Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: s61KbrdjhYLhhsngctn/3sAKRZuJlY2dSdXvXhXGHQw=
Subject key identifier: A8:B3:15:AD:A0:49:B9:2B:27:D0:2E:60:8A:43:54:C3:55:83:6C:26
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 019D28BB1EC705A18F97FA7C7338D55536C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: QxgS73OdbD4DBEkSVdRy49e0FgAxKMk6tUd2BCpo+jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1e:c7:05:a1:8f:97:fa:7c:73:38:d5:55:36:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=a8b315ada049b92b27d02e608a4354c355836c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:b4:96:23:89:53:5d:51:63:fe:3b:6b:ab:
39:52:b6:41:21:96:13:24:0d:e7:11:a7:13:fa:14:
17:fe:6f:ee:94:3f:2b:fe:a2:6c:a4:e2:21:ad:89:
fb:f7:e3:46:69:cf:6d:96:6d:71:6f:a5:de:d9:35:
b7:a7:7b:b8:ef:19:f4:42:1e:f7:cd:9c:56:59:b8:
4c:56:b2:01:45:10:83:6f:79:b6:be:c3:1f:7e:c9:
af:3b:25:7f:2e:cb:40:f1:9b:66:2e:36:81:d8:c8:
b4:ca:5a:0c:11:08:c1:22:25:fd:a5:13:48:86:b6:
66:b3:c1:ff:b5:44:52:5f:4c:cd:3f:82:d7:51:fa:
28:d8:bf:91:0b:65:1f:0a:dd:ea:45:9e:53:b1:01:
83:83:48:a1:3a:eb:dc:2f:9a:f5:2c:5b:21:bb:ac:
47:1d:c4:25:be:30:88:02:ad:1a:2f:de:50:80:1f:
d2:12:92:3e:9f:18:0c:3a:3a:68:03:3a:4d:33:81:
af:d6:e6:47:ac:66:83:b6:8b:5b:3a:d0:e0:de:8b:
a8:bb:64:ba:d9:38:eb:f2:13:12:bc:cb:24:b8:49:
ff:36:45:8a:25:76:e9:3f:15:09:5c:01:2f:ab:aa:
c9:c3:ce:78:cd:81:67:9f:bb:ff:01:77:55:e7:7b:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:15:AD:A0:49:B9:2B:27:D0:2E:60:8A:43:54:C3:55:83:6C:26
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:fa:41:36:a3:c5:ea:40:2e:d1:45:fa:c1:db:c6:57:e2:
bd:24:e6:eb:8a:54:fd:3b:61:3e:d3:31:a8:b4:9e:a5:e0:a5:
ea:b6:5c:38:bc:1d:22:4f:45:6d:04:4b:28:be:59:d6:b5:76:
ef:78:d4:75:30:2e:03:5f:9d:b8:c1:51:55:23:7c:52:94:51:
08:26:cb:dd:8a:75:47:5f:a6:90:91:ee:01:09:43:09:58:98:
fb:b8:4d:04:a6:0c:53:07:a5:fc:10:64:2f:5e:51:22:15:c4:
c2:9d:eb:b2:90:18:23:49:ee:8b:9b:be:68:57:b7:15:2d:c5:
60:1f:d1:07:83:b8:c3:87:f9:d3:75:0b:81:f5:e2:49:03:c2:
1c:00:77:0a:8b:f2:08:22:11:c5:89:2b:58:03:ef:6f:24:0f:
5b:41:f7:2a:e0:32:b5:c0:7e:1f:d0:76:1f:1e:97:dc:ba:09:
53:2d:33:34:f8:9b:26:81:1d:32:65:4b:af:b2:11:53:0e:0e:
34:e8:17:3c:84:ab:ca:bd:40:d2:b4:ae:74:5a:2c:17:25:c6:
1f:da:67:4f:cc:32:09:a6:f9:00:30:df:0c:14:ae:91:b9:96:
de:36:ad:52:8e:61:1d:87:ce:b8:ed:a9:41:6d:b3:e5:a5:d0:
ea:90:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:33 2026 by rpki-client