Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: +dmZSmftXK9PQkxC6DI+lzwoDbve+h/P1XboMgVRW04=
Subject key identifier: 4D:A0:EF:6F:5B:3E:27:42:1B:7E:0A:F5:B6:C3:49:BA:07:83:77:25
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 019D27A8827101FCA8F12E51A8EBD18C0439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 1639
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: kBhQkJeqHUafQ3Cm4tzRzUUAMoaM2YFhdLtCR8ieVDg=)
2: Crjca7fOHa3XODW9UiyUGAIwWc8.roa (hash: WnPbNWjg6gHgCjmDpm8NmXxP+ad/7QuLqIJAknA++jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:82:71:01:fc:a8:f1:2e:51:a8:eb:d1:8c:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=4da0ef6f5b3e27421b7e0af5b6c349ba07837725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:8c:7a:ce:77:b7:65:d4:cf:5e:c0:03:d7:
04:40:08:33:34:c4:53:35:b8:41:fd:1a:88:91:49:
ab:ff:b7:b1:9c:15:c2:01:87:6a:6a:80:48:0c:ad:
82:6d:e9:d5:b5:4f:87:97:ac:2f:6f:14:f0:f5:55:
a3:51:b4:a4:b9:54:99:e2:cc:09:b6:dd:4e:a6:a1:
02:6f:5b:c1:34:16:5a:63:86:ba:88:ef:cc:4f:df:
6b:62:7d:de:8e:84:cf:0f:58:b7:59:74:60:4f:7d:
8c:63:6f:31:16:34:93:b4:ee:9e:80:0b:d8:46:df:
cd:69:74:1f:a0:aa:14:07:50:b6:fc:58:ac:ac:9b:
06:bc:b3:c9:f4:1d:d3:2e:4d:22:35:69:e8:5c:78:
f4:0e:ae:0e:79:ee:92:66:3c:2e:7d:f0:c6:86:f5:
69:ef:f1:ac:57:9a:01:df:b4:2c:6d:0c:de:33:50:
0b:7e:41:84:3c:60:53:ed:1f:94:5a:37:eb:f6:ea:
1f:b3:14:1e:0d:e3:99:7c:b5:86:68:3f:8e:21:da:
ff:da:85:c3:94:40:b5:cd:f2:7f:e2:ab:9d:89:04:
f2:7f:ab:d7:c3:f4:7a:04:41:e2:61:83:84:ca:a6:
3d:40:25:f1:bc:02:99:11:b3:31:50:b2:41:a7:54:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:EF:6F:5B:3E:27:42:1B:7E:0A:F5:B6:C3:49:BA:07:83:77:25
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:24:96:dd:4a:32:39:f4:c7:66:d2:27:0f:8f:d5:32:a1:0a:
0a:a9:b0:c6:93:b0:7f:05:63:59:9c:95:a0:1a:b6:cb:43:16:
bd:39:7f:52:fb:4c:73:b6:fc:74:4b:8d:62:f9:d7:a7:7e:c2:
a1:64:9c:53:76:cf:7b:ff:8d:46:f3:84:14:55:ab:58:20:d1:
32:a1:b2:77:69:1c:36:92:65:59:4a:da:e1:e8:9b:e7:40:09:
94:2b:35:fd:f9:fb:39:33:bf:a1:d7:15:e2:a3:90:11:10:fe:
f0:76:3e:4d:59:bc:6d:f1:27:c6:1d:f2:6b:1b:b3:2c:69:bb:
25:96:92:f6:2e:be:34:58:b4:20:3a:3e:ed:92:2e:99:f4:9d:
df:03:ac:ac:81:86:73:56:92:99:59:ae:e6:9f:cb:68:fc:18:
50:88:35:d3:bf:1b:e9:2b:75:86:71:d2:86:80:c1:97:17:24:
3e:2d:22:10:a3:18:75:8c:b9:d3:7d:9f:c5:b9:f4:c8:f1:64:
0b:8c:5b:ea:fb:44:5f:e0:8a:80:3d:2d:54:7a:6f:ff:84:ab:
61:d7:4f:c9:7d:d9:e5:db:8f:50:17:2c:82:22:11:57:41:34:
11:5e:1d:aa:9e:ee:fe:3e:7b:90:d7:e6:4b:64:be:4e:75:24:
22:3c:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:56 2026 by rpki-client