Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: pI/XeAH16ycFZ3idbnVbDgf32DHNz+xn0m6Q5xkD8uc=
Subject key identifier: 1C:19:08:2C:1B:7B:1D:B1:17:F5:4D:3D:C8:14:D1:EF:50:86:7F:9A
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019D28BBD550CFFB43722371577EAF214305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0258
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: ruUQSUxP8oeMMePmJx3/FAs0+FK5RGG7oHk37oqw1kA=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d5:50:cf:fb:43:72:23:71:57:7e:af:21:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=1c19082c1b7b1db117f54d3dc814d1ef50867f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:68:e6:9c:b0:18:94:04:5f:9e:6c:f7:54:
04:75:e1:1e:d3:00:23:3b:a9:4a:a1:1d:45:10:e0:
fb:24:57:ee:e8:9c:24:13:52:e4:6d:12:19:c4:6c:
99:49:52:e0:c6:55:a7:c1:87:55:cf:3e:ef:4b:1a:
cf:5c:ad:2a:ed:18:05:d5:7a:f0:b5:6c:61:1f:e4:
90:94:93:d0:08:2b:71:48:02:fd:00:bb:e6:46:8f:
05:f1:d0:3e:b7:da:7d:ec:b1:95:54:80:ee:88:7c:
a7:bf:05:db:d0:79:8e:f2:5b:02:2d:74:61:4a:73:
ef:34:56:ac:2f:39:d8:63:0a:c8:cb:ca:d9:42:f3:
6a:e0:19:26:44:bc:cd:60:76:86:ae:98:28:e6:08:
19:04:bb:f6:ab:62:0c:75:76:59:05:9a:aa:87:55:
f9:bf:86:b4:6a:c2:33:40:5b:41:6c:2c:a3:a5:54:
6b:81:b9:3b:99:3e:09:9a:d4:55:de:b8:a6:2d:53:
03:60:e4:58:a2:9b:01:63:e4:bc:fc:7b:09:f6:b1:
a5:3c:a4:5b:45:d7:92:ca:93:c4:83:74:ec:54:c8:
50:e3:66:4a:8c:e3:06:a1:2f:7b:85:6f:6d:6e:97:
0a:4a:1b:e6:bd:40:a8:8e:5d:3d:cc:22:bf:cb:e2:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:08:2C:1B:7B:1D:B1:17:F5:4D:3D:C8:14:D1:EF:50:86:7F:9A
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:6d:f0:a0:93:0b:c0:7e:05:29:20:a7:dc:d9:6f:cc:6d:
4a:6b:bb:26:a8:ae:74:55:35:1a:5f:a4:5c:00:13:5d:0c:37:
6e:cf:ed:c4:7c:82:7a:6b:c7:a5:d1:ff:45:b3:d4:76:67:59:
c1:10:4d:62:ae:aa:85:65:93:06:12:12:66:33:0d:4d:f8:a6:
b1:f9:46:4d:f8:f8:49:95:5f:26:38:13:41:ea:98:9e:f5:c5:
88:02:14:84:f0:1f:08:c1:17:09:66:ac:41:9b:93:8f:c6:e1:
64:d7:27:4e:b4:02:36:bc:ac:c6:49:1a:6a:4a:48:36:d3:04:
b7:07:fa:f3:0f:47:88:e7:d6:26:95:42:ff:37:01:9d:6f:f9:
ea:95:3e:1e:b2:0b:1a:7f:72:92:a4:08:1b:56:3c:63:8c:fe:
5b:ee:0c:d1:a6:8c:54:00:c5:8a:9f:22:c1:06:c4:98:40:71:
1d:76:3b:c4:6a:1a:58:f9:35:ef:84:e8:ed:fa:3c:a1:bb:8e:
de:23:35:64:7d:f6:47:5e:4e:5b:6f:62:d4:db:d0:ad:72:21:
2f:82:a9:53:e1:0c:eb:9b:44:68:e7:98:c9:bb:35:22:13:ef:
86:f3:77:11:75:5d:8e:cc:6e:2e:a0:b9:98:15:59:1a:33:6f:
1c:23:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:54 2026 by rpki-client