Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: drB0t16NxztPluOYkKVcDSC83+GrcJDp81kWgJGEs38=
Subject key identifier: 6B:E0:1C:FF:80:6B:E7:FA:E8:C8:33:3D:7D:84:4C:7F:CF:56:15:CC
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 019D2928F17DB92F21D647D600F2E9AA814A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0B91
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: EKE1xYJ2Hoo6Q6Ewthj5iQ3ectD9lmp2b8rsTBQZ4OE=)
2: LyC_vUctmu4Jy1dYcPIwrODD2Ns.roa (hash: yIwrLI/p+BAFGpVM3yWfqZ2AnOKV2a2znACWvzNWVRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f1:7d:b9:2f:21:d6:47:d6:00:f2:e9:aa:81:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=6be01cff806be7fae8c8333d7d844c7fcf5615cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:9d:56:86:44:6a:84:da:43:2c:29:d4:67:
fa:c8:ec:58:62:bc:3e:f1:3d:77:2b:30:61:bf:c1:
0c:1d:32:71:b4:c6:42:ee:f5:f4:57:73:db:f3:bb:
07:61:2a:6b:05:92:b2:03:f5:c8:ad:87:71:a7:6e:
0f:35:c3:02:7a:38:64:6a:82:b3:56:13:12:c4:a8:
47:c5:b2:43:dd:a1:8f:da:10:0f:28:aa:0c:09:65:
f9:da:cc:04:01:b2:e4:09:c9:47:94:7c:46:17:83:
89:12:85:8d:de:4d:7b:f9:00:d2:e7:12:9f:bf:d0:
1c:2c:79:f2:72:09:35:7d:99:55:54:96:92:47:b8:
1b:d6:2e:e0:a2:43:2a:4b:e9:64:7b:0a:63:44:df:
aa:c0:3b:fe:45:e4:6c:cc:cb:8e:2f:69:36:61:c6:
42:33:26:82:e3:99:e7:cc:c4:4e:e5:b7:77:ad:b6:
09:6a:f4:ee:2b:6e:fa:13:01:fe:53:8c:d2:0a:79:
e6:7e:8f:d0:aa:5f:60:97:9f:d4:2d:e8:35:2c:0c:
a8:b7:42:ca:ea:ad:d0:5d:05:ac:df:1d:46:ca:6a:
28:28:4b:c0:8d:72:84:62:85:07:8a:96:6c:4d:bb:
30:7f:22:fc:b7:2a:d1:7e:7f:9d:10:a4:6b:dc:dc:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E0:1C:FF:80:6B:E7:FA:E8:C8:33:3D:7D:84:4C:7F:CF:56:15:CC
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e8:e2:b9:62:90:f4:71:ef:62:56:31:7b:30:a3:82:b1:71:
51:ec:d9:5f:b4:57:69:fa:67:1e:75:59:f2:39:24:d6:52:e0:
59:18:35:45:17:44:27:38:b7:98:ef:6a:64:bc:7f:e3:8e:00:
93:ed:28:01:79:2a:e0:04:dd:cf:cb:1d:d2:2c:7e:ad:46:75:
a6:6f:7b:c1:92:e9:e5:48:b8:32:ff:77:c7:e9:f9:3e:a8:f1:
6d:d3:db:10:c8:67:ec:2e:23:4c:cb:a8:45:bc:98:0f:ad:24:
96:ef:e6:7e:8b:45:5a:6c:8b:18:65:1b:21:c1:76:20:41:b5:
3e:49:bf:f1:05:0e:34:99:1f:b9:a9:4a:8e:3e:9c:3e:29:e6:
40:fa:6c:39:02:fe:1d:46:98:a5:4e:dd:4f:5e:32:45:42:b5:
ec:cf:19:bd:b9:8b:7e:bb:21:47:d7:4c:6e:85:bf:c1:6f:43:
c6:c2:cc:1b:a3:b4:2b:d6:e4:0f:2c:9f:37:0d:3b:be:65:e1:
13:41:94:c8:53:85:99:00:5a:56:11:82:10:5e:c7:6a:ac:1d:
38:81:46:55:ca:48:64:07:27:fd:65:7f:70:74:27:d7:8b:68:
27:ba:94:ac:ef:03:ee:65:83:89:52:1c:e4:5e:17:d6:82:82:
e6:c7:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:20 2026 by rpki-client