8azEl4wcKru5enQWHMrN0j30.roa (hash: bAZA0ZtvqfxWtuunPZUhJQgUIWIvjRpShcnV9aNKnnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:53:0b:4c:44:88:2a:c4:e9:ad:98:c1:4b:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=ced1407e65a335b07a5754b0c0f4a1a50a241b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:d1:2b:08:a0:20:05:5a:aa:65:52:f2:bb:
f1:56:6a:9e:f0:52:2a:27:5a:b3:c6:60:7d:88:15:
17:6a:cd:eb:e1:8c:11:94:35:87:3c:2e:5f:3e:49:
69:81:b8:e0:b9:9d:86:04:43:b0:51:37:be:d0:80:
6c:9d:de:22:0f:50:1e:4e:f7:70:76:fe:30:d6:ef:
1c:fa:ca:c3:f2:4d:60:2b:dd:5d:f5:dd:23:00:5f:
02:a9:71:c3:7f:b7:86:51:76:42:be:07:1d:7f:d9:
aa:ec:3a:f9:ec:7a:c2:08:9e:ca:58:ab:27:35:d8:
97:7b:36:eb:d2:91:db:df:e1:33:65:73:5e:f7:17:
c4:9c:2c:f3:16:69:d3:2b:a5:19:64:69:7d:dd:e7:
3d:c0:2c:32:f3:51:99:d0:7b:46:28:3b:e1:7d:c3:
77:72:56:5a:01:96:4e:0b:17:96:81:82:d4:2e:93:
42:6f:09:e8:69:59:01:29:4d:ed:25:af:fa:0b:91:
3f:70:ab:87:2e:a0:0e:4b:de:f2:10:62:80:e8:43:
34:01:e3:14:33:27:4c:7c:7e:db:37:8c:f9:36:ed:
d0:02:b4:3b:d9:78:f7:60:f5:21:88:c1:db:c3:7e:
8d:9e:d4:de:6b:4a:3a:06:f3:e1:7b:ab:14:19:cd:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:40:7E:65:A3:35:B0:7A:57:54:B0:C0:F4:A1:A5:0A:24:1B:37
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:85:84:a4:90:24:9a:ea:93:95:c2:32:4f:b3:67:a2:ec:b3:
25:d1:29:2f:cd:2a:7b:26:50:c8:d8:be:b2:28:e7:6d:6a:d7:
de:75:12:80:db:e6:6b:55:35:cd:a1:ee:10:86:3b:b1:64:31:
9a:b1:1c:38:1a:c8:10:1f:d5:a3:ef:35:03:ef:15:e2:df:a2:
11:68:5c:68:55:0e:b1:f1:f6:37:ee:a0:40:87:24:6e:e8:06:
ab:c7:57:34:28:84:b5:e5:5b:70:b0:4b:b1:67:ea:2b:62:8d:
5e:27:d4:bb:57:5b:6d:95:04:60:a3:87:9b:6e:09:da:09:be:
91:4d:43:28:10:b7:bd:7d:ed:68:1f:0b:53:60:8e:c7:02:eb:
62:aa:5e:df:78:ff:65:06:89:2a:71:7e:fc:4e:6b:e8:ec:53:
63:d9:ea:76:9c:0a:ea:5b:49:02:1f:ca:5d:d2:70:01:c4:9d:
34:5e:91:45:16:34:a9:a5:02:67:de:d5:b9:b8:18:da:c3:d3:
26:b4:f8:09:ea:39:11:c2:d7:88:35:e1:25:b3:ed:95:5d:6e:
98:22:1d:a9:a9:1a:41:b3:77:8e:8f:ec:9a:eb:84:6f:c8:30:
62:d4:2c:f1:37:09:0a:81:6f:bc:c2:01:4e:31:55:d0:bf:e5:
ee:f1:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:58 2026 by rpki-client