Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: JA2Odm1G2kSmOtduVtwqGJNffPRMPLojYLfZ698BUv4=
Subject key identifier: B6:AA:F8:A2:63:71:67:A9:E7:27:5F:E0:2F:8E:C2:26:56:BB:10:14
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 019D27A8A40CE51FA75D4D523621CAE7849D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0B80
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: JdE8PjCQnkJiUqIEoiPmORCccFOHnjE+FH+Lhw/8w84=)
2: izo4UDdC4mpQkmyWIGDJxTunxWE.roa (hash: nGq0zWnIwQfu9LNAcwYVVr+irG2rx0o9SiWP5Vb3sPw=)
3: sCQK0hD61FJAM1RWBV01BmeoHq0.roa (hash: 2nCV/DvBky7socAFisrJxsyWYsp6XWUMeNmIdiwZJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a4:0c:e5:1f:a7:5d:4d:52:36:21:ca:e7:84:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=b6aaf8a2637167a9e7275fe02f8ec22656bb1014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:cd:1e:e5:51:86:75:90:69:65:b6:29:7b:
4a:3e:be:84:12:fc:ef:e3:f1:bf:46:97:3e:0a:93:
f6:ca:3b:5c:22:6f:11:08:e9:f5:37:45:23:fa:65:
73:37:48:12:8a:53:99:52:af:45:23:f8:dd:9c:0f:
1d:10:c5:68:6a:e9:b4:e5:af:d7:a4:33:32:8c:ab:
c0:61:f2:7b:69:ec:ee:a3:54:eb:38:17:81:64:94:
8a:1a:b4:b3:72:69:ce:06:04:8d:51:1c:c5:5a:fb:
b6:a7:c7:4b:bb:6a:3d:d6:17:49:75:1c:ad:83:e9:
54:4a:fa:e3:d2:09:22:2d:db:de:38:1e:09:1c:a8:
fb:db:e6:a7:fc:21:a5:69:81:94:22:dc:52:a2:94:
1a:02:f5:02:78:f6:8e:f0:9c:62:13:d6:d2:da:68:
f5:98:59:3e:f5:19:ae:cf:c7:87:23:d5:6b:61:f0:
0b:86:5b:40:ed:f3:7c:9a:ce:0c:d5:39:b3:0e:b3:
e4:e6:d7:ae:e1:da:ab:b5:b3:e8:ca:8a:a3:1d:e3:
ed:50:56:b2:53:d6:0e:0a:2e:23:e3:3c:ab:e2:72:
e1:8b:94:eb:e4:c5:f1:94:e0:4f:d3:e1:39:1d:a8:
4f:f5:d4:9b:39:aa:f0:02:60:3e:50:c9:50:1c:6a:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:F8:A2:63:71:67:A9:E7:27:5F:E0:2F:8E:C2:26:56:BB:10:14
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:20:4f:7f:49:b1:02:1f:8d:ff:78:bd:3d:b3:ed:64:9c:
81:fe:bc:d5:f0:8e:84:c2:25:c1:1f:74:ae:ed:0e:80:80:c8:
f2:00:af:25:69:e9:f7:0e:92:53:46:53:6b:23:a6:9b:55:24:
c7:13:58:a7:1c:75:73:4e:1b:60:f0:ab:33:7f:b0:33:51:94:
46:b3:77:70:da:a4:c9:fa:e0:aa:22:32:5d:d0:14:e1:e3:c3:
1c:e5:88:f6:36:25:a6:3c:0a:8a:fd:71:34:7e:48:a0:66:52:
b8:71:c9:47:18:ce:f3:a4:01:0d:94:52:37:7b:66:36:9e:46:
00:a3:ba:e9:ba:c9:b8:17:0f:ec:5c:f3:e8:b4:31:c9:5f:40:
c7:96:5b:4b:bd:26:90:0f:27:40:22:57:ad:d7:86:c4:22:15:
1c:5a:e4:3e:3a:cd:1b:b7:82:97:d0:bb:78:d3:1c:00:31:a8:
b9:c2:91:72:5d:72:09:f9:0c:34:ef:19:92:18:37:ba:26:ff:
63:24:de:f5:42:d7:9c:9c:a6:bf:51:94:1f:fc:4b:d8:a4:1b:
ca:27:ba:5a:58:45:88:cf:a7:09:e1:7c:1e:9a:7a:99:e5:66:
ee:f6:af:f2:15:22:c9:7a:80:06:5a:5b:38:e6:12:9c:d7:35:
5c:6c:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:59 2026 by rpki-client