Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: jT37jn0UiYpjy/guvjNkKPX5tFDu0eq6mXtJg+fEFds=
Subject key identifier: 0A:6D:84:7F:97:32:C9:DB:5E:61:49:7C:F9:27:11:1F:C8:DD:8D:9C
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019D2772D41B54739D6D38F7A3DE5A38E5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 1459
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: BIo28pXo6DKLLlMdXKajPhOhgpE.roa (hash: Yxz0YX56/XjwEqK3eJFqdGwrvy8qCQG0h/ZHhD2mdYI=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: gLeH4nM7VHkQKl0seior6S6Zi8S5Sh0fI6MyU3CroLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d4:1b:54:73:9d:6d:38:f7:a3:de:5a:38:e5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=0a6d847f9732c9db5e61497cf927111fc8dd8d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:b4:f6:68:e3:f7:10:f7:27:73:c4:4f:ab:
1f:0c:3a:ff:a4:fe:33:09:60:65:54:20:7d:55:d1:
9d:cf:85:4f:45:4b:65:bf:81:3c:84:1c:6f:b6:c7:
67:97:f8:76:b4:2d:c6:d7:e1:bb:17:8f:52:e3:a7:
d5:cc:92:35:0a:f5:45:30:29:a7:d4:66:51:be:a7:
3a:a5:a1:fc:e4:b5:ce:2f:f3:08:f9:ba:0b:36:4a:
f2:64:dc:40:30:31:a3:82:c9:45:f1:11:f0:85:60:
ed:12:f0:5d:9b:e8:b7:f0:a2:73:72:c6:cc:cd:44:
2e:66:85:27:ac:ad:f3:91:a3:79:42:af:19:d0:2c:
fe:05:62:35:ab:6e:2a:a7:b9:61:9e:b0:b4:20:77:
8d:4e:f4:a2:7a:95:67:5d:6e:bd:c1:12:87:d5:2f:
f4:3d:56:fd:4b:62:9d:a9:7e:a7:f5:9c:01:97:36:
54:95:56:44:fe:b6:f4:88:dd:0f:0a:cb:d6:1b:af:
d8:b7:b0:a4:0f:28:89:4c:b3:41:d7:a9:7a:f1:61:
fe:f0:47:32:bd:8f:e5:fa:ff:b9:c4:53:26:8f:0a:
7e:31:7b:2c:5a:a4:49:6f:6d:bd:8a:d5:4a:98:9b:
16:7f:c6:38:7b:dc:ed:68:a9:25:c8:c7:88:35:c0:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:84:7F:97:32:C9:DB:5E:61:49:7C:F9:27:11:1F:C8:DD:8D:9C
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:27:84:ff:8b:d3:2f:72:98:b1:4a:cc:d5:a0:94:e2:c9:30:
99:09:38:ac:e1:f7:24:26:75:0c:da:fa:8c:33:95:0a:c2:e5:
6b:6e:f9:87:ca:81:bf:d1:52:3f:9a:ad:f1:f6:bf:60:8d:e3:
f5:37:98:d0:d0:93:8a:1c:f2:fa:78:41:3b:0e:7a:26:f3:59:
33:58:73:a6:94:26:4b:4c:1e:45:10:0a:aa:c8:78:d4:56:0d:
78:37:32:05:34:1e:86:2a:7b:de:83:ec:19:72:92:0e:da:c1:
40:c5:0d:04:5a:18:86:14:4f:2f:4b:33:34:56:77:71:7a:2f:
e0:d6:ca:2f:ba:86:f9:18:db:b6:49:af:27:e3:11:2e:2c:f5:
14:3a:24:fd:34:4f:6c:95:f8:db:c2:9e:14:cd:61:5f:39:9f:
06:b2:4e:23:d5:33:3a:e6:f7:12:95:42:52:71:1c:13:f4:14:
37:68:f7:31:ce:b0:7e:c4:4b:e1:37:d7:93:34:13:ce:91:f3:
48:1b:a7:f9:e6:8b:cc:f8:e7:6c:4b:83:59:5b:a2:94:fc:23:
e9:cd:1a:98:ce:ab:53:c8:6f:1f:72:df:ee:ca:56:07:8d:ee:
2f:af:85:77:ca:ad:e3:2b:04:dc:e2:fe:e3:61:e3:45:53:b7:
37:8a:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:04 2026 by rpki-client