Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: tGzQLFXa2Nv8TIHhs6SwoaYT6g9D0lzt3+/mX+ASDsE=
Subject key identifier: 22:00:E9:18:74:75:C5:55:EF:81:41:53:67:E4:E5:37:60:80:E4:18
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 019D299739F52E781FBDA5A48925A2D94445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:01:09 +0000
Manifest this update: Thu 26 Mar 2026 10:01:09 +0000
Manifest next update: Fri 27 Mar 2026 10:01:09 +0000
Files and hashes: 1: 5ISKJbp4rbTdCWF2uAdFb5yPoJI.roa (hash: OH5/o4eCRTtPdgmEfAYqQLH3iOBiZD4gNNNHJ0XoTvs=)
2: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: E2BGjkhqlf0OCQltOeTLiyY/LCeLjqeBdIfu8Df4vUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:39:f5:2e:78:1f:bd:a5:a4:89:25:a2:d9:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Mar 26 10:01:09 2026 GMT
Not After : Mar 27 10:01:09 2026 GMT
Subject: CN=2200e9187475c555ef81415367e4e5376080e418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:11:9d:7d:f4:a4:49:ed:4c:32:e7:73:70:
36:ef:0e:cb:fa:0a:be:dc:0a:7a:94:e8:eb:7a:d5:
14:6e:dc:8d:bd:ad:3b:24:b4:97:df:10:9f:75:8c:
30:bd:05:89:7a:8b:76:7c:70:0d:9b:e0:17:65:1e:
83:cd:00:14:fa:55:d6:fc:66:32:29:91:c6:01:18:
60:30:01:b6:70:cf:69:b5:75:2a:2e:46:0d:aa:d8:
e3:4c:7e:b2:af:df:63:03:d4:66:d8:d9:90:7a:8e:
d4:2d:56:3a:39:00:37:d1:32:4d:16:27:a0:14:d1:
b6:ca:c3:d3:c0:2b:44:c7:16:b6:1d:f8:de:31:fc:
11:a1:11:92:44:68:58:b2:c3:85:6c:ae:f5:68:5b:
fa:1b:7c:0b:8b:59:51:0d:9a:94:eb:8e:c8:2e:9e:
00:85:3e:57:61:7e:c1:3b:9d:12:c1:64:34:57:29:
b9:53:43:a2:09:2b:92:69:fc:97:46:31:83:44:71:
31:7d:6e:a4:e0:ca:0b:3a:63:a7:2f:07:31:07:b3:
08:e3:97:95:cb:f5:6d:5a:e8:79:5a:1d:6e:71:94:
56:79:3e:b4:bb:c4:87:d1:01:27:2c:90:16:da:fd:
07:c4:f5:24:4e:71:c5:0f:98:53:51:0c:54:3f:1d:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:E9:18:74:75:C5:55:EF:81:41:53:67:E4:E5:37:60:80:E4:18
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3e:84:a4:79:7a:49:37:f3:0d:bd:b4:e8:a3:da:3c:91:78:
61:c0:fb:8c:50:8b:b8:cf:f5:d6:0e:81:e6:9e:80:08:47:af:
7a:4b:6c:b0:04:2a:0d:dd:1d:5b:b0:37:1a:b0:5e:95:1e:a5:
ad:fd:eb:1b:be:f6:04:fe:04:2b:e8:95:0f:2b:b1:e3:ff:9c:
17:70:a0:f3:98:54:5e:0c:cd:44:3b:27:47:30:ea:9e:91:c8:
ea:d6:88:17:66:af:a1:6b:55:ef:28:08:a2:f0:60:24:c5:32:
d0:56:0f:ae:46:ce:fe:46:7b:af:fd:77:ff:c0:ec:46:78:c8:
0c:7d:b5:e1:d2:f8:1a:aa:06:a1:53:b0:6c:76:31:44:d9:99:
80:92:79:4d:cd:5f:29:d1:48:f0:22:f8:ba:39:f0:5f:1f:b7:
22:27:fc:24:82:44:14:11:2f:e2:68:fb:bf:1a:bf:1f:a2:55:
18:f5:09:e8:24:8c:2c:f5:dd:b5:8c:03:36:74:4a:dc:3b:e4:
dc:b5:4b:4e:23:23:c6:52:db:d0:49:c3:14:a2:e8:c6:64:5f:
52:46:9d:ee:e6:aa:d4:9c:49:b1:ce:be:52:57:1f:27:f5:5d:
a4:ef:2c:be:f7:bd:ac:f9:05:ae:66:bf:b3:69:f8:84:6f:e1:
f4:03:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:21 2026 by rpki-client