Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File: H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier: 5TjrXOBEr1bBHbOEHgLPe52lAmYcRsq3rwhkFWxciLo=
Subject key identifier: 8D:0B:59:B9:F3:85:93:24:28:7E:3F:54:34:48:E5:0D:EB:74:D3:20
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer: /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial: 019D2704BF2A0B1FC3C2F397680B066D7C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number: 0752
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: BtGazFr3HXeSFcqxqvhT6Kwyhrk.roa (hash: gDkwy9uRYw/xnW0hZwdKA4/8Do9O0Z0Zco7NJx77l1c=)
2: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: gH5HB/JV/a34hgF+SZ4mU66YU+gk+BcPRp7ocCc/cBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bf:2a:0b:1f:c3:c2:f3:97:68:0b:06:6d:7c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=8d0b59b9f3859324287e3f543448e50deb74d320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:71:85:c7:4e:cd:90:67:b4:ba:ed:b7:21:
02:f4:26:0f:a9:73:b5:86:91:c4:68:73:b2:cb:c2:
ea:3b:29:f4:e3:40:bc:66:c1:a8:60:a1:31:fb:1d:
1a:32:19:aa:72:6d:a4:39:d9:74:1a:74:ae:66:60:
22:83:bc:bb:a9:66:ce:77:fb:36:45:e5:3e:24:df:
23:9e:6d:1c:58:15:6b:04:c0:71:a5:f4:40:54:fe:
5a:99:69:2c:38:ea:ab:21:79:45:d0:c4:e9:4f:b0:
25:66:dd:d8:0c:72:b3:ba:7d:e2:23:e6:62:1e:84:
07:74:e3:3b:23:9a:65:4d:ea:c3:87:5a:fc:ce:2e:
46:2d:df:8e:a9:97:5f:c5:ad:ca:c4:9c:52:cd:f6:
24:92:37:93:8c:db:62:d2:75:bb:70:b0:19:b6:5a:
38:5e:a6:d4:a9:6e:6c:20:f7:88:c4:91:e4:d9:8a:
f9:8b:ec:de:b8:e3:62:8b:2a:a5:48:39:80:27:89:
09:44:36:7b:f1:ed:93:fa:b3:70:de:71:df:e1:3e:
6b:4c:d4:3e:76:dc:1b:f6:07:93:28:84:4b:a1:57:
07:c5:05:b7:f6:4f:c3:ea:a9:45:ef:c4:78:28:22:
ac:e8:2e:a9:63:8a:58:2e:f1:07:b2:0c:72:22:08:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:59:B9:F3:85:93:24:28:7E:3F:54:34:48:E5:0D:EB:74:D3:20
X509v3 Authority Key Identifier:
keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a5:b0:c8:1f:0d:8b:40:3a:f3:9e:6b:d6:29:f3:df:a1:de:
cd:f0:8b:fd:52:78:a5:0d:87:c9:6b:b8:15:8f:86:f8:25:92:
53:4f:c7:44:8e:47:40:38:e6:b8:b1:c4:8d:1e:9a:83:69:f0:
9a:6c:52:50:18:26:15:c5:55:ca:45:35:bc:96:6c:4f:a8:ff:
b9:2c:f6:08:0e:58:3e:12:99:b2:c5:0d:e6:ce:d4:22:30:08:
a5:2b:68:30:25:fb:bb:1b:de:e3:d8:a1:55:86:d3:e1:22:8e:
19:b3:5f:6e:0d:c2:0e:0f:b3:7c:73:4b:e9:9d:61:25:e9:cb:
ab:df:00:57:1e:cb:b4:b8:d3:39:d5:59:24:05:94:38:54:d1:
f4:1d:bc:16:01:54:8c:81:c0:6b:03:4f:dd:a2:58:57:ca:8a:
be:92:25:72:86:4d:03:79:1e:29:6e:77:31:74:a4:42:ca:da:
ac:50:da:2c:14:ac:21:40:93:42:08:df:4e:d0:39:a7:aa:00:
a5:d9:d2:2a:fe:d1:76:30:a3:78:71:43:a7:a6:bc:9d:61:04:
e0:89:01:8d:e0:12:e5:cd:b3:a4:41:61:de:8a:0e:7b:63:60:
cb:f2:7b:bd:38:e5:bf:37:a5:8d:3d:5d:e7:5a:d5:6f:6b:e6:
ed:21:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:30 2026 by rpki-client