Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: e9HZWO61lczEeypEjfKjOXLOne5Nv8QSPZyYcWe9UgU=
Subject key identifier: AA:8B:5A:69:4F:73:E7:C6:52:0E:2A:F9:BA:68:9E:AF:93:1B:85:9E
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019D2772B32E52CB2B2A38095F7634CFADD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0BC8
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: D2Pl0JG27+ImHLQt4N9H6kF4agWLlUufN54V3vAS1vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b3:2e:52:cb:2b:2a:38:09:5f:76:34:cf:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=aa8b5a694f73e7c6520e2af9ba689eaf931b859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:c1:ad:ab:aa:ba:4a:5c:7a:57:b2:1a:75:
c2:91:07:7e:06:48:df:ba:e0:ff:9c:d5:cf:c0:5b:
95:a7:da:90:d7:83:3c:c3:1b:26:84:ee:15:39:34:
d7:17:47:9a:3c:76:d7:29:e3:23:f4:6c:76:6b:9e:
f8:9f:dc:56:76:bb:20:58:fb:b1:27:0a:cf:62:2e:
58:a2:b8:12:bd:06:81:93:9e:98:0e:97:78:55:d2:
3d:25:e5:b6:9c:3b:08:4c:e3:86:9a:0e:01:b3:1f:
6c:26:67:1a:cc:fd:01:eb:b8:b7:03:2d:bc:5e:ee:
ad:e5:a5:28:b0:ea:ca:c6:88:e7:c8:a0:44:56:d6:
51:d3:43:b9:11:24:2a:57:3f:b4:54:85:b9:f6:10:
9d:1e:7f:6d:93:b8:0d:df:a0:39:7c:6d:f6:3b:45:
1e:7f:b4:59:2b:d9:03:cd:a9:7f:28:2b:4a:51:50:
14:d2:a0:0b:f9:12:81:19:8e:a8:16:75:63:25:bd:
a9:71:10:08:e5:79:f9:1d:7a:c2:ea:50:2d:dc:83:
28:c8:78:6a:46:0f:bb:50:b1:04:78:96:88:2b:ff:
ef:4f:76:2a:80:e2:33:31:d3:ca:93:a4:6a:8f:c6:
97:20:b6:80:11:49:09:7c:f6:e5:4c:28:ad:98:3d:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:5A:69:4F:73:E7:C6:52:0E:2A:F9:BA:68:9E:AF:93:1B:85:9E
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:2a:d4:8c:fd:13:a5:26:cd:55:b4:59:30:26:ac:84:21:
e9:c3:ee:90:7a:49:5b:73:db:75:b0:c3:8f:7f:cb:7d:0f:19:
f5:b3:78:0d:cd:b0:bc:0a:25:c6:82:d6:f7:53:b9:07:2b:1a:
4a:1b:33:f1:c4:04:29:6b:0a:08:07:12:1f:d9:80:b9:b9:92:
42:84:d4:39:6e:5e:56:1b:04:f8:60:3c:54:ac:ef:e2:a2:b7:
0d:79:fc:45:56:65:22:94:c5:8c:04:65:17:f7:76:fc:dd:71:
c6:a6:38:de:45:04:36:3f:df:98:d7:6f:f0:90:df:4e:87:eb:
f8:9c:e8:bb:e4:c0:35:12:3d:ac:5e:e3:ce:73:02:ed:c9:ef:
4c:36:41:ba:d4:dc:ff:31:4d:80:d9:c6:4b:76:8d:88:43:a2:
bf:c2:9a:d5:08:a3:54:8a:bc:0e:b4:87:fc:12:4b:b7:31:9a:
ef:1a:db:07:0e:4f:46:f5:3b:32:3b:43:09:41:3a:a4:0a:65:
44:e8:b3:35:79:c7:f2:78:26:94:0b:47:dc:e2:2f:ec:e0:fb:
a0:9a:4e:5a:e4:cf:b9:3e:1e:b3:61:5f:a2:84:92:e7:71:44:
70:77:b0:e0:14:28:93:ef:a9:10:25:21:4d:5e:05:b1:a7:f6:
f4:32:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:09 2026 by rpki-client