Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: 0YBDxLP6BHHiw+yinT5x2DWdDysu7YsjQiKcLMVmwA0=
Subject key identifier: 98:9D:EA:5A:9A:C7:B1:5B:AE:34:C9:43:D4:E7:07:C8:FF:16:96:97
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 019D292920995EC3A984C45DC981BB066724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 01AD
Signing time: Thu 26 Mar 2026 08:00:54 +0000
Manifest this update: Thu 26 Mar 2026 08:00:54 +0000
Manifest next update: Fri 27 Mar 2026 08:00:54 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: ZOb3s+aDMavD4v6iJg3kVt4HYsMPIbzZc5/RYUg4FTg=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:20:99:5e:c3:a9:84:c4:5d:c9:81:bb:06:67:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Mar 26 08:00:54 2026 GMT
Not After : Mar 27 08:00:54 2026 GMT
Subject: CN=989dea5a9ac7b15bae34c943d4e707c8ff169697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:48:6f:f3:04:26:49:4b:29:31:10:9a:3b:
50:dd:e3:4f:19:37:68:66:ef:e9:0d:a0:dd:6e:cd:
cf:44:4d:23:9b:8e:61:91:1d:a3:fc:00:d2:ec:74:
65:d2:21:e8:76:49:8e:c9:1d:1b:45:61:ea:5c:2b:
96:b6:d4:73:1b:80:06:02:20:1f:af:a2:ec:50:06:
66:86:af:19:5b:b0:65:d9:b4:59:df:ca:55:4e:d1:
5e:20:38:77:13:e8:85:ac:4b:cb:c8:ec:7a:38:06:
be:e6:4e:c2:50:c7:40:5e:d3:26:54:24:80:e5:2f:
86:5b:bb:71:3d:f7:19:38:45:85:22:71:b0:d2:41:
0b:75:49:68:18:fd:3d:f9:24:dd:e0:a7:aa:04:be:
58:a2:cd:cd:c1:0a:cb:61:8f:33:e6:06:45:2f:29:
ba:38:67:60:0b:2e:bb:a2:99:e4:ba:be:6a:b8:32:
e5:05:21:e9:e5:be:72:ff:fc:3b:21:d2:f6:c7:29:
d1:7d:ee:8c:2a:5b:95:b8:7c:91:a0:11:85:00:d5:
7b:5a:c4:f0:0c:d2:b2:82:72:05:88:dd:7e:63:47:
e2:dc:74:9f:70:47:9d:05:a8:55:52:cc:f6:f1:ff:
36:3a:06:61:40:27:78:f6:90:8e:2f:ac:93:b9:c5:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:EA:5A:9A:C7:B1:5B:AE:34:C9:43:D4:E7:07:C8:FF:16:96:97
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:15:0e:49:79:e9:73:b6:f2:b8:33:7d:21:03:2f:8b:6c:af:
5b:7c:06:4e:fb:3c:91:66:10:a2:e5:8b:c3:fd:dc:2f:6c:32:
33:d7:ad:4a:a5:64:34:34:0a:ef:04:1b:50:f5:5f:bb:2e:95:
55:71:7e:66:28:c2:1e:be:f1:12:0c:d9:57:df:84:4d:2b:58:
4e:88:cf:2d:18:cd:38:c6:2d:3c:08:44:eb:ee:7f:b3:97:d0:
34:91:24:9e:ef:af:e3:1e:96:0c:f3:91:e9:e4:bc:ad:b9:43:
1a:d0:ce:37:e2:a6:08:3d:c3:dd:f0:78:06:ef:30:30:45:67:
cd:1e:ac:7f:2a:11:fc:7e:41:fa:45:4a:b8:9e:25:d9:cf:3a:
fe:4f:e8:d1:22:ad:a8:3f:80:ba:aa:4b:46:7c:af:3c:04:fe:
48:fa:e3:5e:f3:77:07:bc:28:73:d5:e2:78:0d:ed:47:e1:d8:
52:2a:fa:df:be:d2:57:2f:91:04:8b:fc:c6:ce:f2:c5:15:6a:
bb:8c:1c:3d:c0:45:2d:6e:fc:91:9f:51:d3:6c:3f:73:33:44:
d0:b8:26:dd:ba:cc:08:a4:70:29:cd:7f:75:01:b1:ab:95:44:
21:c7:d9:c9:89:2d:9c:f3:30:17:e4:f7:2b:89:7a:ad:64:55:
6b:78:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:32:01 2026 by rpki-client