Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: /05KTxem8LV4YZnbKWgEjDDqDBEhGC46HD8mMLfFr7g=
Subject key identifier: 54:DC:9D:2C:D0:4E:57:5E:C7:DA:08:BE:CD:01:7C:5C:26:35:60:33
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 019D273AF9842765D6C6A20EDFA544283C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 07E6
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: YSkh1rLSac/BnwbrfN6M+AfD/ZPec2mdiHUer5XiL7w=)
2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f9:84:27:65:d6:c6:a2:0e:df:a5:44:28:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=54dc9d2cd04e575ec7da08becd017c5c26356033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:15:7c:45:1e:96:9f:d3:c6:8d:e9:83:2a:
c0:02:72:93:8f:28:fe:d9:7e:0d:37:b7:45:b1:a1:
d1:ed:ca:4b:d0:3a:a5:6e:bd:8c:68:a2:a8:70:f9:
59:80:28:0d:b9:6c:ee:28:b7:fb:29:27:08:ab:57:
3e:a9:65:6b:79:b7:7c:70:38:54:24:8d:26:42:3a:
6a:47:be:48:02:6d:6f:f6:ad:32:c7:09:69:86:c8:
78:77:f3:c0:84:df:ee:0e:65:ee:4a:57:fe:de:ea:
0a:d7:f3:78:6c:98:11:bd:df:63:cf:37:7c:90:b2:
64:27:c6:6d:7e:00:b3:39:8a:28:8d:d0:12:e1:81:
2b:59:fd:25:f5:18:63:f0:f1:47:b5:9b:25:c8:4d:
d7:15:79:41:9f:f9:a1:07:41:04:bc:7c:20:50:a0:
19:d6:d5:4b:43:4b:5b:87:08:02:e6:64:22:95:96:
44:0c:f2:46:a1:22:a9:9d:24:76:8d:82:ed:ca:c2:
8c:a5:9d:80:03:7c:79:56:92:a6:ae:8b:03:ab:01:
a0:ef:8d:6f:77:23:e5:83:31:c4:09:be:1b:99:37:
fa:b3:f8:b0:b4:eb:f6:7a:76:7e:7c:60:db:22:b8:
bf:ab:b4:de:16:31:7b:cd:84:fc:13:42:13:ec:cd:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:9D:2C:D0:4E:57:5E:C7:DA:08:BE:CD:01:7C:5C:26:35:60:33
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f2:ac:e2:5b:91:19:50:72:05:a9:9e:be:9c:e0:3f:20:4b:
64:10:7b:b7:d3:cd:fe:8a:12:a9:1b:d9:f2:80:72:0d:7c:7b:
c9:a5:9d:37:2c:a3:96:60:0d:9b:ef:52:76:59:d3:65:b4:0a:
0f:cc:e8:81:ab:8c:ef:b6:80:6b:21:47:68:2e:86:0e:43:68:
b7:c5:37:50:8e:22:38:8c:6f:1c:1a:a6:b8:6c:65:d1:7d:c8:
56:87:08:38:18:12:d9:41:af:38:28:7d:9f:2b:a8:36:53:84:
dd:e0:74:03:bf:05:80:0a:6c:7a:1d:f0:ae:3f:87:a3:b4:02:
87:8f:8c:28:96:8c:ea:d5:d4:38:72:00:9b:24:bf:ce:05:a8:
db:20:41:05:bd:fc:50:8b:39:4c:80:74:49:0f:9d:b4:71:ba:
e0:0c:55:16:72:57:6f:92:8d:24:cf:45:8a:07:82:b7:6e:1d:
12:22:62:b4:81:a7:b6:bd:14:30:08:a1:8e:5c:a6:ab:e8:47:
49:c2:c1:97:3f:e9:d8:db:91:f7:42:b4:5b:bc:5c:8b:93:db:
7d:3b:aa:be:6e:be:a1:ef:07:10:00:69:c5:cd:47:3e:ad:99:
c0:43:2c:93:73:5d:53:d5:f1:7d:e3:c4:7f:4a:b9:26:6c:c8:
c0:0a:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:32 2026 by rpki-client