Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: 4JP498z2zjmtvgqej0Dottk22MkfHqNBPWXPdMIHG1s=
Subject key identifier: 17:D6:15:51:55:3F:74:F9:E6:FF:87:D8:FD:6D:CA:6B:99:7A:8F:4E
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 019D277244ED1593F484D0BC5C4ED01781C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 1755
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: Ps/0uiAiAE0ViGZbx6v+2FQDNwe6BzL5KqH7f2uCTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:44:ed:15:93:f4:84:d0:bc:5c:4e:d0:17:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=17d61551553f74f9e6ff87d8fd6dca6b997a8f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:d8:c7:66:d2:f0:42:06:a0:65:39:29:6f:
d5:8e:79:36:34:9f:a2:8e:f0:5f:8e:da:5d:ae:d2:
b9:88:39:9f:01:dd:26:75:8d:18:b9:2b:d1:68:a9:
a0:da:58:e0:b9:41:64:f7:08:a3:c5:80:b7:b3:b6:
3c:fc:26:97:68:85:cb:70:8d:8f:08:63:93:10:31:
fd:48:e4:70:73:41:c7:30:8c:11:e9:3a:f8:5f:79:
21:3a:a8:ce:7d:13:b0:6a:3d:98:d1:7b:e3:a2:ee:
7a:49:0b:ec:78:05:c9:ab:c8:64:0f:fe:50:50:8b:
e1:f3:5b:1e:99:6e:05:55:a9:5a:99:58:f7:0e:ab:
21:30:31:16:52:d5:e0:03:94:3b:01:d7:05:e3:00:
31:47:4e:3d:f6:04:50:c0:91:81:f0:81:b3:4e:38:
4a:94:38:24:f3:bd:68:ea:cf:72:a9:e4:ff:75:9d:
39:88:96:60:c1:f1:46:35:da:8c:21:58:71:dc:5e:
69:64:c2:cc:db:e9:32:d9:f3:50:34:21:9d:34:3a:
98:db:54:08:47:96:c3:6b:69:f9:5b:f3:38:e2:f0:
0e:ad:fd:ae:f3:51:15:41:44:b4:d5:13:08:02:93:
2f:e6:13:df:11:ac:4f:bd:9f:7d:10:23:70:4a:1a:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:15:51:55:3F:74:F9:E6:FF:87:D8:FD:6D:CA:6B:99:7A:8F:4E
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:37:de:b5:42:40:9d:da:8c:cd:4f:91:c7:e5:a2:fd:6c:
76:bb:21:72:d5:a2:1c:e9:20:8b:0f:65:2c:b9:06:51:05:c7:
19:53:85:ec:73:32:9b:8b:50:d6:f4:b7:31:fc:31:a1:95:87:
31:46:a8:7f:45:36:b5:a2:f8:52:74:71:60:8b:13:81:22:a5:
f4:6a:5b:0e:dd:f1:db:c4:68:4f:f6:fa:76:96:e2:2d:0a:96:
63:ce:ae:a4:4f:7c:bc:b9:6e:e2:fb:c8:48:08:95:d9:1e:1e:
46:e1:ba:3c:4e:27:33:50:92:39:c6:5b:ba:03:e4:22:51:0f:
7d:5f:d3:d1:03:af:5d:80:58:03:3e:f9:4c:39:bf:81:f5:c3:
35:72:86:c1:6e:61:e6:c4:c0:5e:95:59:71:06:83:9e:c2:69:
85:68:85:2d:b6:2d:7d:ad:6d:ec:ad:d4:32:e6:0f:e4:8b:aa:
04:5a:14:75:39:cc:5d:2a:6d:ec:e0:e0:cf:20:92:51:58:e3:
a6:d6:1b:d1:d5:ef:fd:f1:24:98:a8:45:92:64:58:2f:1d:44:
c5:4b:88:64:36:3c:ab:59:4a:9b:0a:b5:19:1e:23:7b:a5:a2:
db:87:88:83:fb:e6:97:34:7d:bf:05:bb:b4:b0:4e:63:13:ca:
2b:91:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:43 2026 by rpki-client