Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: laX7NUq2KSK0JrXqCWDo2Rb9psGP1QCwKjEWoVjrmn0=
Subject key identifier: 60:F3:9D:EC:0E:27:3B:EC:07:46:9F:73:22:6A:47:32:2E:09:54:35
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 019D265FF1619D4A493DF5A600757135245C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: NOdR3dWd3CTGEvM7zvgrf7fh+sT/6f/zgPRaqDSahus=)
2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=)
3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f1:61:9d:4a:49:3d:f5:a6:00:75:71:35:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=60f39dec0e273bec07469f73226a47322e095435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:e2:0a:e6:e6:31:7d:ae:0c:b1:25:05:25:
fe:51:cb:0b:22:83:e3:c6:5f:84:07:b3:0d:ff:51:
ac:9f:8c:de:6b:1d:f8:f8:6d:2c:a7:26:4e:ec:da:
27:ca:5b:05:fa:47:ba:4d:64:5d:54:fd:8e:1b:d8:
0d:d6:68:2c:c0:bd:8b:56:2f:6f:7f:5b:69:1f:b0:
50:c6:15:7e:a0:2c:91:fa:ca:01:8e:44:e8:1a:3d:
56:35:d3:e9:dd:2d:86:1e:c6:d2:41:a9:59:33:8e:
b6:50:73:c9:23:c9:f3:61:93:14:33:df:41:6b:8e:
a1:e5:0d:40:5e:f3:f6:b8:60:7a:53:95:18:a5:11:
79:b3:54:76:ad:b6:3a:ba:8a:ae:e8:56:f5:3d:fc:
4e:15:b7:41:12:31:bf:f6:19:7b:97:e8:a0:61:99:
25:a6:02:6a:74:7c:60:bc:f6:ba:45:61:24:1a:c3:
c8:3e:66:5f:ed:3a:bf:1d:08:ac:a5:d2:44:82:0e:
17:71:69:86:fb:fe:f1:29:b6:db:3e:90:e8:74:e1:
c0:86:72:ae:89:fb:be:b6:16:ca:d4:8e:f9:9d:d6:
60:f7:12:9e:c9:6e:57:4f:84:f1:d5:0d:20:5d:85:
0e:02:71:44:47:2d:40:0c:df:ec:b6:25:05:46:aa:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:9D:EC:0E:27:3B:EC:07:46:9F:73:22:6A:47:32:2E:09:54:35
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:00:ec:be:0f:c6:42:1f:c6:42:62:65:bc:7d:72:81:9d:a2:
64:7d:fb:b0:57:26:c8:34:ef:a8:fa:09:6a:33:a8:3c:8b:6b:
74:1d:79:6f:26:46:7e:51:4e:20:db:a4:0f:34:08:31:5d:1e:
82:9e:66:39:95:c5:23:4f:8b:cc:03:7d:50:2a:b1:f2:02:6f:
83:76:fb:d1:28:b5:49:7d:25:8d:74:fc:1a:36:2d:d4:cb:4e:
38:bb:55:78:21:66:f6:7d:3b:e2:5b:d8:a4:30:37:e7:e8:26:
f1:58:e9:53:5f:a4:50:ed:eb:ba:8c:1a:d1:96:b9:7f:aa:41:
9f:dc:7e:67:98:27:45:fd:03:70:84:2e:f6:3b:49:15:a0:fb:
10:e1:37:70:d8:4f:04:92:74:63:51:d2:1f:ea:92:97:39:72:
df:bc:cf:18:bb:f5:7c:1e:dd:72:3f:12:c6:a5:22:d2:7e:b9:
ba:0a:ce:b8:ea:71:34:f9:51:8d:f5:d1:c4:98:d0:9b:b0:0c:
ea:96:b5:f6:07:02:b0:88:bc:12:9c:f2:78:78:f9:80:da:da:
8b:e3:25:cf:41:a1:50:6f:e4:4d:4d:19:03:a9:65:1d:03:1d:
a4:64:af:c6:55:77:40:33:f3:b8:28:b8:80:8d:e6:04:7f:c5:
26:54:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:37 2026 by rpki-client