Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: Jq5YIjsfCvekMFKLase3CR+EHtBsxfNlJVamo6CuOxM=
Subject key identifier: 94:FB:99:57:C2:08:50:C7:0D:98:C8:46:9C:0D:4B:4A:75:32:9F:6E
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 019E1E6C0614C486224742D15F40E7672381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0C10
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: Qa2vtvaBS09HxtOSybxeDwF6BIqmJj6w/xGiqFiBU2o=)
2: LyC_vUctmu4Jy1dYcPIwrODD2Ns.roa (hash: yIwrLI/p+BAFGpVM3yWfqZ2AnOKV2a2znACWvzNWVRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:06:14:c4:86:22:47:42:d1:5f:40:e7:67:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=94fb9957c20850c70d98c8469c0d4b4a75329f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:3f:ae:c2:92:92:f6:47:28:24:71:7d:95:
57:a1:6a:dd:a4:c6:4f:ae:ed:30:30:92:70:f8:e7:
c7:1f:5d:03:8e:45:27:5e:86:7e:d5:28:d6:c8:5a:
d9:9d:b7:76:71:7c:72:a7:76:87:65:e2:e8:a4:e1:
ef:83:c8:07:ad:57:ac:73:75:ac:98:97:11:5c:dc:
26:fd:89:0f:fe:29:25:b6:96:a0:33:7d:c7:4c:cc:
ae:26:35:d3:6d:8e:fa:aa:62:2a:15:ea:5d:42:9c:
79:8d:d9:61:2e:f5:08:fd:3a:8e:c5:34:c8:26:b9:
19:4e:fd:2a:df:8b:26:89:a9:38:85:3e:76:3d:6f:
f4:38:9e:e1:d5:a1:06:e9:43:11:1c:29:00:94:35:
70:b1:fd:fe:0c:d2:ff:5d:7d:46:c5:3c:b6:77:fb:
4b:c8:4c:c9:82:02:f8:d2:b6:9e:60:03:c3:72:30:
e4:3b:b4:f4:63:ee:44:56:b6:72:68:1d:4a:cc:d9:
18:b0:82:3b:b4:c2:d4:1a:11:0b:b8:bb:ac:1a:30:
e4:18:92:8c:fc:e3:f2:b4:e4:a9:03:73:20:04:45:
78:14:2f:51:25:88:39:cf:b6:55:d3:6a:25:48:8b:
b2:4a:11:60:d7:6b:c9:59:77:bf:25:bd:f0:33:82:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:99:57:C2:08:50:C7:0D:98:C8:46:9C:0D:4B:4A:75:32:9F:6E
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:62:83:28:34:ea:bd:e3:e3:1e:8d:e8:d5:84:d6:5c:23:
aa:cb:49:ab:61:d0:50:1f:db:6b:3b:b8:de:30:50:c2:5f:a2:
d8:b7:49:a8:ba:1e:f9:ef:13:38:44:40:37:11:84:63:7a:a6:
7d:8c:ca:c1:07:8d:d8:e8:61:09:5d:04:ed:c9:9b:cc:45:5a:
06:b4:8e:fe:e0:20:ac:c8:62:f1:97:53:e0:08:fe:eb:40:ad:
23:21:51:8f:47:64:8f:b6:72:88:92:43:06:e2:1b:8b:81:bd:
5d:0b:3a:a3:6a:14:97:33:8a:40:54:a4:1a:46:28:db:25:2d:
60:3a:9d:17:8b:84:94:2b:b8:32:82:a0:a7:f8:6b:3e:7d:d2:
a5:c1:5b:48:30:d5:2b:d5:dd:c0:53:30:10:a3:c3:44:ed:5a:
39:c0:53:6d:cb:0e:d5:d8:66:83:63:8a:2d:4e:28:b0:fc:94:
f8:69:ac:94:9f:71:e6:41:f3:a8:33:31:b3:7c:6e:e5:3b:20:
7b:f2:67:eb:9b:48:a9:dc:28:7f:b9:72:ab:7e:f7:44:47:c7:
1d:ce:46:3c:42:65:d6:92:d5:ba:d3:38:5e:3b:43:be:96:69:
52:bf:fe:78:db:1c:a4:ed:83:77:b7:83:1d:cc:62:00:c3:17:
96:68:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:46 2026 by rpki-client