Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: HNyXELow9mEztmnSyWtBeGYsqDVJNCNg3UUWGSGDHMs=
Subject key identifier: D9:5B:FE:37:5E:56:CF:65:E0:49:21:99:16:1E:56:94:80:86:57:61
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019D2884484010C124942845033D283ED968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 1532
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: UNRUcXt+npOuCbQ81Ge8wdEX9Y4uN0D44HbtLFfQB0k=)
2: KarebT1i131F1F0b_jruzSe1lHY.roa (hash: UoRIjXeKvZYwlceblJKfWjA69FlQT++n1NlR0R55ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:48:40:10:c1:24:94:28:45:03:3d:28:3e:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=d95bfe375e56cf65e0492199161e569480865761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:a6:f4:2b:2f:ec:8e:f6:d7:d2:13:48:4d:
70:31:1d:85:21:d2:eb:93:d6:c1:de:b4:ba:10:04:
ab:fd:9a:90:df:bb:45:40:93:14:58:b5:de:67:b4:
51:4a:fb:4d:1c:bd:7a:5b:0b:79:f0:89:4d:a9:26:
78:45:23:ed:17:b5:f8:f4:2a:8b:fc:57:81:68:16:
93:bb:fe:d4:77:79:2a:6b:a3:b2:95:5e:df:98:cc:
7b:51:09:60:ef:bd:35:64:71:7f:c2:fb:54:42:d1:
1b:58:55:4c:86:e4:29:da:9b:7c:77:53:f5:5a:81:
db:d2:e5:d7:86:56:58:90:9d:15:f9:c9:53:8e:08:
39:e0:20:8c:a2:6c:95:37:df:14:a6:a7:45:13:da:
55:bb:77:38:44:a6:bc:48:a6:39:67:1b:36:ac:19:
b5:87:e0:2d:37:28:d6:ad:f0:7c:6a:91:8a:a5:2c:
8b:d4:8e:cc:cb:6f:a7:6e:6d:38:f4:66:9c:6e:4f:
d4:ba:53:90:8b:5e:6b:8a:f0:0c:28:c7:e6:29:72:
bb:ae:87:34:bc:7e:c1:5b:c4:3a:d9:78:d9:14:63:
45:cf:84:c4:56:d5:a6:24:71:f0:03:fb:03:e5:2d:
0d:a2:3d:ef:46:94:bf:e9:a7:dd:60:a6:47:c0:59:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:FE:37:5E:56:CF:65:E0:49:21:99:16:1E:56:94:80:86:57:61
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:a7:81:cd:7d:48:89:9e:cf:63:0d:95:25:f9:a3:8b:b4:
25:6f:d6:70:13:48:3f:e5:1f:a7:ad:f3:f1:e8:92:54:64:25:
e2:c3:19:dd:e2:27:5c:2b:00:88:b8:51:fe:84:ba:9d:82:46:
67:a5:55:3b:a0:a1:70:48:ba:29:1b:d5:5a:61:16:f6:74:d5:
2c:15:1d:aa:aa:f9:09:23:6f:2c:ba:45:5c:ad:07:c3:59:4f:
bc:d6:e0:9c:5c:f9:5b:15:51:7a:4a:35:06:b1:b8:8a:23:99:
cc:c1:3d:da:4b:35:2f:89:d2:d6:3b:64:1e:64:ed:6d:ea:dd:
db:76:25:4c:02:04:51:4d:4a:fd:90:c2:c1:c0:a9:a8:d7:b0:
d3:ea:de:1a:05:b3:ff:52:03:5d:7e:d2:9b:d9:3f:75:d5:f9:
e3:39:10:de:53:b8:b6:ac:26:b5:d5:33:98:bc:29:10:37:d3:
ba:67:f1:ff:1c:60:e1:f7:2c:b9:90:9e:47:58:5c:f1:12:b9:
75:8b:c5:00:37:b9:97:33:c2:ef:66:25:31:b3:21:73:9e:2b:
43:dc:ca:aa:f1:15:25:b6:c4:d5:95:a3:72:56:c1:17:52:7c:
b9:80:09:28:3e:7d:f7:db:be:d7:de:35:bc:0c:a6:45:26:cc:
4b:04:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:22 2026 by rpki-client