Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: cIwRxkz8p+mw1Z1dEsmXwKYcpgtdJcGQ8XcoWTPi+UI=
Subject key identifier: 2B:7F:FC:7C:D4:B2:2E:B1:59:E7:ED:33:2E:AB:75:29:6E:DE:0A:DA
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019D2AE0C0DC9ECE01450F5B4C3DC3F7562B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 16:01:05 +0000
Manifest this update: Thu 26 Mar 2026 16:01:05 +0000
Manifest next update: Fri 27 Mar 2026 16:01:05 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: khi2yHQTOuzrIrzuKKfqVN5otNnXzO+txOk7c9YrWg4=)
2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:c0:dc:9e:ce:01:45:0f:5b:4c:3d:c3:f7:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Mar 26 16:01:05 2026 GMT
Not After : Mar 27 16:01:05 2026 GMT
Subject: CN=2b7ffc7cd4b22eb159e7ed332eab75296ede0ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:bd:60:dc:75:76:c4:0f:e8:d6:f3:7b:f1:
20:99:32:3f:31:9b:97:a3:44:64:56:01:df:5c:0f:
48:94:bc:f0:3b:ec:b2:0b:f2:17:35:3b:8a:4e:9f:
5f:f8:64:2d:cd:22:69:18:43:39:e0:dc:51:6b:53:
0e:0f:78:1f:35:49:06:f9:3e:b7:cd:62:bd:f6:0f:
2e:ed:ac:62:8b:cc:17:5b:6f:f7:f6:dd:4a:da:b6:
48:50:ce:37:11:b2:0c:7d:30:df:08:03:a1:35:cc:
af:86:d3:54:fa:1a:30:a3:65:1a:1d:e7:d9:dc:8c:
f7:a1:85:9a:b5:29:26:97:65:da:2f:fc:86:9e:f6:
53:26:3e:e4:67:62:2b:39:66:fb:74:85:78:b2:74:
96:12:c3:fd:8b:c6:b8:41:dd:3d:4e:97:6b:0f:0b:
ae:c3:b3:f4:7e:79:bf:a8:eb:7a:28:77:20:15:cb:
a1:cb:74:0a:45:5c:ca:7f:32:85:0f:8a:cf:4d:73:
0b:db:36:9c:f1:31:59:8e:4a:35:12:26:44:cc:64:
6a:e1:85:2a:fb:2b:4e:26:c4:43:2d:1f:f8:d9:95:
62:bb:8a:a3:03:58:b6:1f:5e:34:92:42:14:f4:d6:
e3:f3:40:45:63:36:fe:fd:c4:88:55:20:76:b7:e7:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:FC:7C:D4:B2:2E:B1:59:E7:ED:33:2E:AB:75:29:6E:DE:0A:DA
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:26:26:6f:63:2a:f5:5c:cb:73:16:41:10:0c:13:9f:25:
ef:7d:bc:db:5e:3a:3b:2b:d5:8c:5c:54:fc:96:c3:01:ec:b8:
85:2d:8e:7a:4b:47:be:96:f0:7d:99:0e:9d:cb:94:29:fe:8d:
eb:8f:03:b5:7a:5d:28:4f:3d:4a:c0:bc:55:bd:3b:26:65:75:
cb:85:7e:c7:c1:a7:1a:af:b4:6d:c6:d7:56:3c:ec:af:01:c7:
d1:9f:7d:ea:c4:b6:21:ca:06:df:52:82:f6:0b:dd:ea:00:eb:
38:0a:bf:f8:cf:08:68:62:6e:70:57:cc:1c:b6:1b:6c:75:df:
31:e9:09:ef:13:6a:68:e8:d9:37:8c:6a:39:c9:0a:6e:e1:78:
f7:2d:72:6e:91:8e:6f:3e:81:34:fa:cb:b8:61:81:37:9a:80:
98:57:f6:6d:a2:8d:4f:c7:76:53:73:64:dd:9c:3d:c9:a0:2f:
e2:01:83:e7:6c:62:88:85:2a:88:dc:ed:be:c5:1c:c0:2a:f0:
bb:9b:83:15:fd:77:f3:40:10:e7:04:5a:f8:22:03:d7:83:6d:
5d:b8:bb:94:be:dd:38:14:46:de:05:de:87:e1:e4:93:64:ff:
47:13:9c:64:d5:d0:16:1d:16:99:ce:e9:40:fc:5f:ad:e4:6e:
ec:ff:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:58 2026 by rpki-client