
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: q9fYisK8m5CJSUPCJ2jMzOQj72AigqB3oToD15WJ+EE=
Subject key identifier: F3:6D:34:CA:54:23:D1:77:D8:F9:5C:5E:3D:E8:F9:DC:E3:7B:13:C0
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019D27A8AA0278EAB64EA6087C399AEA9D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0F90
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: n7ObfEVEGa/NT3VblngGVOPWZj1T2dX65Cx83HT8iLU=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:aa:02:78:ea:b6:4e:a6:08:7c:39:9a:ea:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=f36d34ca5423d177d8f95c5e3de8f9dce37b13c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:88:54:b4:07:24:ea:00:5b:29:73:c8:90:
6d:c0:42:72:86:14:7f:be:24:b6:d0:e7:85:25:e0:
1d:27:fa:ac:07:7d:5b:5d:a2:14:08:bd:fc:c3:be:
8f:39:19:0c:5f:cb:56:20:7a:ef:0c:9a:e2:0d:f0:
17:f5:00:55:56:60:0c:66:e2:15:c4:ca:cc:e9:15:
23:11:44:f4:5b:86:26:a0:4a:e5:62:e6:6c:8e:d6:
35:06:7a:61:7d:58:da:0a:9a:64:dc:52:b0:02:54:
74:33:1b:95:23:17:ee:97:5f:fc:00:f7:e2:48:03:
85:e5:ec:e4:c9:e7:39:4a:04:34:a0:cd:97:99:9b:
b8:84:2b:7d:25:2d:1e:ad:7d:e3:25:d7:d8:be:3d:
7f:d7:c5:b9:d8:52:78:9b:c8:81:2d:5d:6b:29:2f:
01:1a:de:3a:e3:8a:c6:90:2b:86:87:3e:e5:a8:89:
2e:7c:19:42:49:cf:43:0f:6c:8b:56:f7:49:ea:68:
f8:06:5e:b0:f2:3c:86:5a:f5:f4:b6:90:61:a4:7f:
c7:8e:95:d8:28:dc:22:d3:77:b9:ba:c6:ed:3e:76:
2a:e1:07:73:25:91:4d:cc:89:5c:2f:b3:34:21:12:
d6:9c:be:84:58:6c:d7:b6:df:65:25:f7:a3:81:06:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6D:34:CA:54:23:D1:77:D8:F9:5C:5E:3D:E8:F9:DC:E3:7B:13:C0
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:39:29:11:c4:39:fd:f8:b6:be:c1:b9:29:3d:57:4f:fa:42:
36:ed:a7:8d:68:72:d5:45:c3:4f:b2:1a:0d:6d:18:b4:78:f6:
69:1d:2c:52:f9:ff:2f:f5:d6:82:7d:d3:8d:e5:d5:a2:c2:a5:
85:2e:68:88:f2:de:58:10:1e:7f:f3:47:b4:39:01:aa:85:50:
93:b0:61:ca:85:fd:1b:bd:cc:21:69:01:15:c5:43:38:a1:4d:
6b:75:61:36:f4:f3:35:fb:dc:a7:5d:ea:df:88:15:ce:20:ee:
56:de:2f:0a:e6:78:52:59:ce:87:cb:7f:93:aa:91:d4:c0:f8:
47:d8:73:72:b4:89:a9:90:19:67:3e:f5:d1:17:d7:97:c4:f8:
72:9c:38:0e:3d:9f:72:0a:5c:e7:79:3f:00:b9:8d:c2:c5:f7:
af:86:2e:4c:71:c2:be:a1:ad:28:ad:29:e0:54:42:e9:9b:84:
ba:9f:f9:b8:24:ad:0d:5f:65:3e:d4:73:15:e3:ac:b8:1a:7a:
c3:d4:99:5b:b3:75:5c:f4:9e:8f:af:91:69:86:a2:d4:a4:5b:
5e:b9:5b:e8:c4:9b:9a:e0:4e:f7:64:e7:29:59:69:ce:d5:66:
b3:5f:b4:95:c4:c3:60:21:ce:2a:f1:ab:bf:1a:e6:55:f0:a9:
e4:08:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:00 2026 by rpki-client