Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: KzTMuPanVef4nQgcNdzllUuJfoiKhRyCR0ldjMtVlOE=
Subject key identifier: 70:6D:5E:AC:B5:4E:B9:33:20:1B:93:69:A4:5E:19:51:7B:D4:A5:0E
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019D2695BC696F677FFAAB968B9E952EBD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0ACF
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: gU6U60iJIniI8JxPuQmJGYW780Bvc1IM56WENgMAzDA=)
2: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (hash: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bc:69:6f:67:7f:fa:ab:96:8b:9e:95:2e:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=706d5eacb54eb933201b9369a45e19517bd4a50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:d6:9f:b7:c9:a6:44:e3:69:bd:4f:9f:2c:
4f:c8:b9:25:76:db:c4:bd:ca:c6:8b:8c:ac:51:f7:
6e:e9:88:7e:fc:c1:49:47:54:e2:8b:a6:59:1e:9e:
8f:1f:46:dd:f7:48:29:9c:09:8f:4d:cb:d6:a8:ac:
66:3a:9b:64:2b:0a:ff:11:8a:0a:99:0a:34:4e:30:
bb:54:2a:a2:e3:24:24:b3:68:f2:01:1e:11:98:41:
43:a1:f7:dd:8f:c6:d0:26:88:27:7b:31:4f:af:19:
bd:84:0e:44:e8:b1:69:7e:60:1c:ea:7c:b3:93:99:
ae:ce:65:ef:93:0e:e0:e5:7b:72:76:a2:39:8e:07:
85:17:d3:cd:bb:6c:3f:3d:1f:bc:7c:ad:77:34:7f:
60:4c:46:6a:11:02:03:56:d9:c7:5c:80:79:32:26:
13:79:b0:27:75:c2:8b:c4:f3:d3:23:15:af:53:72:
f2:d2:cf:be:ef:ec:4a:e6:78:25:75:8a:b2:a7:82:
b7:a8:b9:38:91:1a:c9:0d:a2:d7:dd:39:23:17:ef:
49:6b:ab:bf:c5:ee:9e:6e:52:db:47:1e:75:5b:81:
50:cd:1d:53:2b:58:a4:6d:04:40:a9:46:91:12:03:
a9:c6:ce:8f:45:82:09:18:9f:43:2b:a3:3d:7c:9b:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:5E:AC:B5:4E:B9:33:20:1B:93:69:A4:5E:19:51:7B:D4:A5:0E
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:09:34:2e:3b:a5:0d:e3:11:50:23:58:ab:2e:ec:fd:37:
a7:5c:d8:84:ae:94:ff:09:ff:f0:1e:8b:a8:b2:7f:bc:22:0e:
75:92:b3:54:10:03:8f:f1:3e:26:b1:28:46:bb:6e:9e:01:7f:
44:92:12:3e:93:38:2c:74:9d:6b:a0:36:50:f5:a2:74:8b:c6:
9f:65:b9:00:12:4c:a2:b2:4d:bb:26:78:06:79:db:7d:5d:39:
8c:7c:b8:72:26:6e:9a:d1:de:98:22:08:55:47:a8:6d:41:75:
a5:6d:5a:67:6a:d5:8f:a6:24:1d:b7:ae:a8:7a:16:5c:c5:20:
11:ff:b7:90:fb:56:bf:32:33:c9:e6:15:5e:9a:29:38:b9:04:
a7:21:d4:b4:94:9c:c1:52:24:25:69:db:25:a1:5a:a1:2d:ab:
9d:5a:24:2a:39:e6:01:56:05:76:87:9a:1f:c5:38:46:9f:c2:
b7:4f:98:a2:73:95:7f:48:f0:9f:71:56:82:78:e4:05:a0:68:
0f:21:a4:99:97:df:33:d0:53:8c:5c:0b:49:bf:1a:76:35:ba:
8d:55:87:05:31:1f:31:d3:ed:28:7a:d5:a1:da:36:00:c5:cb:
cf:30:d5:80:5c:05:b0:23:ac:e3:b3:0f:d3:67:9c:fb:b5:82:
2d:1e:6c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:07 2026 by rpki-client