Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: SgBoBSMo3czQbkj4UULRgf1kw7Wwwl6g4J35ld9wbqA=
Subject key identifier: A4:76:18:B3:32:3D:C0:CC:F1:51:42:30:8B:93:68:66:38:DA:FE:4B
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019D29975A117AE7CDE46D594C0A697E4E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:01:17 +0000
Manifest this update: Thu 26 Mar 2026 10:01:17 +0000
Manifest next update: Fri 27 Mar 2026 10:01:17 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: w9K6QQdrm5RMJXM+Tj9vLVPt5A4oApmZoYsV63FVY1I=)
2: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (hash: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5a:11:7a:e7:cd:e4:6d:59:4c:0a:69:7e:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Mar 26 10:01:17 2026 GMT
Not After : Mar 27 10:01:17 2026 GMT
Subject: CN=a47618b3323dc0ccf15142308b93686638dafe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:c6:d7:9e:f3:6a:46:db:36:3b:3a:36:b5:
88:49:12:b3:57:48:23:2b:06:fa:69:f4:33:2a:80:
7f:20:13:f3:ab:f7:ed:b1:9b:19:75:2e:50:4e:91:
c2:21:82:ff:a5:32:9b:4e:2f:5a:c4:31:9d:5f:ff:
24:40:2a:ec:4f:f4:b1:d8:a0:43:e6:f1:8a:ea:c1:
63:78:b2:c6:bd:57:94:d6:c6:09:a9:8c:0d:77:01:
8a:d3:4e:82:1b:88:a4:07:96:26:c0:f0:95:1a:bd:
30:24:27:a7:44:4d:5b:77:a4:cd:1d:3d:fd:77:4e:
bc:b0:fb:15:1e:59:fb:14:8d:2e:30:2f:98:1f:91:
86:4a:0b:f7:4a:d3:5b:86:ff:4c:65:15:31:d5:f6:
9f:65:20:9a:88:b1:9f:fe:8d:7e:e9:59:e4:0f:73:
6a:cf:0b:df:01:1d:40:69:c6:e4:bb:63:55:77:5a:
70:a4:a8:e2:9f:0b:e4:2b:03:f1:7f:b2:47:32:1c:
65:d2:58:91:79:4d:eb:fd:1c:75:a8:b8:23:07:64:
48:71:f0:a5:1f:6d:86:8e:14:34:a4:55:06:9f:fa:
94:2f:2b:8f:90:6d:42:e6:91:5c:89:08:09:d0:59:
69:04:4d:64:51:44:b9:b0:4d:c4:30:99:1f:ef:43:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:18:B3:32:3D:C0:CC:F1:51:42:30:8B:93:68:66:38:DA:FE:4B
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5e:bd:eb:2a:b1:ee:01:e4:3e:30:09:71:10:a0:f1:59:c1:
c5:60:b7:45:5b:5f:d8:9e:56:42:f6:cd:48:5b:33:55:81:75:
dc:1c:b7:79:5a:07:d3:08:10:15:7a:0b:62:bb:2b:7d:3f:98:
c9:f3:7e:33:78:5b:2e:cd:7e:3e:a4:04:79:de:4a:23:c1:ac:
a0:52:72:33:3f:0b:77:be:e7:42:8e:51:a5:1d:bd:42:0e:2b:
93:02:2d:76:59:37:56:63:f4:6a:9e:40:4e:4c:ba:17:b3:de:
6d:d7:c5:28:4c:f1:8a:27:79:43:2d:23:5a:ef:69:e1:d2:52:
8c:01:4a:69:a2:fd:8e:b2:9c:19:9d:0f:e3:14:f9:ec:c5:da:
06:1c:9a:65:a4:37:44:6e:c4:e0:b2:ba:55:72:42:bc:6e:55:
27:7d:3b:e0:c4:c7:13:c0:1c:7c:28:16:94:b0:68:59:01:e4:
31:54:85:92:6d:66:a1:68:1f:dc:5f:e2:36:1f:b1:df:c6:fa:
ea:40:56:a4:76:92:40:ca:2b:d7:08:65:f8:b1:73:fc:bf:f9:
74:7d:b9:ee:b2:4e:b3:2e:57:b4:d5:bf:5f:52:ea:2a:f1:5b:
97:53:00:57:81:a3:ca:6b:7a:56:7a:16:1b:7e:41:1c:48:ee:
35:cd:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:11 2026 by rpki-client