Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: RB28wksZWuFPCGE/OW+MU7Mi1i4DNcWQNbXsZpGjXIs=
Subject key identifier: 25:83:61:8E:67:C6:5A:4A:5A:1D:0F:FE:C8:CD:C2:21:41:DF:C1:E0
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 019D2703DF4BAD704F0769F578ED2B676BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: KTrw9kiCPz6RITPghw6uYdBTJ1OvU1K5r6p8IMt93LY=)
2: xxEAYZPjZGUFGslrurHMaeLtIsA.roa (hash: r31Amyvct5exQwmbmgPrj5bGx7+Kws5esYO/01oko3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:df:4b:ad:70:4f:07:69:f5:78:ed:2b:67:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=2583618e67c65a4a5a1d0ffec8cdc22141dfc1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:48:01:b8:b0:27:26:1d:c0:70:00:02:78:
01:73:b3:6d:fe:5d:1f:8e:b5:e5:7d:0d:e4:25:a4:
81:9f:6d:e5:e4:5f:b4:49:c7:1c:e4:f8:49:eb:f0:
92:99:c2:85:cb:c1:c7:cb:8d:e6:ad:c6:ef:7a:0a:
7e:1b:6a:62:a3:fe:30:2b:74:3b:5a:f2:f5:7b:8b:
80:d4:90:25:5a:4e:13:26:31:21:e5:2b:f9:d2:1b:
f5:0a:7c:27:22:6b:11:bd:f1:3f:09:c1:a7:af:00:
f2:41:59:3e:f0:2f:5f:ef:e6:39:bf:de:3a:32:a4:
ef:38:c9:2b:49:60:45:85:8b:cb:c5:2d:ed:3d:4d:
1a:a6:d2:98:7d:9e:ad:9e:24:44:9d:b1:b1:2e:83:
ec:ba:ff:9b:e1:60:2b:e3:bc:a2:dc:e3:25:a7:ef:
55:5a:ef:89:66:bd:8f:f5:01:0f:02:84:37:c5:07:
6f:65:cb:24:df:80:3d:1d:46:59:7f:3d:d7:ad:57:
54:9c:0c:7d:4c:4f:61:b6:07:ee:0d:78:15:3e:4f:
68:8d:a2:42:44:95:bf:b4:8d:b1:11:ea:f3:a2:2a:
55:37:dc:12:b9:e0:fc:e2:5b:df:94:67:97:b0:84:
d7:fb:dc:0c:86:06:fc:db:e8:92:28:04:99:d3:fd:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:61:8E:67:C6:5A:4A:5A:1D:0F:FE:C8:CD:C2:21:41:DF:C1:E0
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fc:53:7c:17:2c:a6:11:7e:15:98:9b:13:84:12:46:c3:75:
d2:6b:00:7a:8e:29:45:aa:bc:5b:e0:55:80:22:a2:48:96:fa:
65:98:8b:cb:aa:a1:28:f4:e6:30:4f:d1:ab:c0:1b:bd:66:de:
b2:c9:9c:10:48:e4:c1:9d:de:b7:aa:64:0a:c3:2d:5d:64:63:
18:84:ed:f5:7b:e8:90:91:0d:92:93:37:29:cc:5e:f6:fc:95:
a7:78:54:2c:79:60:5f:52:67:23:93:cf:55:84:a7:d7:34:0f:
23:c1:d8:4c:74:d8:36:6e:59:98:6d:8e:9e:33:3e:92:23:ef:
84:89:83:b3:91:df:63:f6:39:3b:d3:63:e2:ab:90:69:2b:c6:
ee:61:48:24:f9:54:88:94:9e:eb:bb:12:d9:4a:79:8b:da:5d:
9b:e9:7e:cb:dc:10:e8:7e:4d:3d:a8:b4:4e:8a:af:ec:c8:5b:
14:b0:f3:51:b0:c3:62:57:88:f1:2b:d4:ff:bf:75:3f:9f:c9:
c3:92:d7:76:31:cb:cc:13:05:10:73:9d:75:24:55:23:2f:42:
6d:0e:a2:52:79:12:ec:56:73:3e:41:10:3e:0e:54:6e:65:a6:
49:bb:44:97:ad:71:b3:f5:db:fd:5e:b9:91:89:44:1e:30:e0:
aa:59:6b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:27 2026 by rpki-client